Privacy Policy

Last updated: October 16, 2026

1. Who we are

Kerdixo is operated by Kerdixo, Inc., a Delaware corporation ("Kerdixo", "we"). For the purposes of data-protection law, Kerdixo, Inc. is the controller of the personal data described in this policy. You can reach us at [email protected] or by post at Kerdixo, Inc., 2810 N Church St, #89096, Wilmington, DE 19802, United States.

2. Information we collect

• Account details from Google sign-in, such as your name and email.
• Identity verification data, handled by our third-party KYC provider.
• Your operating profile from onboarding: verticals, geos, platforms, and spend ranges.
• Connected ad-account data. When you connect an ad account (such as Meta or TikTok), we access and process the data needed to operate your campaigns: campaign and ad structures, budgets and spend, delivery and performance metrics, creatives, and conversion events and postbacks.
• Form submissions on this site: your email when you request access, and the details you send through the advertiser contact form (company, website, name, work email, vertical, expected volume, markets, and notes).
• Technical and usage data, such as device, log, IP, and — with your consent — analytics data.

3. How we use it

To review your application, operate campaigns on your connected accounts inside the guardrails you approve, prepare and improve your recommendations, operate and secure the platform, respond to your messages, and meet legal and verification obligations.

4. Automated decision-making

Kerdixo's core function is automated: within guardrails you configure and approve, the operator takes media-buying actions on your connected ad accounts — launching, pausing, refreshing, and shifting budget. These decisions concern your campaigns, not evaluations of individuals. You can keep any campaign in Shadow mode, where every action is proposed for your review instead of executed, and you can contest any automated action or request human review at any time by contacting us.

5. Legal bases

Where the GDPR applies, we process your data to perform our contract with you (operating your campaigns, reviewing your application), for our legitimate interests (securing and improving the platform), with your consent (analytics cookies), and to comply with legal obligations (identity verification and record-keeping).

6. How we share

We share data with our KYC provider, the ad platforms you connect, and service providers acting on our behalf — hosting and infrastructure, email delivery, and, with your consent, analytics. We maintain a current list of sub-processors, available on request at [email protected]. We do not sell your personal data.

7. Public aggregate metrics

We may publish aggregate, anonymised operating metrics on a public dashboard — system-level figures such as learning rate, guardrail triggers, and availability. These never include customer identities, campaign-level economics, or any data that could identify you or your accounts.

8. Retention

We retain account and operating data while needed to provide the service or for another lawful purpose. When your account closes, or you request deletion, we delete the relevant data without undue delay, subject to applicable legal retention requirements and exceptions. Connected-platform data is also subject to the relevant platform's retention and deletion requirements. Disconnecting an ad account alone does not delete stored campaign history.

Contact-form submissions are ordinarily kept for up to 24 months and server logs for up to 12 months. These ordinary retention limits do not delay a valid deletion request. Financial and identity-verification records are retained only where a relevant legal obligation or exception applies, and only for the necessary period. We explain any retained data and the reason in our response to a deletion request.

For how to request deletion, identity verification, and response deadlines, see Deleting your data.

9. Your rights

All Kerdixo users can request deletion of their personal data or connected-platform data. Depending on where you live, you may also have rights to access, correction, portability, objection or restriction of processing, and withdrawal of consent. Contact [email protected] to exercise these rights. See Deleting your data to disconnect an ad account, request deletion of specific connected-platform data, or close your account. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority.

10. Security and breach notification

We use technical and organizational measures to protect your data. No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authorities without undue delay, as applicable law requires.

11. Cookies and analytics

We use essential cookies to operate the site. Analytics (Google Analytics, loaded through Google Tag Manager) runs only if you accept it in the consent banner, and you can change your choice at any time via the "Cookie preferences" link in the footer. Declining analytics never limits what you can do on the site.

12. International transfers

Your data is processed in the United States and may be processed in other countries. Where data of EEA or UK residents is transferred, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses.

13. Children

Kerdixo is not intended for anyone under 18.

14. Changes

We may update this policy. The date above reflects the latest version.

15. Contact

Privacy questions: [email protected], or Kerdixo, Inc., 2810 N Church St, #89096, Wilmington, DE 19802, United States.