Privacy Policy

1. Introduction

Rowe & Wren ("we", "us", or "our") operates a compliance review and advertising optimisation platform. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using our Service you agree to the practices described here.

2. Data We Collect

2.1 Account Information

When you create an account we collect your name, email address, and business details. This information is used to authenticate you and associate your data with your organisation.

2.2 Website Content

When you initiate a compliance scan we crawl and ingest the publicly accessible content of your website. This includes page copy, headings, claims, disclaimers, and page structure. We store this content to analyse it against relevant compliance frameworks (such as FINRA Rule 2210 and SEC marketing standards) and to generate your compliance reports.

2.3 Google Ads Account Data

If you connect your Google Ads account via OAuth, we retrieve advertising data through the Google Ads API. This includes campaign, ad group, keyword, and search term performance metrics (such as impressions, clicks, conversions, cost, and conversion rates), ad copy and headlines, and campaign structure. This data is synchronised on a scheduled basis and stored in our database to power analytics dashboards, optimisation insights, and compliance reports.

We also analyse your campaign copy — including ad headlines, descriptions, and extensions — against regulatory rule sets to determine whether your advertising content meets compliance requirements.

OAuth credentials used to access your Google Ads account are encrypted and stored securely. All API requests are made server-side so that credentials are never exposed to the browser.

2.4 Automated Action Data

When automated features are enabled (such as automatic negative keyword updates or automated RSA ad testing), we collect and store records of each action taken, including what was changed, when, and the rationale for the change.

2.5 Usage and Analytics

We collect standard usage data such as pages visited, features used, browser type, and IP address to improve the Service and diagnose issues.

3. How We Use Your Data

We use the data we collect to:

• Provide the Service — Crawl your website content and campaign copy, analyse text against regulatory compliance rules, and generate reports identifying potential issues.
• Perform automated actions — Add negative keywords and create or modify RSA ad variants in your connected advertising accounts, where you have enabled these features.
• Improve the Service — Analyse aggregate usage patterns to improve our compliance rule sets, scanning accuracy, and user experience. We do not use your content to train general-purpose machine learning models.
• Communicate with you — Send scan results, service updates, and respond to support requests.

4. AI and Automated Processing

Our Service uses AI models to classify page types, detect compliance issues, identify claims, and generate remediation guidance. Your website content and campaign copy are sent to our AI processing pipeline for analysis. We use third-party AI providers to power parts of this analysis; content shared with these providers is subject to contractual protections and is not used by them to train their models.

5. Data Sharing

We do not sell your data — including any data retrieved from the Google Ads API. We share data only in the following circumstances:

• Service providers — We use third-party infrastructure and AI providers to operate the Service (e.g. hosting, database, web scraping, and language model providers). These providers process data on our behalf under contractual obligations.
• Legal requirements — We may disclose data if required by law, regulation, or legal process.
• Business transfers — In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. Google Ads API Compliance

Our use of data received from the Google Ads API complies with the Google Ads API Terms of Service. Specifically:

• We access your Google Ads data only with your explicit authorisation through the OAuth authentication process.
• We do not sell Google Ads data or provide access to accounts without authorisation.
• Automated changes to your campaigns (negative keywords, RSA variants) are only made when you have explicitly opted in to those features. All other optimisation recommendations require your approval before any action is taken.
• You may revoke access to your Google Ads account at any time through your account settings or through your Google account permissions.

7. Data Retention

We retain your account information and analysis results for as long as your account is active. Crawled website content and campaign data are retained to provide historical comparisons and trend reporting. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

8. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. No system is completely secure, however, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Receive your data in a portable format.

To exercise any of these rights, contact us at hello@roweandwren.com.

10. Cookies

We use essential cookies to maintain your session and authenticate you. We may also use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you by email or by posting a notice on the Service. Your continued use after the effective date constitutes acceptance.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@roweandwren.com.