Privacy Policy

Collection and use summary

We collect personal data only with your consent to deliver our services and reports. Your privacy matters. Sherlok.ai respects your privacy regarding any information we may collect.

We request personal information only when we truly need it to provide a service, by fair and lawful means, with your knowledge and consent.

We retain information only as long as necessary to provide the requested service. We protect data through commercially acceptable means to prevent loss, unauthorized access or modification.

We do not share personally identifiable information publicly or with third parties, except when required by law.

Questions: be@sherlok.ai.

Google user data

When you sign in with Google or connect GA4/Google Ads as data sources, we access Google data associated with those products: on GA4, reporting data (traffic, conversions) via the Analytics Data API with read-only scopes. On Google Ads, account structure, campaigns and metrics in read-only mode. We do not create, edit or delete Google Ads resources through Sherlok.

We store OAuth access/refresh tokens and metadata required to maintain Google integrations securely.

Meta data (Facebook/Instagram)

When you connect Meta Ads, we access read-only ad accounts, campaigns, ad sets and performance metrics via the Marketing API. We do not publish, alter or remove any resource on your account.

Security and retention

Hosting in São Paulo (AWS). Encryption in transit (TLS) and at rest. LGPD compliance. Tokens and credentials are stored with additional encryption. When you disconnect an integration or request account deletion, associated data is removed within 30 days.