Privacy Policy

Last updated: 13 August 2026

Cyder (“we”, “us”) is an AI-assisted advertising operations platform for marketing agencies, operated from India and available at cyder.in. This policy explains, in plain language, what data we collect, why, and what control you have over it.

Data we collect

Account data.Your name and email address when you sign in (via Google or an email magic link), and your agency’s workspace settings.
Advertising data from Meta. When you connect a Meta account, we access — with your explicit OAuth authorization — the ad accounts you choose to import: campaign, ad set, ad, and creative metadata, and daily performance metrics (spend, impressions, reach, clicks, conversions, video views, and similar). We request only the permissions needed to read this data and, where you approve individual actions, to apply bounded changes (pausing an ad, adjusting a budget within capped limits).
Commerce data (optional). If you connect a revenue source (e.g., Shopify or Razorpay), we store daily revenue and order counts to compute blended efficiency metrics.
Form submissions. If you apply to our design-partner program, the details you submit (name, email, agency information).

How we use it

To generate audits, decisions, reports, and insights for your agency only.
To execute actions on your ad accounts — only ones you or your team explicitly approve.
To operate, secure, and improve the product, including aggregate, non-identifying usage analysis.

What we never do

We never sell your data, or share it with other customers. Each agency’s data lives in its own tenant.
We never use your ad-account data to train AI models.
We never take actions on your ad accounts without your authorization.

Storage & security

Data is stored with our cloud providers (Vercel for hosting, Neon for the database, region Singapore). Meta access tokens are encrypted at rest (AES-256-GCM). AI analysis uses Anthropic’s API on a per-tenant basis; transactional email uses Resend. We use PostHog for product analytics — including session replays that help us fix rough edges — with all form inputs masked. These processors handle data only to provide their service to us.

Retention & deletion

Advertising data is retained while your account is active. Disconnecting Meta from Settings revokes our access; you can request full deletion of your workspace and all associated data at any time — see data deletion instructions. We complete deletion requests within 30 days.

Your rights

Depending on your jurisdiction (including India’s DPDP Act and the EU GDPR), you may have rights to access, correct, export, or erase your personal data, and to withdraw consent. To exercise any of these, email us — we respond within 7 days.

Contact

Aman Gupta · aman@cyder.in

We’ll update this page as the product evolves; material changes will be noted to active customers by email.