Security and data handling

In place

• No changes to ad accounts: the product has no function that creates, edits or pauses campaigns.
• Credentials stored by the service are encrypted (AES-256-GCM, or the operating system keychain).
• Database backups are encrypted before they leave the server.
• Sign-in sessions use a cookie that scripts cannot read and that is not sent from other sites.
• Access roles (owner, admin, analyst, viewer) and a record of authorisation decisions.
• This website sets no cookies and loads no third-party scripts.

Third-party processing

Data is synchronised through a third-party data connector. Explanations and creative drafts can use third-party AI providers; these are optional features.

The list of providers will be published with the privacy policy before the service opens beyond early access.

Not in place

• CIGOS holds no security certification.
• Automatic deletion after a fixed retention period is not built yet. Deletion is done on request.
• Self-service data export is not built yet.

Report a security problem

Write to [email protected]. Please include the steps to reproduce.