Your ad accounts move real money. We treat access that way.
How Admizar keeps control with you, and what we do with your data.
Approval before change
Automation and AI only propose changes. A person with the right role approves them, unless you explicitly let a single rule apply on its own. Every change is written to an audit log with before and after values.
Least-privilege platform access
We connect through the official OAuth flows of Meta, Google and TikTok and ask only for advertising permissions. You can disconnect in the app or revoke access from the platform at any time.
Encryption
All traffic uses TLS. Platform tokens, your own AI keys and webhook URLs are encrypted at rest with AES-256-GCM, with the key held outside the database.
Roles and access
Owner, admin, member and viewer roles. Only owners and admins can connect accounts, change billing or edit automation. Sign-in uses one-time email links or Google, so there are no passwords to leak.
Payments
Card details are entered on Stripe's hosted checkout and never touch our servers. Stripe is a PCI DSS Level 1 service provider.
AI data handling
AI providers receive aggregated campaign metrics only (names, spend, results), never personal data about your customers. Requests use the providers' business APIs, whose published terms exclude API data from training.
Your data, your call
Export everything as JSON from Settings, delete a workspace at any time, and sign our Data Processing Addendum for GDPR, UK GDPR and Thailand's PDPA.
Infrastructure
The application runs on managed cloud infrastructure with automated backups of the database. Our current subprocessors are listed publicly.
Report a vulnerability
Email support@admizar.com with the subject “Security”. We reply within two business days and do not take action against good-faith research. Read our Privacy Policy, DPA and subprocessors.