Xplainr Security & Data Privacy
TL;DR: Xplainr uses read-only access to your marketing platforms, encrypts all data in transit and at rest, and is GDPR-compliant. We never modify your campaigns and never sell your data.
Connecting your marketing platforms to a third-party tool requires trust. We take that seriously. Here's exactly how Xplainr handles your data, what access we request, and how we protect your information.
Common Concerns - Answered
“I don't want a third-party tool having access to my ad accounts.”
Xplainr requests read-only access to all platforms. We can view your data but never modify campaigns, budgets, bids, or any settings. You can revoke access at any time from your platform's security settings.
“What happens to my data if I cancel?”
When you cancel, your data is deleted within 30 days. We don't retain marketing data after account closure. You can also request immediate deletion at any time.
“Is my competitive data safe? Could competitors see my performance?”
Your data is completely isolated. It's never aggregated with other customers' data, never used to create benchmarks that could reveal your performance, and never accessible to anyone outside your team.
“We have strict compliance requirements (GDPR, SOC 2, etc.)”
Xplainr is GDPR-compliant and follows industry-standard security practices including data encryption, access controls, and regular security audits. We can provide our security documentation upon request for enterprise evaluations.
The Evidence
Read-only access only
All platform integrations use OAuth with read-only scopes. Xplainr cannot modify campaigns, change budgets, edit ads, or take any action in your ad accounts.
Encryption everywhere
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). API keys and credentials are stored in encrypted vaults, never in application code.
Data isolation
Each customer's data is logically isolated. There is no cross-customer data sharing, aggregation, or benchmarking that could expose your competitive information.
GDPR compliance
Xplainr processes only business marketing data (ad performance metrics). We don't process PII beyond what platforms already provide. Data processing agreements available on request.
The Bottom Line
We built Xplainr to be a tool marketers can trust with their most sensitive business data. Read-only access means we can never accidentally (or intentionally) modify your campaigns. Encryption and data isolation mean your competitive intelligence stays private. And you control everything - revoke access or delete your data at any time.
Frequently Asked Questions
Does Xplainr access personal customer data?
No. Xplainr processes aggregate marketing performance data (impressions, clicks, conversions, spend). We don't access individual customer records, email addresses, or personal information.
Where is my data stored?
Data is stored in enterprise-grade cloud infrastructure with encryption at rest. We can provide specific data residency information for enterprise customers.
Can I get a security review before purchasing?
Yes. We provide security documentation, data processing agreements, and can participate in security reviews for enterprise customers. Contact us to start the process.
What if there's a data breach?
We have an incident response plan and commit to notifying affected customers within 72 hours of a confirmed breach, in compliance with GDPR requirements.
Related Resources
See Xplainr for Yourself
The best way to evaluate is to try it. Connect your platforms and get AI insights in minutes - no credit card required.
Free plan available · No credit card · Cancel anytime