Privacy Policy

1. Introduction

Etria is run by Eterna Elements LLC (“we”, “us”). This Privacy Policy describes what we collect, how we use it, who we share it with, and how long we keep it when you use our website and application (the “Service”). If you do not agree, please do not use the Service.

2. What we collect

• Account data: your email address, a password (held by our sign-in provider as a secure hash; we never see or store it in plain text) or your Google sign-in, an optional display name, and the session tokens that keep you signed in. We record when you sign in and how (password or Google).
• Organizations and their members: the organizations you create and their logo if you add one, the email addresses of people you invite, and the business numbers you enter (for example price, costs, profit goal and how long a sale takes), including a description of your business if you ask us to work those numbers out from it.
• Google Ads data: the reports our script sends from your Google Ads account each day, or the files you download from Google Ads and upload on the Imports screen. They hold your account's ID, name and currency; campaigns, ad groups, ads and their headlines and descriptions with Google's ratings, keywords, search terms, audiences, settings, and performance figures such as spend, clicks and conversions (also by conversion action, device, hour and location); Google's own recommendations for the account; and the account's change history for the last 30 days: what changed, when, and the kind of tool that made the change (for example the Google Ads website, a script or an automatic Google recommendation). We do not collect the name or email of the person who made a change. We keep uploaded files in private storage and the data in our database, to build Today, This week, Results, the account audit and the client report.
• What you do in the app: your decisions (for example which search terms to block, and the changes you approve for the script to make), the tests you plan and mark done, campaign plans, notes, the questions you ask the specialist, and the notes you write into client reports.
• Google accounts you choose to connect: if you connect Google Analytics, Google Tag Manager or Search Console to check your tracking or site, we read the settings and reports needed for that check, with read-only access where Google offers it. The access token is kept on our servers and never sent to your browser.
• Support: the tickets and messages you send us, our replies, and the draft answers our support assistant writes for our team (a person reads each one before anything is sent to you).
• Billing: your plan and its usage. Card details are entered with our payment processor (Stripe) and never reach us.
• Technical data: IP address, browser and device type, timestamps and error logs, to run and secure the Service. When a request fails on our side, we record what failed and the account it concerned, so we can find and fix problems before you report them.

The Google Ads script: if you choose to, you paste our script into your own Google Ads account (Tools → Scripts) and authorize it there with your Google sign-in; Google shows you what it may access. Once a day it reads the reports listed above and sends them to us over an encrypted connection with an upload key that belongs to your organization. It changes nothing on its own: it only adds the negative keywords and pauses the keywords that you or another member of your organization approve in the Service, on its next run, and reports back what it did. It never removes anything or changes bids or budgets. You can stop it at any time by removing or pausing it in Google Ads, or by revoking its upload key in the Service, after which we accept nothing sent with that key.

Google Ads API connection (planned): the Service does not yet connect to your Google Ads account through the Google Ads API; the script or your uploads bring the data. When a connection becomes available, you choose to link an account through Google sign-in, and we read the same reports through the Google Ads API with read-only access in place of the uploads. We make no changes to your account through it, and you can disconnect at any time, which stops the reads and deletes the access token.

3. How we use information

• To provide the Service: build your daily and weekly work, explain each suggestion, measure results and answer support requests.
• To send the emails the Service needs: sign-in and password emails, organization invites and support replies; and, about the accounts you belong to, alerts when an import shows a problem (for example conversions stopped being counted, sales fell sharply, a campaign spends with no sale, or spend jumped), reminders when the Google Ads script is not set up or has stopped sending data, and the Monday summary of your week. You can switch the alerts and reminders, and the Monday summary, off in your Profile or from the link in each email.
• To authenticate you, keep the Service secure and prevent abuse, and to notice when an account's script stops, an import fails or errors occur, so we can help.
• To comply with legal obligations and respond to lawful requests.

We do not sell your data, use it for advertising, or use it to train AI models.

4. Who we share it with

We share data only with the providers that run parts of the Service, and only what each one needs:

• Supabase — sign-in, the database and private file storage (hosted in the European Union).
• Our hosting provider — runs the website and application, and receives requests and logs.
• Google Gemini — writes the plain-language explanations, ad copy drafts and keyword suggestions, answers the questions you ask the specialist, works out business numbers from your own description, and drafts support answers for our team. We send the parts needed for each one, for example search terms, keywords, ad text, landing page text, your account's recent figures and changes, your business numbers, your question or description, or a support ticket.
• Google APIs — Keyword Planner for search volumes (we send keywords and a location), PageSpeed Insights for page speed (we send the page address), and the Google Analytics, Tag Manager and Search Console accounts you choose to connect.
• Serper — search results for keyword discovery (we send the search phrases), and Jina Reader — reads the text of web pages you ask us to check (we send the page address).
• Resend — sends our emails (we send your email address and the message).
• Stripe — payments and subscriptions.

Each provider handles data under its own terms and privacy policy, and under contractual safeguards where required.

5. Data from Google

Etria's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We hold the Google Ads data our script sends, or that you upload, to the same standard. We use Google data only to provide the features you use in the Service, do not use it for advertising, and do not sell it. People at Eterna Elements LLC do not read it unless you ask us to (for example in a support request), it is needed for security or to comply with the law.

6. Cookies and storage

We use your browser's storage to keep you signed in and to remember small choices, such as a selected tab. We do not use advertising or analytics cookies. Blocking browser storage stops sign-in from working.

7. Retention and deletion

We keep your data while your account is active. Imported Google Ads reports and their files stay until you delete them on the Imports screen or the organization is deleted, which also deletes its uploaded files from storage. Records of failed requests are deleted after 30 days. Database backups may keep copies for a limited time afterwards.

To access, correct, export or delete your personal data, or to delete your account, contact your account Profile page or the support email in the site footer (set NEXT_PUBLIC_SUPPORT_EMAIL for production). We will respond within a reasonable time and may need to verify your identity. We may keep some records where the law requires it, for example billing records.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. Contact us using the details below to exercise these rights. You may also lodge a complaint with a supervisory authority where applicable.

9. International transfers

Our database and file storage are in the European Union. Some providers listed above, such as Google, Stripe and Resend, may process data in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers from the EEA, UK or Switzerland.

10. Children

The Service is not directed at children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children.

11. Changes

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes may be communicated by email or in-app notice where appropriate.

12. Contact

For privacy questions or requests, contact your account Profile page or the support email in the site footer (set NEXT_PUBLIC_SUPPORT_EMAIL for production). You may also review our Terms of Service.