Skip to content
Ads & Pixels

Draft — pending legal review. This policy describes our current data practices in good faith but has not yet been reviewed by counsel. It will be updated, and the "Last updated" date below will change when it is. Questions in the meantime: [email protected].

Last updated: September 25, 2026 · Entity: Houston IT Developers LLC, Houston, Texas

§1

Who this policy covers

This policy covers Ads and Pixels' own marketing site (adsandpixels.com) and the Ads and Pixels application (app.adsandpixels.com), operated by Houston IT Developers LLC ("we," "us," "our"). If you're a visitor to one of our customers' own websites — for example, a site running our first-party tracking collector on our customer's behalf — your data there is governed by that customer's own privacy policy; we act as their service provider, and our role and obligations in that relationship are set out in our Data Processing Agreement, not this policy.

§2

What we collect

Account and billing information: name, email, company name, billing details (processed by our payment provider — we don't store full card numbers ourselves), and role/permissions within your organization's account.

Platform connection data: when you connect Meta, Google, Microsoft, TikTok or another network, we store an encrypted access token and account identifiers needed to act on your behalf — never your platform password.

Audience Vault data (on behalf of our customers, as a processor): when a customer's own website visitor interacts with their site through our first-party collector, we may receive hashed identifiers (SHA-256 email, phone in E.164 format), network click IDs (such as Meta's fbclid or Google's gclid), and event data (page views, form submissions, purchases). This is our customer's data, collected on their behalf and under their instructions — see Data Processing for the full detail on ownership, retention and deletion.

Usage data: how you use the Ads and Pixels application itself — pages viewed, features used, actions taken — for product improvement, security monitoring and support.

Communications: anything you send us directly, including support requests and messages to hello@ or [email protected].

We do not collect precise geolocation, biometric data, or passively track anyone — through Bluetooth, Wi-Fi or cameras — without an explicit, opt-in action. See Security for more on that commitment.

§3

How we use it

To operate the Ads and Pixels application: authenticate you, connect and run campaigns on your behalf, generate the reporting and Results Map, and run the AI Optimizer's suggestions (never an unattended write to your ad accounts — see Security). To bill you. To provide support. To detect and prevent fraud, abuse and security incidents. To improve the product, using aggregated and, where possible, de-identified usage patterns — never by pooling one customer's Audience Vault data into another customer's campaigns or benchmarks beyond anonymized, minimum-group-size aggregate statistics, as described in Data Processing. To comply with legal obligations.

§4

Who we share it with

Advertising networks, when you connect them and only for the campaigns and audiences you configure: Meta, Google, Microsoft, TikTok, Snap and others as they're added, each receiving only the data that platform's API requires (for example, hashed identifiers for an audience sync, or a conversion event for the Conversions API).

Service providers who process data on our behalf under contract: cloud infrastructure, payment processing, email delivery, and similar operational vendors. A current sub-processor list is maintained in our Data Processing Agreement.

Your own agency or client, according to the account roles and permissions your organization configures — an agency admin and a client viewer see different things by design.

Legal requirements, if we're required to disclose information by law, subpoena or a similar legal process, or to protect the rights, property or safety of Ads and Pixels, our customers or the public.

We do not sell personal information, and we do not share it for cross-context behavioral advertising about our own site's visitors. If a data flow ever qualifies as a "sale" or "share" under a state privacy law for a customer's own end-site visitors, that's addressed in the Data Processing Agreement, since we act as a processor for that data, not a controller.

§5

Cookies and similar technology

Our own marketing site uses the cookies necessary for it to function (session state, and, where you're signed in, authentication), plus Google Analytics to count visits and see which pages are useful. Analytics cookies are first-party (set on adsandpixels.com), Google signals and ad personalization are turned off, and no advertising cookies are set. Analytics does not load at all if your browser sends Global Privacy Control or Do Not Track, and visitors in the EEA, UK and Switzerland are measured without analytics cookies. Google Analytics runs on the marketing site only, never inside the application or a client portal. The Ads and Pixels application uses cookies necessary to keep you signed in and to remember preferences. A customer's own website using our first-party collector sets first-party cookies on that customer's domain, under that customer's own cookie/consent disclosures, not ours.

§6

Global Privacy Control and your choices

We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as an opt-out of sale/sharing for any applicable processing, and — on a customer's site running our collector — the collector tags that visit as opted out and excludes it from audience syncs to advertising networks. You can also contact [email protected] directly with any access, deletion, correction or opt-out request, whether or not GPC is available to you.

§7

Your rights

Depending on where you live, you may have rights to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, opt out of certain processing, and not be discriminated against for exercising these rights. This applies under laws including the California Consumer Privacy Act (as amended by the CPRA) and comparable laws in other states. To exercise a right, email [email protected]; we'll respond within the time required by applicable law. If you're the end-site visitor of one of our customers rather than a direct Ads and Pixels user, the fastest path is usually to contact that business directly, since they control the relationship — but we'll honor a request sent to us as well, and route it to the relevant customer where required.

§8

Data retention

We keep account data for as long as your account is active, and for a limited period after closure as needed for legal, tax and dispute-resolution purposes. Audience Vault data retention is set per customer, with defaults described in Data Processing (raw events, profiles, and platform-specific audience windows). Deletion requests are honored within the timeframe stated there.

§9

International data transfers

We're based in the United States, and data we process is generally stored and processed in the US. Where we process personal information originating in the EEA, UK or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism as required.

§10

Children's privacy

Ads and Pixels is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or the relevant minimum age in your jurisdiction). We do not run targeted advertising to anyone we know to be under 18, consistent with the age-based restrictions described in our product for regulated states.

§11

Google API Services User Data Policy

Ads and Pixels' use and transfer of information received from Google APIs (including Google Ads, Google Analytics, Search Console and Tag Manager data) adheres to the Google API Services User Data Policy, including the Limited Use requirements: that data is used only to provide or improve the features you've explicitly enabled, is never used for advertising, and is never transferred to third parties except as necessary to provide the feature, to comply with the law, or as part of a merger or acquisition where the acquiring party agrees to the same restrictions.

§12

Changes to this policy

We'll update the "Last updated" date at the top of this page whenever this policy changes, and for material changes, we'll take reasonable steps to notify active customers (typically by email or an in-app notice).

A little more clarity

Frequently asked questions

Real answers before you make a decision.

Is this the final privacy policy?

No — it's marked "Draft — pending legal review" for a reason. It describes our current practices honestly, but hasn't been reviewed by counsel yet. Check the "Last updated" date for the current version.

How do I get my data deleted?

Email [email protected]. See Data Processing for how deletion requests flow through to connected advertising networks, not just our own systems.

Do you honor Global Privacy Control (GPC)?

Yes. A GPC signal is treated as an opt-out of sale/sharing, and on a customer site running our collector, that visit is excluded from audience syncs.

Do you sell my personal information?

No.

What happens to Google account data specifically?

It's handled under Google's API Services User Data Policy, including the Limited Use requirements — used only for the features you enabled, never for advertising, and never sold.

Your next move

Questions about this policy?

Email [email protected] — a real person handles privacy requests, not an automated queue.