Privacy Policy

Last updated: May 1, 2026

Clean Core ("we," "our," or "us") is operated by Wonderworks Design Studio. This Privacy Policy explains how we collect, use, and protect your information when you use Clean Core at clean-core.app.

Information We Collect

We collect the following types of information:

• Account information — your name, email address, and company name when you create an account.
• Platform credentials — API keys and tokens for Meta Ads, Google Ads, TikTok Ads, and Google Analytics 4 that you provide to connect your ad accounts. These are stored encrypted and used only to fetch your analytics data.
• Usage data — how you interact with the dashboard, collected through standard server logs.
• Payment information — billing details are processed by Stripe and are never stored on our servers. We receive only a Stripe customer ID.

How We Use Your Information

• To provide and operate the Clean Core dashboard and its features.
• To fetch analytics data from your connected ad platforms on your behalf.
• To send transactional emails such as account confirmations, password resets, and billing receipts.
• To improve the product based on aggregate usage patterns.
• To respond to support requests.

Data Storage and Security

Your data is stored securely using Supabase, which uses industry-standard encryption at rest and in transit. Platform credentials are stored encrypted. We use Row Level Security to ensure users can only access their own data.

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

Third-Party Services

Clean Core integrates with the following third-party services to operate:

• Supabase — database, authentication, and storage. Privacy Policy
• Stripe — payment processing. Privacy Policy
• Vercel — hosting and deployment. Privacy Policy
• Meta, Google, TikTok — ad platform APIs used only to retrieve your own account data.
• AI providers (Anthropic, OpenAI, Google) — if you enable AI recommendations, your campaign data is sent to your chosen provider via your own API key. We do not store AI API keys on our servers.

Cookies

Clean Core uses essential cookies for authentication and session management only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not run ads.

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Export your data in a portable format.

To exercise any of these rights, contact us at the address below.

Children's Privacy

Clean Core is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the dashboard. Continued use of Clean Core after changes constitutes acceptance of the updated policy.