This policy explains what InspectMyAds collects, how we use it, who we share it with, and how to delete or export it. We wrote it ourselves, in plain English. If anything here is unclear, email [email protected] and we'll explain it.
InspectMyAds is operated by Lafayette Footwear LLC, a Louisiana limited liability company. When we say "we" or "us," we mean InspectMyAds / Lafayette Footwear LLC. When we say "you," we mean the person or business with an account.
1. What we collect
We collect only what we need to deliver your audits:
- Your email address — how you sign in and how we send you audit recaps and account notifications.
- Your name — when you sign in with Google we receive the name on your Google account, so we can greet you and address our emails to you. You can leave it blank or change it; we never share it.
- Your Google OAuth tokens — the authorization Google gives us to read your Google Ads account on your behalf. These are encrypted at rest with a key that lives outside our database.
- Your Google Ads data — campaigns, ad groups, keywords, search terms, ad copy, conversion events, spend, and the recommendations Google is making on your account. We pull this through Google's official Google Ads API in read-only mode.
- Chat messages you send to your audit — your questions and our answers, so we can show the conversation history when you come back.
- Basic usage analytics — which pages you opened, when you ran an audit, what you clicked. We use this to fix bugs and figure out which features matter. We do not use third-party tracking pixels.
- Payment information — when you subscribe to a paid tier, Stripe handles your card details. We never see or store your card number; we only get back a customer ID and a subscription status.
2. How we use it
- Generate your audits. We send your Google Ads data to our AI provider (Anthropic) to produce the plain-English report you read in the dashboard.
- Send you recap emails. Once a week (or when an audit detects something urgent), we'll email you a short summary. You can turn these off from your dashboard.
- Send you occasional product news. We may email you about new features, tips, or offers relevant to your account. Every one of these has a one-click unsubscribe, and opting out never affects your audits or service.
- Improve the product. We use anonymized, aggregated patterns to figure out which audit findings matter most and which the AI gets wrong. We do not sell your data, and we never train external AI models on it.
- Bill you, if you upgrade. Stripe processes the charge, and we mark your account as paying.
- Answer support requests. When you email us, we read what you wrote and reply.
3. Who we share it with
We use a small number of trusted third-party services (called subprocessors) to run InspectMyAds. Each one only gets the slice of data it needs:
- Anthropic — runs the AI model (Claude) that writes your audit. Receives your Google Ads data at the moment an audit is generated. Anthropic does not train models on data sent through their API.
- Postmark — sends our transactional email (sign-in links, audit recaps, billing receipts). Receives your email address and the message body.
- Stripe — processes payments and manages your subscription. Receives your email and payment information. Card details never reach our servers.
- ElevenLabs — when you turn on the voice-summary feature, generates the spoken version of your audit. Receives the text of the audit summary (not your account number or contact details).
- Google — our data source. We read your Google Ads data through Google's official API, using the access you authorize when you sign in.
- Cloud hosting — our application and database run on a private server we operate directly. Your data is not stored on a third-party cloud provider's shared infrastructure.
We do not sell your data. We do not share it with marketers, ad networks, or analytics brokers. If we ever add a new subprocessor, we'll update this list and, for material additions, email active customers.
4. Read-only access to your Google Ads account
On the free audit, our code is built to read only — no part of our system modifies your account on the read-only tier. Implementor uses the same Google Ads access but routes through approved-change workflows you authorize each time, with a full audit log per change. In either case, we never touch your ad budget — Google bills your spend directly to your own card. You can audit and revoke our access at any time at myaccount.google.com/permissions.
Implementor customers explicitly grant write access through a separate consent screen. Free-audit customers stay read-only.
5. How long we keep your data
For active customers, we keep your account, audit history, and chat history for as long as you're a customer. Audit reports older than 12 months are summarized and the raw full text is deleted to save space.
If you cancel, we keep your data for 90 days in case you change your mind and want to reactivate without losing history. After 90 days we permanently delete your account data, including OAuth tokens, audit history, and chat messages.
6. Your rights — delete or export
You can ask us to delete your data or send you an export of it at any time. Email [email protected] from the address on your account. We will action delete requests within 7 business days and export requests within 14 business days. There's no charge for either.
7. Cookies
We use one cookie — a signed session cookie that keeps you logged in. It expires after 14 days of inactivity. We do not use tracking pixels, advertising cookies, or third-party analytics cookies. If that ever changes, we'll update this section and notify active customers.
8. Children's privacy
InspectMyAds is a tool for small business owners. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, email us and we'll delete the account.
9. Security
Your OAuth tokens are encrypted at rest using Fernet symmetric encryption, with the encryption key stored outside the database. Connections between you and us, and between us and Google / Anthropic / Stripe / Postmark, use HTTPS. We follow the principle of least privilege internally — only the application process needs access to your data, and we don't routinely look at it.
No security setup is perfect. If we discover a breach that affects your data, we will email you within 72 hours of confirming it.
10. Where your data lives
Our servers are located in the United States. If you sign up from outside the US, your data will be transferred to and stored in the US.
11. Changes to this policy
We'll update the "Last updated" date at the top of this page whenever we change anything. For material changes (new subprocessors, new categories of data we collect, a change in how we share data), we'll also email active customers at least 14 days before the change takes effect.
12. Contact
Questions, complaints, or requests:
[email protected]
Lafayette Footwear LLC
Lafayette, Louisiana, USA