Ivorette

Privacy Policy

Last updated: September 2026. How Ivorette SAS handles personal information and advertising-platform data.

1. Who we are

Ivorette is a paid-media agency managing Google Ads and Microsoft Advertising accounts for clients. General: contact@ivorette.com. Privacy: privacy@ivorette.com.

2. Personal information

  • Name, email, and company details from inquiries and onboarding.
  • Service account identifiers and correspondence.
  • Contract and invoice records. Card data is never collected on this website.

3. Advertising-platform data (only what you authorize)

Through each platform's OAuth authorization: campaigns, ad groups, ads, budgets, bids, spend, clicks, impressions, conversions, performance metrics, account identifiers, and structure. Google scope: https://www.googleapis.com/auth/adwords. Microsoft permission: https://ads.microsoft.com/msads.manage (plus offline_access where refresh tokens maintain a connection you requested).

4. How we use it

  • Connecting and verifying your accounts.
  • Campaign analysis, pacing, and performance monitoring.
  • The weekly letter: summaries, alerts, recommendations.
  • Actions you approve.

Google Limited Use: Google user data is used only for the purposes in this policy and per Google's API Services User Data Policy, including Limited Use. We do not sell it or use it for unrelated advertising.

5. AI processing

Advertising data may be processed by our own AI layer on systems we operate (locally-hosted models) to draft letters and flag anomalies. No external AI provider receives your Google Ads data. Outputs are advisory; your accounts change only with your approval.

6. Sharing

Only hosting and email-delivery providers under confidentiality; Google/Microsoft as your integrations require; authorities where legally required; a successor with notice. We do not sell personal information or share it for cross-context behavioral advertising.

7. Retention and deletion

Transient processing: rolling reporting cache up to 90 days. Tokens encrypted and separate. On disconnect, tokens deleted promptly; cached data for that account deleted within 30 days. Full deletion requests honored within 30 days except legal retention (e.g., invoices). Write to privacy@ivorette.com.

8. Revoking access

  • Through us, any time.
  • Google: your account's third-party access settings.
  • Microsoft: your account's app settings.

9. Security

HTTPS/TLS in transit. We encrypt credentials and tokens at rest, never handle your platform passwords, restrict access by role under least privilege, revoke on disconnect, and maintain monitoring with incident response including legally required notification. No certifications claimed. See Security.

10. Notifications

Letters and alerts go only to addresses you provide, with preference and opt-out instructions.

11. Your rights (GDPR / CCPA/CPRA)

Access, correction, deletion, portability, restriction, objection; California know/delete/correct rights; we do not sell data. Bases: contract, consent, legitimate interests, legal obligation. Contact privacy@ivorette.com; DPAs on request.

12. Children

Business service for users 18+. Not directed to children.

13. Cookies

Strictly-necessary functions only — no analytics or advertising cookies. See Cookie Policy.

14. Changes

Posted here with a new date; connected clients also notified by email before material changes.