ClearSpend Privacy Policy

This Privacy Policy explains how ClearSpend ("ClearSpend," "we," "us," or "our") collects, uses, and protects information when you use our website and audit tool (the "Service"), located at https://clearspend.dev/.

1. Who We Are

ClearSpend is an advertising audit tool that helps businesses identify wasted ad spend, quality issues, and potential advertising-policy risk across Google Ads, Meta Ads, and TikTok Ads accounts.

2. What Information We Collect

2.1 Ad performance data you upload (CSV audits)

When you upload a CSV export from Google Ads, Meta Ads, or TikTok Ads, that file is processed entirely in your browser. We do not upload, transmit, or store the contents of your CSV file, your campaign data, or any ad account information on our servers. Once you close or refresh the page, that data is gone unless you've downloaded a copy yourself.

2.2 Information you provide voluntarily

If you choose to download a PDF audit report, we ask for your name, email address, and business name. We also store the summary results of that specific audit (platform used, total spend, and total wasted spend flagged) alongside your contact information, so we can send you your report and, where relevant, follow up about the findings. You are never required to provide this information to use the free, in-browser audit — only to receive the downloadable PDF and be added to our contact list.

2.3 Aggregate, non-identifying statistics

We track a running total of how many audits have been run and how much wasted spend has been flagged across all users of the Service. This data is aggregate only and is never linked back to any individual person, business, or ad account.

2.4 Technical and log data

Like most websites, our hosting provider automatically logs standard technical information (IP address, browser type, device type, pages visited, timestamps) for security, performance, and abuse-prevention purposes.

2.5 Google user data (future Google Ads API integration)

If and when ClearSpend offers a direct, authenticated connection to your Google Ads account (rather than a manual CSV upload), we will request your permission via Google's own sign-in and consent process before accessing any data. In that case:

• We will only request the minimum scope of access needed to perform the audit functions described in the Service.
• We will not use Google user data for any purpose other than providing and improving the specific audit features you've requested.
• We will not sell Google user data, and we will not use it for advertising purposes.
• We will not transfer Google user data to third parties except as needed to provide the Service (e.g., our hosting/database provider), as required by law, or as part of a merger or acquisition, and any such transfer will remain subject to this Privacy Policy's commitments.
• Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, wherever applicable to the scopes we request.

3. How We Use Information

We use the information described above to:

• Generate and deliver the audit report you requested
• Maintain the aggregate usage statistics shown on our website
• Respond to you if you contact us for support
• Improve the accuracy and usefulness of the Service
• Detect and prevent abuse, fraud, or security issues

We do not sell your personal information. We do not use your uploaded ad data for any purpose, since we never receive or store it in the first place.

4. Third-Party Service Providers

We rely on the following categories of third-party providers to operate the Service:

• Database/backend hosting (e.g., Supabase) — stores the lead information described in Section 2.2 and the aggregate statistics described in Section 2.3.
• Website hosting — serves the Service and processes the technical log data described in Section 2.4.

We do not share your information with advertisers, data brokers, or marketing networks.

5. Data Retention

We retain the lead/contact information described in Section 2.2 until you ask us to delete it, or until it's no longer needed for the purposes described in this policy, whichever comes first. Aggregate statistics are retained indefinitely since they contain no personal information.

6. Your Rights and Choices

Depending on where you live, you may have the right to:

• Request access to the personal information we hold about you
• Request correction or deletion of that information
• Object to or restrict certain processing
• Request a copy of your information in a portable format

To exercise any of these rights, contact us at mk4hartling@gmail.com. This includes rights available to California residents under the CCPA/CPRA and to individuals in the EU/UK under the GDPR, to the extent those laws apply to you.

7. Cookies

[If you add analytics or other tracking cookies, describe them here — e.g., "We use [tool] to understand aggregate usage of our website. See Section X for how to control cookie preferences." If the site currently uses no cookies beyond what's strictly necessary for it to function, state that plainly instead.]

8. Children's Privacy

The Service is intended for business use and is not directed at, or knowingly used to collect information from, individuals under the age of 16. If you believe a minor has provided us with personal information, contact us and we will delete it.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect the information we hold. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

11. Contact Us

Questions about this Privacy Policy can be directed to mk4hartling@gmail.com.