Security

We take the security of your data seriously. This page describes the practices we have in place to protect the information you entrust to us.

Read-only access to your ad data

When you connect your Meta Ads Manager, Spendifier requests read-only access. It reads your campaign, ad, and performance data solely to analyze it and show you the results — it cannot create, edit, publish, pause, or spend in your advertising account. There is no way for Spendifier to move money or change anything in your ad account. You can revoke Spendifier's access at any time from your Meta account settings.

Encryption in transit

All traffic between you and Spendifier is encrypted using TLS (HTTPS). Data exchanged with the service providers we rely on is likewise sent over encrypted connections.

Access controls

Access to production data is restricted to the people who need it to operate the Service, and is protected by authentication and least-privilege controls. Your account and data are isolated from those of other users.

Reputable infrastructure

Our database and authentication are hosted in the European Union on established, reputable infrastructure. We rely on trusted providers for AI processing, email delivery, and payments rather than building sensitive infrastructure ourselves.

Payments

Payments are processed by our payment provider, which acts as our Merchant of Record. Card details are handled by its PCI-compliant systems — Spendifier never sees or stores your full card information.

API keys

If you use our developer/MCP access, API keys are shown once at creation and stored only in hashed form afterward. You can rotate or revoke a key at any time.

Our responsibility and yours

No system can be guaranteed completely secure, but we work continuously to protect your information and to respond quickly if an issue arises. You can help by keeping your account credentials and API keys confidential and by notifying us of anything that looks wrong.

Reporting a vulnerability

Found an issue? Email support@spendifier.com and we'll respond promptly.