Encryption
Every page and every API call runs over HTTPS. Access tokens for Meta and TikTok are encrypted before they are written to the database and are decrypted only inside the job that uploads a variant or reads its results. Passwords are stored as one way hashes and are never visible to anyone, including our support.
Ad account access and OAuth scopes
You connect Meta and TikTok through their own sign in screens. We never see your platform password. We ask only for what launching and measuring ads needs.
- Meta. ads_management and ads_read to create ad sets and read CTR, CPA and ROAS, business_management to list the ad accounts you choose, pages_show_list and pages_read_engagement to post ads as your Page.
- TikTok. Ad account management and reporting for the advertiser accounts you approve on the TikTok screen.
Disconnect a platform in the workspace at any time. The stored token is deleted, and you can also revoke access from the platform's own settings.
Single sign on
On the Agency plan, members sign in with their Google or Microsoft work account, so leaving the company also ends access to the workspace.
Roles
Every workspace has an owner and members with a role. Administrators manage billing, members and connected ad accounts. Editors import products, write hooks, render variants and launch tests, but cannot change billing or connections.
Audit log
The Agency plan records every change that matters: who connected or disconnected an ad account, who launched or paused a test, which kill rule switched a variant off and when, and changes to members and roles.
Data retention
- Product data, scripts, hooks and rendered videos stay in your workspace while your subscription is active, and you can export them at any time.
- Free previews started without an account lose the imported page content and generated text after 30 days.
- When you delete your account, your workspace data is deleted with it. Billing records stay for as long as tax law requires.
Report a security issue
Write to [email protected] with the steps to reproduce it. We reply to every report.