Peithad
ESRequest access

Privacy Policy

Last updated: October 17, 2026

Your data is yours. This policy explains what data Peithad collects, what it's used for, who it's shared with and how to exercise your rights. We wrote it to be understood: if anything is unclear, write to us.

We don't sell your personal data. We never have and we never will.

1. Who is responsible for your data

The data controller and owner of the database is Peithad, based in Lima, Peru. For any privacy matter, write to hello@peithad.com.

Peithad is an independent application. It is not affiliated with, sponsored or endorsed by TikTok, Google or any other platform we mention. Their names and trademarks belong to their owners.

2. What we collect and why

We collect only what we need to provide the service.

  • Your account: name, email, profile picture (if you sign in with Google) and your password, stored only as an irreversible hash. We use them to identify you, give you access and send important account notices, such as password recovery.
  • Your TikTok Ads account: when you connect it through TikTok's official authorization, we receive an access token, stored encrypted, and read the data you authorize: ad accounts, campaigns, ad groups, ads, creatives and performance metrics. We use it to answer your questions, prepare reports, run the automations you turn on and, only when you ask or approve, make changes to your campaigns. We never ask for your TikTok password.
  • What you do in Peithad: your conversations with the agent, the files you attach in the chat (images, videos, PDF, Word, Excel), the skills you write, the rules and scheduled reports you create, and the log of actions the agent carried out. We keep them so you have your history, so the agent remembers the context of your chats and so you can review what was done in your account.
  • Usage and credits: how many credits each answer uses and your credit history, to bill you accurately and show it to you.
  • Payments: payments are processed by Lemon Squeezy or Mercado Pago. Your card details go straight to them and never touch our servers. We keep your plan, dates and subscription status.
  • Beta access requests: if you request access on our website, we keep your name, email, company, role, approximate ad spend and message, to review your request and reply.
  • Technical data: your IP address and basic browser data, to protect the service (for example, limiting sign-in attempts) and detect abuse. We also detect your language or approximate country to show the site in Spanish or English.
  • Correspondence: if you write to us, we keep the messages to support you.

We process this data because it is necessary to provide the service you signed up for and, where applicable, with your consent, given when you create your account or connect an integration, which you can withdraw at any time.

3. Cookies

We only use necessary cookies: your session, to keep you signed in, and your preferred language. We don't use advertising or third-party tracking cookies. If you turn cookies off, you won't be able to sign in.

4. Artificial intelligence

Peithad uses Google Gemini models, through Google's paid API, to generate answers, analyze your metrics and, when you ask, analyze your videos and the files you attach. To do so we send Google the necessary content of your conversation, your files and your advertising data. Large videos are uploaded to Google temporarily for the analysis and deleted from there as soon as it ends. Under its terms for paid services, Google does not use that content to train or improve its products.

We don't use your data to train artificial intelligence models either.

AI answers can contain mistakes: review them before making important decisions. The agent doesn't change your campaigns unless you ask or approve it, except for automated rules you turn on yourself, which act on the conditions you set.

5. Who we share your data with

We share data only with the providers we need to run Peithad (data processors), and only what their job requires:

  • Contabo (United States): servers that run the application and its database.
  • Cloudflare (United States): domain, network protection and email forwarding.
  • Google (United States): Gemini AI models and Sign in with Google.
  • TikTok: the platform you connect; we send it the queries and changes you request.
  • Resend (United States): account emails, such as password recovery.
  • Lemon Squeezy (United States) and Mercado Pago: payment processing.

Beyond that, we access your account or disclose data only in these cases:

  • Support: only with your permission, when you ask us for help with a problem.
  • Security and abuse: we review technical logs to protect the service. Accessing an account is a last resort, when investigating serious abuse.
  • Legal obligation: when a competent Peruvian authority requires it through a valid order. Unless the law forbids it, we'll tell you first.
  • Sale or merger: if Peithad were acquired, we'll tell you before your data falls under a different policy.

6. International transfers

Our servers and most of our providers are outside Peru, mainly in the United States. By using Peithad, your data is transferred to those countries. We choose providers that apply adequate security and confidentiality measures, and give them only the data their job requires.

7. How long we keep your data

  • While your account is active, we keep your data to provide the service.
  • Files you attach in a chat are deleted when you delete that chat (within a day). Files you upload but never send are deleted the next day.
  • If you disconnect TikTok, we delete the access token and stop reading your data immediately. You can also revoke access from TikTok.
  • If you delete your account, we delete your data from our active systems within 30 days, and from backups within 60 days.
  • We may keep payment records required by tax law longer, or what is needed to resolve a dispute.
  • Beta access requests that don't become an account are deleted within 12 months.

8. Your rights

You can exercise at any time your rights of access (know what data we hold and how we use it), rectification (correct it), cancellation (ask us to delete it), objection (to certain uses), portability (receive a copy of your data) and not to be subject to decisions based solely on automated processing that significantly affect you. You can also withdraw your consent.

Write to hello@peithad.com from your account's email and we'll reply within the legal deadlines. We may ask for details to confirm your identity. Exercising your rights doesn't change your price or service quality, although deleting certain data may stop you from using Peithad.

If you're not satisfied with our answer, you can file a complaint with Peru's National Authority for Personal Data Protection (Ministry of Justice and Human Rights), or with the data protection authority where you live.

9. How we protect your data

  • All connections are encrypted (HTTPS/TLS).
  • TikTok access tokens are stored encrypted (AES-256-GCM).
  • Passwords are stored only as a hash (bcrypt).
  • The server has key-only access, a firewall and automatic security updates.

No system is infallible. If a security incident affects your data, we'll tell you without undue delay and report it to the authority when the law requires.

10. Minors

Peithad is a service for businesses and is not intended for anyone under 18. We don't knowingly collect data from minors.

11. Changes to this policy

We may update this policy when our practices or the law change. If the change is significant, we'll update the date above and let you know by email or in the app.

12. Contact

Peithad
Lima, Peru
hello@peithad.com
https://peithad.com

Adapted from the Basecamp open-source policies / CC BY 4.0.