Privacy Policy

Last updated: March 25, 2026

1. Introduction

Angreal, LLC ("Angreal," "we," "us," or "our") operates the Angreal marketing analytics platform at angreal.co and app.angreal.co. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and role.

Platform Integration Data

When you connect advertising platforms (Google Ads, Meta Ads, Amazon Ads, LinkedIn Ads, TikTok Ads, Shopify), we access campaign performance data including:

  • Campaign names, statuses, and budgets
  • Performance metrics (impressions, clicks, conversions, spend, revenue)
  • Ad account identifiers
  • For Shopify: order data, product data, and marketing campaign data

We access this data using OAuth tokens you authorize. We do not store your platform passwords. You can revoke access at any time by disconnecting the integration.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, and timestamps.

3. How We Use Your Information

  • Provide, maintain, and improve our analytics platform
  • Aggregate and display your campaign performance data across platforms
  • Generate attribution models, budget optimization recommendations, and anomaly alerts
  • Send service-related communications and notifications
  • Respond to your requests and provide customer support
  • Detect and prevent fraud or abuse

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service providers: Cloud infrastructure (AWS), authentication (Amazon Cognito), and payment processing providers that help us operate the platform
  • Legal requirements: When required by law, subpoena, or government request
  • Business transfers: In connection with a merger, acquisition, or sale of assets
  • With your consent: When you explicitly authorize sharing

We do not share your advertising campaign data with other Angreal customers or any third parties for their marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS/SSL) and at rest
  • OAuth 2.0 for platform integrations (we never store platform passwords)
  • Role-based access controls
  • Regular security reviews
  • Infrastructure hosted on Amazon Web Services (AWS) with VPC isolation

6. Data Retention

We retain your account information and campaign data for as long as your account is active. When you disconnect an integration, we stop syncing new data from that platform. When you delete your account, we delete your personal information and campaign data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your personal data
  • Export your data in a portable format
  • Opt out of certain data processing activities
  • Withdraw consent for data processing based on consent

To exercise any of these rights, contact us at privacy@angreal.co.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

9. International Data Transfers (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, your data may be transferred to and processed in the United States where our servers are located. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR.

10. Third-Party Integrations

Our platform connects to third-party advertising and e-commerce platforms. Each platform has its own privacy policy governing how they handle your data. We encourage you to review those policies. Our access to your data on these platforms is limited to the scopes you authorize during the OAuth connection process.

11. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking on our platform.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Angreal, LLC
Email: privacy@angreal.co
Website: angreal.co