SUMADS GLOBAL LLC ("SumAds", "we", "us") runs sumads.com, a campaign operations platform for advertisers running TikTok campaigns. This policy explains what information SumAds collects, how it is used, and the choices you have. Questions at any time: legal@sumads.com.
1. Information we collect
Your access key. SumAds does not ask for your name or email address. We issue an access key for your workspace and store it as a salted hash, together with an encrypted copy that SumAds administrators can read so a lost key can be recovered.
Passkeys. If you add a passkey, we store its public key, a device label such as "iPhone" worked out from your browser, and when it was last used — never your fingerprint, face or device unlock.
Connected accounts. When you connect TikTok, we store the tokens TikTok issues so SumAds can act on your ad accounts at your direction, with the Business Centre's name. If you add an affiliate network API key, an AI provider key, a Telegram bot, or a TikTok Ads Manager browser session, we store what is needed to use it. For an Ads Manager session that includes its cookies, your browser's user agent, the Business Centre it belongs to and the TikTok account linked to it. Every credential is encrypted at rest.
Campaign and performance data. Data read from TikTok about your ad accounts, campaigns, ad groups and ads — names, settings, status, spend, delivery and review results — kept so SumAds can show reports and run your rules.
Creatives. Spark codes and the details of the TikTok posts you add, such as captions and preview links, and files you upload. For public TikTok posts you add, we keep copies of their cover images and videos so previews keep working; like the posts themselves, those copies can be opened by anyone who has their link.
Conversions and clicks. Your affiliate network sends conversion postbacks to an address SumAds gives you. We store what each one carries — transaction and event IDs, offer, payout, revenue, currency and your sub IDs — and the postback address as received. From your network's click reports we keep hourly and daily counts per campaign; the individual click records, which can include visitors' IP addresses and device IDs, are read to count them and are not stored.
Assistant and Telegram. Your messages to the assistant and its answers, including the data it looked up for you, and a record of the changes you confirmed. If you link a Telegram chat, we store the chat's ID and title or username, and the messages exchanged with the SumAds bot.
Security data. When someone signs in, adds a passkey, or an app or affiliate network contacts SumAds, we record the IP address to limit repeated attempts. These records exist only for that purpose and are routinely deleted. We also keep a log of what your rules did, and which AI apps you connected and when they were last used.
2. How we use information
- To provide SumAds: your workspace, reports, the Spark Bank and the assistant.
- To create and manage campaigns on your connected accounts, at your direction.
- To match conversions to the campaigns that earned them, and show spend against revenue.
- To run the rules you set, and tell you on Telegram when they act.
- To keep SumAds secure — limiting sign-in attempts and stopping misuse — and to help when you ask for support.
- To meet legal obligations.
We do not sell your information, and we do not use it to advertise to you or to anyone else.
3. AI features
When you use the assistant in SumAds or on Telegram, your message, your workspace's instructions and the workspace data needed to answer — such as account names, ad account IDs, spend and revenue — are sent to an AI model provider: OpenRouter, using the API key you add, which passes it to the model you choose from OpenAI, Google or Anthropic; or Google directly, if you add a Gemini key. They process it under their own terms to produce the answer. We keep your newest assistant conversations so you can return to them, and you can delete them.
If you connect an AI app such as Claude to SumAds, that app receives the answers to what you ask it, under its own privacy policy. Changes it proposes wait for your confirmation in SumAds.
5. TikTok data
SumAds uses TikTok's APIs with your authorization, and uses TikTok data only to provide the features you use: launching, managing and reporting on your campaigns. We do not sell it, use it for advertising, or share it beyond what those features need.
Disconnecting a Business Centre in SumAds deletes its stored tokens and its cached data. To withdraw SumAds' access at TikTok as well, remove it in your TikTok for Business settings.
7. Security
Traffic to SumAds is encrypted in transit. Stored credentials are encrypted with AES-256-GCM under a key kept apart from the database; access keys are stored as salted hashes, and the tokens SumAds issues to AI apps only as hashes. The database keeps each workspace's data apart, and sign-in attempts are rate-limited. No system is perfectly secure, so keep your access key private.
8. Data retention and deletion
We keep your data while your workspace exists. Disconnecting a Business Centre deletes its tokens and cached data. Unlinking a Telegram chat deletes its conversation in SumAds, though copies of the messages the bot received remain in our job records.
To delete your workspace, email legal@sumads.com. Deleting it removes its data, except records about ad accounts' status that are not tied to a person, short-lived security records, and copies in backups and logs, which expire on their own schedules. We may keep information the law requires us to keep.
9. Your rights
Depending on where you live — including several US states — you may have the right to know what personal information we hold about you, to get a copy, to correct it, or to have it deleted, and to object to or restrict some processing. Email legal@sumads.com and we will respond as the law requires. We will not treat you differently for using these rights.
10. Children
SumAds is a business tool and is not meant for anyone under 18. We do not knowingly collect information from anyone under 18.
11. Changes to this policy
We may update this policy as SumAds changes. We will post the new version here with a new date and point out material changes in the app.
12. Contact
SUMADS GLOBAL LLC · sumads.com · legal@sumads.com