Privacy Policy
Effective 6 November 2026
This policy explains how Onda LLC ("Onda", "we") handles data in Onda Platform, the tools our team and our clients sign in to at ondaworks.ai (Audit QC, Work, Reports and our sign-in service). It does not cover our public marketing site, ondaworks.com.
Who uses Onda Platform
Onda staff and the clients whose advertising we manage. Access is by invitation only. Onda Platform is not offered to the public.
What data we access
- Advertising and store data our clients authorize. From the accounts a client gives Onda access to (for example Google Ads, Meta, Amazon, Klaviyo, Shopify and Google Analytics) we read account settings, campaign settings, conversion setup, budgets, billing status, change history and performance figures such as spend, clicks, conversions and revenue.
- Sign-in details. For people who sign in: name, work email address and the role we assign.
We use totals and account-level figures. We do not store the personal details of our clients' own customers (such as shopper names, email addresses or phone numbers) from these accounts.
How we use it
- To check that each client's accounts are set up correctly and to spot problems and performance changes.
- To alert the Onda team member responsible for the account and track the fix.
- To prepare reports for that client.
Data from one client's accounts is used only for work on that client. We do not sell data, use it for advertising, or share it with anyone other than the client it belongs to, Onda staff working on that client, and the service providers listed below. No change is made to a client's ad account without a person on our team approving it.
Google user data
Onda Platform's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Ads data only to provide the auditing, alerting and reporting described above, and we do not use it to train general-purpose AI models.
Service providers
Onda Platform runs on Google Cloud (United States) and Cloudflare. Some data from these accounts reaches us through Supermetrics, a reporting connector. We may use AI services to help summarize findings, under terms that do not allow the provider to train its models on our data. These providers process data only to run the service for us.
Security
Data is encrypted in transit, access requires sign-in, and each person sees only the clients they work on. API keys and access tokens are kept in a secrets manager, not in our code.
How long we keep it
We keep a client's data while we work with that client and delete it within 90 days after the work ends, or sooner if the client asks.
Your choices
A client can remove Onda's access to an account at any time from that platform's settings (in Google Ads: Admin, then Access and security). To ask what data we hold or to have it deleted, email [email protected].
Changes
If we change this policy we will update the date above and tell our clients about significant changes.
Contact
Onda LLC · [email protected]