Privacy Policy

Last updated: September 2026. How Ternovia SAS handles personal information and advertising-platform data.

1. Who we are

Ternovia runs pipeline-aware paid acquisition using Google Ads and Microsoft Advertising data. General: contact@ternovia.com. Privacy: privacy@ternovia.com.

2. Personal information

• Name, email, company details from inquiries and onboarding.
• Service account identifiers and correspondence.
• Contract/invoice records. No card data is collected on this website.

3. Advertising-platform data (only authorized accounts)

Via each platform's OAuth authorization: campaigns, ad groups, ads, budgets, bids, spend, clicks, impressions, conversions, performance metrics, account identifiers, structure. Google scope: https://www.googleapis.com/auth/adwords. Microsoft: https://ads.microsoft.com/msads.manage (+offline_access where refresh tokens maintain a requested connection).

4. Purposes

• Account connection and verification.
• Analysis, pacing, and anomaly detection.
• Summaries, alerts, recommendations.
• Approved campaign, ad, and budget actions.

Google Limited Use: Google user data is used only as described here and per Google's API Services User Data Policy, including Limited Use. No sale, no unrelated advertising use.

5. AI processing

Our own AI layer on systems we operate (locally-hosted models) may process advertising data for summaries and anomaly notes. No external AI provider receives your Google Ads data. Outputs are advisory; accounts change only with your approval.

6. Sharing

Hosting and email providers under confidentiality; Google/Microsoft per your integrations; authorities where required; a successor with notice. No sale of personal information; no sharing for cross-context behavioral advertising.

7. Retention and deletion

Transient cache up to 90 days. Encrypted tokens stored separately. Disconnect: tokens deleted promptly, cached data for that account deleted within 30 days. Deletion requests honored within 30 days except legal retention. privacy@ternovia.com.

8. Revoking access

• Through us.
• Google third-party access settings.
• Microsoft app settings.

9. Security

HTTPS/TLS in transit. Encrypted credentials at rest; OAuth instead of passwords; least-privilege role-based access; revocation on disconnect; monitoring with incident response and legally required notification. No certifications claimed. See Security.

10. Notifications

Only to addresses you provide, with preference/opt-out instructions.

11. Rights (GDPR / CCPA/CPRA)

Access, correction, deletion, portability, restriction, objection; California know/delete/correct; no sale. Bases: contract, consent, legitimate interests, legal obligation. privacy@ternovia.com; DPAs on request.

12. Children

Business service, 18+. Not directed to children.

13. Cookies

Strictly-necessary functions only. See Cookie Policy.

14. Changes

Posted with a new date; connected clients emailed before material changes.