Privacy Policy

Last updated: August 1, 2026

1. Who we are

Kerdixo is operated by Kerdixo, Inc., a Delaware corporation ("Kerdixo", "we"). For the purposes of data-protection law, Kerdixo, Inc. is the controller of the personal data described in this policy. You can reach us at [email protected] or by post at Kerdixo, Inc., 2810 N Church St, #89096, Wilmington, DE 19802, United States.

2. Information we collect

• Account details from Google sign-in, such as your name and email.
• Identity verification data, handled by our third-party KYC provider.
• Your operating profile from onboarding: verticals, geos, platforms, and spend ranges.
• Connected ad-account data. When you connect an ad account (such as Meta or TikTok), we access and process the data needed to operate your campaigns: campaign and ad structures, budgets and spend, delivery and performance metrics, creatives, and conversion events and postbacks.
• Form submissions on this site: your email when you request access, and the details you send through the advertiser contact form (company, website, name, work email, vertical, expected volume, markets, and notes).
• Technical and usage data, such as device, log, IP, and — with your consent — analytics data.

3. How we use it

To review your application, operate campaigns on your connected accounts inside the guardrails you approve, prepare and improve your recommendations, operate and secure the platform, respond to your messages, and meet legal and verification obligations.

4. Automated decision-making

Kerdixo's core function is automated: within guardrails you configure and approve, the operator takes media-buying actions on your connected ad accounts — launching, pausing, refreshing, and shifting budget. These decisions concern your campaigns, not evaluations of individuals. You can keep any campaign in Shadow mode, where every action is proposed for your review instead of executed, and you can contest any automated action or request human review at any time by contacting us.

5. Legal bases

Where the GDPR applies, we process your data to perform our contract with you (operating your campaigns, reviewing your application), for our legitimate interests (securing and improving the platform), with your consent (analytics cookies), and to comply with legal obligations (identity verification and record-keeping).

6. How we share

We share data with our KYC provider, the ad platforms you connect, and service providers acting on our behalf — hosting and infrastructure, email delivery, and, with your consent, analytics. We maintain a current list of sub-processors, available on request at [email protected]. We do not sell your personal data.

7. Public aggregate metrics

We may publish aggregate, anonymised operating metrics on a public dashboard — system-level figures such as learning rate, guardrail triggers, and availability. These never include customer identities, campaign-level economics, or any data that could identify you or your accounts.

8. Retention

We keep account and operating data for as long as your account is active and delete or anonymise it within 12 months of closure, unless law requires longer. Identity-verification records are kept as long as our compliance obligations require. Contact-form submissions are kept up to 24 months. Server logs are kept up to 12 months.

9. Your rights

Depending on where you live, you may request access, correction, deletion, or portability of your data, may object to or restrict certain processing, and may withdraw consent at any time. Contact [email protected] to exercise these rights. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority.

10. Security and breach notification

We use technical and organizational measures to protect your data. No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authorities without undue delay, as applicable law requires.

11. Cookies and analytics

We use essential cookies to operate the site. Analytics (Google Analytics, loaded through Google Tag Manager) runs only if you accept it in the consent banner, and you can change your choice at any time via the "Cookie preferences" link in the footer. Declining analytics never limits what you can do on the site.

12. International transfers

Your data is processed in the United States and may be processed in other countries. Where data of EEA or UK residents is transferred, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses.

13. Children

Kerdixo is not intended for anyone under 18.

14. Changes

We may update this policy. The date above reflects the latest version.

15. Contact

Privacy questions: [email protected], or Kerdixo, Inc., 2810 N Church St, #89096, Wilmington, DE 19802, United States.