What we collect, and who else sees it.

Peregrine is a product operated from Portugal, reachable at hello@peregrine.ad. For the purposes of the GDPR we are the controller of the data described here. Use that address for any question or request in this policy — including deletion.

Your account. Your email address and password. Passwords are stored only as an irreversible hash by our authentication provider — nobody at Peregrine can read yours.

Waitlist. We store your email address and your language. The IP address the request came from is used to rate-limit the form, and is included in the internal notification we email ourselves about the signup — so it sits in our mailbox rather than in our database.

What you create. The products you set up, the goals and spending limits you configure, your conversations with the assistant, anything you upload to it, and the proposals you approve or reject.

Google Ads data. When you connect an account we hold the authorisation you grant, along with the campaigns, budgets, statuses and performance figures we read from it. The authorisation is encrypted before it is stored, is never written to our logs, and is never shown back to you or anyone else.

Technical records. Like any website, ours produces server logs — IP address, page requested, time, browser — and we log errors so we can fix them. These are used to keep the service running and secure, not to profile you.

Measuring the public pages. On the public pages only, we count visits so we know whether they work. No cookies, nothing tied to your account, and none of it behind sign-in.

What we do not collect. We do not use advertising cookies, we do not track you across other sites, and we do not buy data about you from anyone.

This is the part that matters most, so it is stated plainly. We only ever act on an account whose owner has completed Google’s own authorisation flow and approved our request to manage it. Changes the assistant proposes — creating a campaign, changing a budget, pausing or resuming — wait for you to approve them, one by one.

The single exception is if you deliberately switch a product into automatic mode. Even then the assistant stays inside the limits you set, and you can stop it instantly with the kill switch.

Disconnecting an account revokes the authorisation with Google, not just our copy of it. You can also revoke it yourself from your Google Account at any time, without telling us first.

Limited Use. Peregrine’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Concretely: we use that data only to provide and improve the features you can see in Peregrine; we do not transfer it to anyone except as needed to provide those features, or where the law requires it; we do not use it for advertising of our own; we do not use it to train generalised artificial-intelligence or machine-learning models; and no human reads it except where you have asked us to, where it is needed for security, or where the law obliges us.

One transfer is worth naming outright rather than leaving in a table: to answer your questions and draft proposals, the assistant sends your campaign and performance figures to our AI provider. That is providing the feature you are using, it happens only for the account you connected, and that provider does not use the data for anything else.

By default the assistant only proposes; you approve each change. If you switch a product into automatic mode, you are asking it to apply certain changes — budgets, pausing, resuming — without asking first, inside limits you configure. Those are automated decisions about your advertising, taken on your instruction.

They do not produce legal effects concerning you and are not based on profiling you as an individual: they act on campaign performance figures. You can turn automatic mode off, stop the assistant immediately with the kill switch, review everything it did, and ask us to explain any decision.

We process your account details and everything you create in order to provide the service you asked for — in GDPR terms, to perform our contract with you. We process the waitlist and the abuse-prevention records on the basis of our legitimate interest in launching the product and keeping public forms usable. Where we rely on consent, you can withdraw it at any time. Connecting a Google Ads account is part of providing the service you asked for; the separate authorisation you give Google can be withdrawn at any moment, by disconnecting here or from your own Google Account.

Peregrine runs on services from other companies. Each one receives only what its job requires, and our suppliers are contractually barred from using your data for their own purposes. Google is the exception and is listed first for that reason: for the advertising account you connect, Google is not our supplier but an independent controller acting under its own terms with you.

Some of these providers operate outside the European Economic Area. Where that happens, transfers are covered by the European Commission’s standard contractual clauses. We will publish an update here before adding a provider that receives your personal data.

We do not sell your personal data, and we do not share it for advertising. We will hand data to an authority only when the law requires it.

Every cookie we set is necessary and none is used for tracking. They do three jobs: keeping you signed in (our authentication provider may use more than one cookie for this), remembering your language, and holding a password-reset link for the fifteen minutes you have to use it. There is no cookie banner because there is nothing here to consent to.

Account data and what you create stay until you ask us to delete them. Rate-limiting records expire within minutes. Waitlist entries are kept until the waitlist closes, or until you ask us to remove yours. Deletion today is handled by a person, not a button: write to hello@peregrine.ad and we will remove your data within 30 days, keeping only what the law obliges us to keep, such as invoices.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, or ask for it in a portable form. Write to hello@peregrine.ad and we will answer within 30 days. If you are in the EU and we handle your request badly, you can complain to your national data protection authority — in Portugal, the CNPD.

Data is encrypted in transit and at rest, and the authorisations you grant for advertising accounts get an additional layer of encryption on top of that. Access to production data is limited to the people who need it to operate the service. No system is perfect; if a breach affects you, we will tell you and the relevant authority as the law requires.

Peregrine is for businesses. It is not intended for anyone under 18, and we do not knowingly collect their data.

If this policy changes we will update the date at the top, and we will email you before any change that materially affects your rights.