Security & Data Practices

This page describes, in practical terms, how Ecommercify LLC protects the advertising and commerce data our clients trust us with, how we obtain access to advertising platforms, and how to ask us to delete data.

How we obtain access to client accounts

We only ever access a client’s advertising accounts through the official permission systems of the platform concerned — Meta Business Manager, TikTok Business Center, and Google Ads account-level access.

  • Each member of our team uses a personal, named account with its own credentials. Accounts are not shared between staff.
  • We do not ask for, accept, or store our clients’ personal usernames and passwords.
  • Permissions are granted at the minimum level required for the work.
  • The client remains the owner of their assets and can revoke our access at any moment without our involvement.
  • When an engagement ends, we ask the client to revoke access and we delete the corresponding data from our systems.

Application and infrastructure security

  • This website is a static site with no content management system, no database and no server-side application code, which removes the most common categories of web vulnerability.
  • All traffic is served exclusively over HTTPS with a valid certificate and HTTP Strict Transport Security enabled. Plain HTTP requests are permanently redirected.
  • We publish a restrictive Content Security Policy and standard protective headers, and the site loads no third-party scripts, fonts or trackers.
  • Our internal reporting platform runs on infrastructure we control directly, not on shared hosting, with access restricted by key-based authentication.
  • Operating system and dependency security updates are applied on an ongoing basis.
  • Platform API credentials are stored as secrets outside the application source code and are rotated when staff change or when a platform requires it.

How we use advertising platform data

Data obtained through the Meta Marketing API, the TikTok Business API and the Google Ads API is used for one purpose only: to manage, optimise and report on the advertising accounts of the client who granted us the access.

  • We do not sell, rent or license platform data to anyone.
  • We do not combine one client’s data with another client’s data.
  • We do not use platform data to build audience products, lookalike inventory or any resold dataset.
  • We do not use platform data to train third-party artificial intelligence models.
  • We access only the accounts for which permission has been granted, and only the endpoints required for the work.

Data retention and deletion

We retain campaign and reporting data for as long as the client engagement is active, so that historical comparison remains possible, plus any period required for accounting or legal purposes.

On termination of an engagement, or on request from the client at any time, we delete the client’s advertising and commerce data from our production systems and from backups on the normal backup rotation cycle.

To request deletion of data we hold, write to info@ecommercifyco.com from an address associated with the account. We will confirm the request, carry it out, and confirm completion in writing.

Confidentiality

Everyone who works with client data at Ecommercify is bound by confidentiality obligations. Client performance data, product costs, margins and strategy are treated as confidential and are never discussed with, or shown to, other clients.

Reporting a security issue

If you believe you have found a security vulnerability affecting this website or our systems, we would genuinely like to hear from you. Write to info@ecommercifyco.com with enough detail to reproduce the issue.

Please give us a reasonable opportunity to fix the problem before disclosing it publicly, and please do not access, modify or delete data belonging to others while investigating. We will not pursue legal action against researchers who act in good faith and follow this request.

Contact

Ecommercify LLC
221 W Hallandale Beach Blvd, Apt 312, Hallandale Beach, FL 33009, United States
Security and data enquiries: info@ecommercifyco.com
Telephone: +1 786-588-9996