Security and data

We collect as little as we can and delete it as soon as we can.

Audience Sync handles the lists you upload. Here is exactly what it keeps, how it's protected and when it's gone.

How we protect it

Five rules we build around.

Hashing on arrival

Email addresses are hashed with SHA-256 as soon as they arrive and never stored in plain text.

Encryption

TLS 1.2+ in transit, encrypted at rest. Access tokens are stored encrypted.

Least access

Only the ads account permissions Audience Sync needs. Staff access is limited by role and logged.

Files deleted

Uploaded files are deleted after processing. Only hashed emails and matching columns are kept.

One customer, one purpose

Your lists build your audiences only. Never pooled, shared or resold.

What we collect

Only what an audience needs.

List data comes only from the files you upload and the rows you add by hand. We don't buy contact data or enrich your lists from outside sources.

  • Lists you upload, and only the columns you map
  • Access tokens for the ads account you connect
  • Audience status from your ads account: match rate, size and readiness
  • Account details for the people on your team who use Audience Sync

Retention

When it's deleted.

Uploaded filesDeleted after processing
Stored list dataDeleted within 30 days of removing the audience or closing your account
LogsKept up to 90 days
Account detailsKept up to 90 days after the account closes

Audiences already created in your ads account stay there until you delete them.

Policies

The full details

Read our privacy policy and terms of service.

Found a security issue?

Email [email protected]. We aim to acknowledge reports within 2 business days.