What we process. Email lists you upload (first-party lists you are authorized to use). During processing, each address is normalized and converted to an irreversible SHA-256 hash; enrichment and caching are keyed on that hash. The raw uploaded file is deleted once your run completes (or is rejected) — we do not retain readable email addresses, and re-running a list requires re-uploading it.
Enrichment. Hashed identifiers are matched against licensed consumer-data vendors (acting as our data processors) to derive location and aggregate audience attributes. Results are cached by hash so the same address is never purchased twice, including across customers of this service. Non-US records are excluded from enrichment.
What you see. Aggregate, group-level insights only — no per-person profiles are displayed or exported. Google Ads Customer Match files contain only SHA-256 hashes, per Google's specification.
Google account access. Signing in uses Google OAuth. If you connect Google Ads, we store an encrypted authorization token to create paused draft campaigns in accounts you choose; we never enable campaigns, change budgets on active campaigns, or access anything beyond the Google Ads scope you grant. Disconnecting deletes the token.
Retention & contact. Aggregate results and hashed caches persist to serve you and control costs; ask us to delete your account's data at any time via the operator.