1. Who we are
Stack Ads ("we", "us", "our") is a local-marketing operator based in Kelowna, British Columbia, Canada. We provide three services for small businesses: managed paid-media advertising (Ads), search and AI-visibility work (Discovery — SEO, AEO, and GEO), and custom website builds (Web).
Questions about this policy or how we handle your data can be sent to privacy@stackads.ca.
2. Information we collect
- Contact information you provide on the application form (name, business name, email, phone, city, website).
- Business context you share during onboarding, including goals, current ad accounts, and budget range.
- Advertising-platform data accessed with your authorization via Google Ads, Meta, and related APIs. This data stays associated with your account and is used only to manage and report on your campaigns.
- Basic site analytics (pages visited, approximate location, device type) collected from visitors to this website.
- Call recordings and transcripts from discovery, onboarding, strategy, and support calls, as described in Terms §8.
3. How we use it
- To evaluate and respond to your application.
- To manage, optimize, and report on your paid-media campaigns.
- To communicate with you about your account, reports, and pending approvals.
- To improve the service, in aggregate, non-identifying form only.
We do not sell your personal or business data. The only marketing email we send is occasional product updates and case studies, and only to people who explicitly opted in via the separate consent box on our apply form. You can withdraw that consent from any message using the unsubscribe link.
4. Sharing and third parties
We share only what's necessary with service providers that help us run the business: Google (Ads API + Analytics), Meta (Marketing API + Pixel), Supabase (database), Clerk (authentication), Resend (email), Vercel (hosting), Inngest (workflow orchestration), Upstash (rate limiting), and Cloudflare Turnstile (bot protection). Each of these providers has its own privacy policy, and access is scoped to the minimum required.
Clients can review the complete list of sub-processors and the data-protection terms that govern them in our Data Processing Agreement.
5. Your rights (PIPEDA, GDPR where applicable)
- Access the information we hold about you.
- Correct inaccurate information.
- Request deletion of your account and associated records.
- Withdraw consent for future processing (this will end the service).
Active clients can download a complete JSON or CSV export of every record we hold about them directly from Account settings. For corrections, deletion, or other requests, email privacy@stackads.ca. We respond within 30 days.
6. Retention
We keep operational data (campaigns, performance, reports) for as long as you are an active client, plus two years after the relationship ends, for tax and record-keeping requirements. Billing records are kept for seven years as required by Canadian tax law.
7. Security
All traffic is served over HTTPS. Credentials are stored using industry-standard hashing. Access to client data is limited to the operator running the service. We use two-factor authentication on every vendor account that supports it.
8. Cookies
This website uses a minimal set of first-party cookies required for authentication and a session identifier. It does not use advertising or tracking cookies from third parties for marketing purposes on this site.
9. Changes to this policy
When we make a material change, we will update the date at the top of this page and notify active clients by email at least 14 days before the change takes effect.