Your business data should have a defined job.

This Privacy Policy applies to Aperta's public website, application, support interactions, and connected marketing services. Aperta acts as a controller or business for its own account administration, security, billing, support, and website operations. Aperta generally acts as a processor or service provider when handling a customer's contacts, campaign records, analytics, messages, website events, and connected-platform data under that customer's instructions.

Customers remain responsible for their own privacy notices, lawful bases, audience permissions, consent records, and use of information they direct Aperta to process.

When a customer connects Google, Aperta may access the Google accounts, properties, or advertising accounts the customer selects. Depending on the enabled connection, this can include Search Console site and search-performance data; Google Analytics account, property, traffic, event, and conversion data; and Google Ads account, campaign, spend, audience, and conversion information.

Aperta uses Google user data only to provide customer-facing setup, analytics, SEO research, conversion measurement, reporting, recommendations, and approved advertising operations. Aperta does not use Google user data for advertising to the customer, sell it, combine it into a data-broker profile, or use it to train general-purpose AI models.

Google access and refresh tokens are encrypted and used only for authorized API requests. Access is limited to automated service processes and, when necessary, authorized personnel providing security or customer-requested support. Google user data is shared only with infrastructure providers that help operate Aperta, or with destinations the customer explicitly directs.

Aperta's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

When a customer connects Meta, Aperta may receive the Facebook Pages and Instagram professional accounts the customer manages, account and Page identifiers, profile information, published content, engagement and insight metrics, and the permissions needed to create customer-approved posts. Aperta does not publish to a personal Facebook profile.

When a customer connects X, Aperta may receive the authorized account's identifier, profile information, posts, mentions, and available performance metrics. Aperta uses granted write access only for work the customer has approved under its saved publishing controls.

Connected-platform data is used to map the correct business account, prepare and publish approved content, import performance evidence, learn from results, and verify delivery. Customers can disconnect a provider at any time from Aperta and can also revoke access in the provider's own settings.

Aperta uses information to provide and personalize the service; authenticate users; enforce workspace roles, budgets, approvals, and quality controls; connect authorized services; generate and publish approved work; measure results; process billing; prevent abuse; troubleshoot; support customers; and comply with law.

Information may be disclosed to hosting, storage, authentication, AI, analytics, billing, email, support, security, and other service providers acting under contract; to connected platforms at the customer's direction; during a corporate transaction subject to safeguards; or when reasonably necessary to comply with law or protect rights and safety.

Aperta does not sell personal information. Customer-directed advertising, publishing, outreach, or audience transmission is performed only under the customer's instructions and permissions.

Aperta uses tenant isolation, encrypted transport and connected credentials, least-privilege access, role-based permissions, step-up authentication for protected actions, audit trails, provider response verification, and bounded automation. No system is perfectly secure.

Deletion instructions and provider-specific revocation steps are available on the Data Deletion page.

Depending on location, individuals may request access, correction, deletion, portability, restriction, objection, or information about processing; withdraw consent; opt out of a sale or qualifying sharing; and appeal a decision. Aperta will not discriminate against someone for exercising a privacy right.

Send a request to privacy@useaperta.com. Aperta may verify identity and authority before acting. Requests concerning records controlled by an Aperta customer may be directed to that customer.

Aperta is a business service for adults and is not directed to children under 18. Do not use Aperta to profile or target children or to process regulated sensitive data without a written agreement.

Material changes will be posted on this page and, when appropriate, announced through the application or account email. Questions, rights requests, and privacy complaints may be sent to privacy@useaperta.com. Security or abuse reports may be sent to abuse@useaperta.com.