Privacy Policy

Agency OS ("AOS", "we", "us", or "our") is operated by Senior 360 Ltd, a company registered in England and Wales (Companies House No. 16346188; VAT GB 495 351 857), with its registered office at Great Portland Street, London, W1W 5PF, United Kingdom. We operate the Agency OS platform (agencyos-platform.com) and the AOS Ads Connector application. This Privacy Policy describes how we collect, use, and protect information when you use our services.

We collect the following types of information:

• Account Information: Name, email address, and password when you create an account.
• Advertising Data: Campaign performance metrics, ad account information, and related data from connected platforms (Google Ads, Meta Ads, GA4) accessed through authorized OAuth connections.
• Client Data: Business information about your advertising clients that you input into the platform.
• Usage Data: Information about how you interact with the platform, including pages visited, features used, and actions taken.

We use the collected information to:

• Provide, maintain, and improve the Agency OS platform.
• Generate AI-powered media proposals, campaign recommendations, and performance reports.
• Synchronize advertising data from connected platforms (Google Ads, Meta Ads, GA4, Mailchimp).
• Manage user authentication and authorization.
• Send operational notifications related to your account and campaigns.

Agency OS integrates with third-party advertising platforms through their official APIs:

• Meta (Facebook) Ads: We access your ad account data through Meta's Marketing API using OAuth 2.0 authorization. We request permissions including ads_read, ads_management, and business_management. Data accessed includes campaign performance metrics, ad account information, and campaign structure.
• Google Ads: We access your Google Ads data through the Google Ads API using OAuth 2.0 authorization.
• Google Analytics 4: We access analytics data through the GA4 Data API.

Access tokens are stored securely and are only used to retrieve data you have explicitly authorized. You can revoke access at any time through the respective platform's settings.

Your data is stored on secure, access-controlled infrastructure. We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, secure server-side token storage, role-based access control, mandatory two-factor authentication, and a full audit trail. Advertising platform credentials (OAuth tokens) are stored server-side and are never exposed in client-side code.

AOS does not use advertising or marketing cookies. Our website analytics are cookie-free and do not use personally identifiable information. We use strictly necessary cookies only where required to keep you signed in and to secure your session.

We do not sell, trade, or rent your personal information to third parties. We only share data with third-party services as necessary to provide the platform's functionality (e.g., cloud hosting, AI processing). All third-party service providers are contractually obligated to protect your data.

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Revoke third-party platform access at any time.
• Export your data in a machine-readable format.

To request deletion of your data, including any data obtained through Meta or Google platform integrations, please contact us at [email protected]. We will process your request within 30 days.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us at: [email protected]

To help us route your message, please use a clear subject line: use "Privacy Request — AOS" for privacy enquiries, "Data Protection Request — AOS" for data subject requests, and "Enterprise Procurement Request — AOS" for DPA or procurement requests.