Who this policy covers
This Privacy Policy applies to EchoVerse AI and the EchoVerse AI public website, customer advertiser portal, developer interfaces, and related services that link to this policy.
Information we collect
Depending on how you use the service, we may collect account and identity information, business or workspace details, contact information, subscription and billing metadata, campaign settings, advertising destinations, uploaded or connected content, integration and OAuth metadata, API activity, support communications, device and browser information, security logs, and product usage data.
Payment-card details should be processed by the payment provider when billing is enabled. EchoVerse AI should retain only the payment and transaction identifiers needed to operate subscriptions, reconcile payments, prevent fraud, and provide support.
Why we use information
We use information to create and secure accounts; operate workspaces; provide campaign, creative, automation, analytics, API, billing, and support functions; detect abuse; enforce service rules; communicate about the service; comply with law; and improve product reliability and performance.
Where data-protection law requires a legal basis, processing may rely on performance of a contract, legitimate interests, consent, or compliance with legal obligations, depending on the activity and jurisdiction.
Connected services and advertising platforms
If you connect a website, app, social account, e-commerce service, analytics service, advertising account, or other third-party provider, EchoVerse AI may receive and send information necessary to provide the requested integration. Each third-party platform remains subject to its own terms and privacy practices.
Google API and Google Ads data
When you choose to connect Google Ads, EchoVerse AI uses OAuth to access only the Google Ads accounts you authorize. We do not ask for or store your Google password.
Depending on the features you use, information received from Google APIs may include Google Ads customer or manager account identifiers, accessible account hierarchy, campaign, ad group, ad and asset settings, video-asset metadata, performance metrics, and authorization metadata required to maintain the offline access you granted. Authorization tokens are protected in EchoVerse AI private infrastructure and are not exposed to other customer workspaces.
We use this information only to provide features you request, including discovery of authorized accounts, creation and management of supported Search and Demand Gen campaigns, management and upload of YouTube video assets through supported Google Ads services, reporting, optimization, security, and troubleshooting. EchoVerse AI does not sell Google user data and does not use it for unrelated purposes.
EchoVerse AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You may disconnect Google Ads in EchoVerse AI or revoke access from your Google Account. After disconnection, we stop new authorized API access and remove or invalidate active authorization tokens. Certain operational, security, billing, or audit records may be retained where reasonably necessary or legally required, as described in the Retention section of this policy.
How information may be shared
Information may be shared with service providers that support hosting, infrastructure, email delivery, payments, analytics, security, customer support, AI processing, and other contracted operations; with advertising or integration providers when you instruct us to connect or publish; with professional advisers; and with authorities where legally required. We do not describe customer conversations or account data as being sold to advertisers.
International data transfers
Because EchoVerse AI can support customers and service providers in different countries, information may be processed outside the country where it was collected. Where applicable law requires transfer safeguards, we will use appropriate legal mechanisms and contractual protections.
Retention
We retain personal information only for as long as reasonably necessary for the purposes described here, including account operation, contractual obligations, security, dispute resolution, fraud prevention, accounting, and legal compliance. Retention periods may vary by record type and applicable law.
Security
EchoVerse AI uses layered administrative and technical safeguards. These include restricted administrative access, hashed credentials where appropriate, scoped API keys, CSRF defenses, audit logging, protected private configuration, encrypted transport over HTTPS, and separation of public and private application components. No security program can guarantee that every incident will be prevented.
Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, objection, withdrawal of consent, or other privacy choices. We may need to verify your identity before fulfilling a request. Some information may be retained where required or permitted by law.
Children
EchoVerse AI is designed for business and professional use and is not intended for children. Do not create an account or submit personal information if you are below the minimum age required to enter into the service agreement in your jurisdiction.
Contact
Privacy questions or rights requests may be sent to admin@echoverse-ai.com.
Changes to this policy
We may update this policy to reflect service, legal, security, or operational changes. The effective date and version will be updated when a material revision is published.