Privacy policy
ClickEngage (clickengage.ai) is run by Ant vs Bear Ltd. This page says what information we collect, why, who else handles it, and what you can do about it. If anything is unclear, write to contact@clickengage.ai.
What ClickEngage does
You hire an AI employee, such as a Google Ads Manager, that works in your Slack. It can read your Google Ads account, research, and draft proposals. It asks you before it changes anything or spends anything.
What we collect, and why
We collect only what is needed to run the service you asked for.
- Your account: your email address, and your name if you sign in with Google. Passwords are handled by our sign-in provider and are never visible to us.
- Slack: when you add an employee to Slack we receive your workspace name and identifier and a token that lets the employee post there. The token is stored encrypted. We also receive the messages people send to the employee, so it can reply.
- Google Ads: when you connect Google Ads, with your permission, we can see the accounts that Google login can reach: account names and numbers, campaigns, ads, settings, search terms and performance figures. We store the refresh token Google gives us encrypted, so the employee can keep working between your visits.
- What employees do: the proposals they make, what you approve, the limits you set, and what each employee costs us to run.
- Cookies: the ones needed to keep you signed in and to complete connecting Google and Slack. Our own pages use no advertising cookies.
Google user data
If you connect Google Ads, we ask for Google's Google Ads permission and, to show which login you used, your email address. Google offers one Ads permission and it cannot be limited to read only. ClickEngage's promise is that nothing in your account is changed unless you approve it.
We use this information only to provide and improve the features you ask for: reading your account to give advice and preparing changes for you to approve, and applying a change only after you approve it. We do not use it to show you or anyone else ads, we do not sell it, and no person at ClickEngage reads it unless you ask us to, it is needed for security, or the law requires it.
ClickEngage's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove our access at any time at myaccount.google.com/permissions, or ask us to delete it and we will.
Who we share Google user data with
We do not sell Google user data, rent it, or give it to anyone for their own purposes, and we do not use it for advertising. We disclose it only to the providers below, who handle it on our behalf to run the features you asked for, and where the law requires it.
- Supabase stores the connection to your Google Ads account: the encrypted token and the list of accounts your Google login can reach.
- Vercel runs the website that connects your account, so the connection passes through it.
- OpenRouter and the AI model companies it passes requests to receive the Google Ads figures an employee needs in order to write its advice. We tell OpenRouter to use only providers that do not collect or keep what we send, so your Google Ads data is not used to train AI models.
- Slack: an employee's summaries and the changes it proposes, which can include Google Ads details, are posted in your own Slack workspace, to the people you have added there.
How we protect Google user data
We protect the Google access you give us in these ways:
- The token Google gives us is encrypted (AES-256-GCM) before it is stored, and it cannot be read from a web browser, only by our servers.
- Each account's records are separated by database access rules, so a signed-in customer can see only their own connection and nothing of anyone else's.
- Our website and the services it talks to use encrypted connections (HTTPS).
- Only authorised ClickEngage administrators can see account records, and no person reads your Google data unless you ask us to, it is needed for security, or the law requires it.
- Nothing in your Google Ads account is changed until you approve it, and you can remove our access at any time at myaccount.google.com/permissions.
Who else handles your information
We use these providers to run the service, and they process information for us:
- Vercel, which hosts our website.
- Supabase, which stores our data.
- OpenRouter and the AI model companies it passes requests to, which read the text and figures an employee needs in order to write its advice. We send only what that task needs, and never your passwords or tokens.
- ForwardEmail, which delivers our emails.
- Slack and Google, when you connect them.
How long we keep it
We keep your account information while your account exists. The text of a Slack message sent to an employee is deleted a week after it has been handled. Google and Slack tokens are kept until you remove our access or ask us to delete them. If you ask us to delete your account we will, and tell you when it is done.
Your rights
Under UK data protection law you can ask to see what we hold about you, correct it, have it deleted, or object to how we use it. Write to contact@clickengage.ai and we will answer within a month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Security
Slack and Google tokens are encrypted before they are stored. Only the owner of an account can send commands to its employees, and employees start in Planning, where they cannot spend.
Children
ClickEngage is for businesses. It is not meant for anyone under 18.
Changes
If we change this policy we will update the date at the top and, for material changes, tell you by email. Last updated 19 October 2026.