Privacy Policy
Effective date: January 1, 2025 · Last updated: August 23, 2026
Information We Collect
We collect information you provide directly to us, such as when you create an account, contact us, or use our services. This includes name, email address, company information, and payment details.
How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, process transactions, send communications, and comply with legal obligations.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is encrypted at rest (AES-256) and in transit (TLS 1.3).
Single-Tenant Architecture
Your data is completely isolated from other customers. We use single-tenant infrastructure to ensure your business information is never commingled with or accessible to other users.
AI Data Privacy
Your Team learns everything about your business, and that knowledge lives on your dedicated server. We use Anthropic's zero-retention API, which means your data is never stored by or used to train the underlying AI models. Your business data stays on your server.
Connected Advertising Accounts (Google & Meta)
When you connect a Google Ads or Meta (Facebook and Instagram) advertising account to Conduk, you authorize us — through the platforms' official APIs and your explicit OAuth consent — to access and manage that account on your behalf. This includes reading and, at your direction, modifying campaigns, ad groups and ad sets, ads, budgets, keywords, audiences, and performance metrics such as impressions, clicks, spend, and conversions. We access only the specific accounts you select during connection, and only the data needed to create, manage, optimize, and report on your advertising. We never access advertising accounts you have not connected.
How We Handle Advertising Platform Data
Access and refresh tokens issued by Google and Meta are stored encrypted at rest (AES-256) and are used solely to operate the advertising accounts you connect, within Conduk, for you. We do not sell advertising data, and we do not share it with third parties or use it for any purpose other than providing the service to you. Conduk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Data obtained through the Meta Marketing API is handled in accordance with Meta's Platform Terms and Developer Policies.
Connected Social Media Accounts (LinkedIn, Facebook & Instagram)
When you connect a LinkedIn profile or organization page, a Facebook Page, or an Instagram business account to Conduk, you authorize us — through each platform's official API and your explicit OAuth consent — to publish content to that account on your behalf and to read engagement metrics (such as impressions, reactions, comments, and shares) for the content Conduk publishes. Every post is created at your direction: content is drafted inside Conduk, and nothing is published to a connected social account without your approval under the publishing rules you configure. We access only the pages, profiles, and accounts you explicitly select during connection.
Connected Email, Calendar & Contacts (Google Workspace & Microsoft 365)
If you connect a Google or Microsoft 365 account, you choose which capabilities to grant: reading your email so your AI team can summarize your inbox, flag messages that need your attention, and recommend which to reply to; reading and managing calendar events to schedule on your behalf; and reading contacts to recognize who correspondence is from. Email content is processed only to provide these features to you: it is analyzed transiently, is never used to train AI models (we use Anthropic's zero-retention API), is never used for advertising, and is never sold. No human at Conduk reads your email except with your explicit permission for support, or as required for security or by law. Conduk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting Accounts & Data Deletion
You can disconnect any connected account — advertising, social media, email, calendar, or contacts — at any time from Conduk's settings; disconnection immediately revokes and deletes the stored access token for that account. You may also revoke Conduk's access directly from your Google Account's connected-apps permissions, your Meta Business settings, your LinkedIn permitted-services settings, or your Microsoft account's app permissions. To request deletion of data Conduk holds from a connected account, disconnect the account or email privacy@conduk.ai — connected-account tokens and any cached platform data are deleted on disconnection or when your account is closed.
Your Rights
You have the right to access, correct, or delete your personal information. You may also request a copy of the data we hold about you or object to certain processing activities.
Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@conduk.ai