Product Privacy Notice | Glitch

Legal

Product Privacy Notice.

October 2026

1. PURPOSE OF THIS PRODUCT PRIVACY NOTICE.

Glitch Ads Limited ("Glitch", "we", "our" and "us") is a company incorporated in Ireland with its registered office at 29/30 Lower Baggot Street, Dublin 2, D02 XT93, Ireland.

This Product Privacy Notice explains how personal data and other information are processed when you use the Glitch platform and services, including when you connect an advertising account such as Google Ads or Meta to Glitch.

This Notice should be read together with our:

  • Terms of Use;
  • Data Processing Agreement; and
  • Website Privacy Notice.

Our Website Privacy Notice applies separately to information collected through our public website, including website analytics, enquiries, marketing and recruitment.

2. OVERVIEW OF THIS NOTICE.

Glitch may process personal data in different capacities depending on the circumstances.

Where we process information about you for our own business purposes, such as administering your Glitch account, managing subscriptions, providing support, communicating with you or maintaining the security of our services, Glitch acts as a controller.

Where we process personal data contained in your advertising accounts or other customer data on your behalf in order to provide the Glitch services, you are generally the controller and Glitch acts as your processor.

Where Glitch acts as processor, our Data Processing Agreement (DPA) applies and forms part of our agreement with you.

3. WHAT DATA DO WE PROCESS?

Depending on how you use the services, we may process:

Account and user information.

This may include:

  • your name;
  • business email address;
  • job title;
  • employer or organisation;
  • user permissions and role;
  • login and authentication information;
  • subscription information; and
  • communications with Glitch.

Usage and technical information.

This may include:

  • IP address;
  • device and browser information;
  • dates and times of access;
  • features used;
  • actions taken within the platform;
  • security and audit logs; and
  • diagnostic and performance information.

Connected advertising account data.

When you connect an advertising account such as Google Ads or Meta to Glitch, we receive information from that advertising platform using the authorisation you provide.

Depending on the advertising platform and the permissions granted, this may include:

  • account identifiers and settings;
  • campaigns and campaign status;
  • ad groups;
  • advertisements and advertising assets;
  • keywords and search terms;
  • audiences and targeting information;
  • bids and budgets;
  • conversion information;
  • impressions, clicks and other performance metrics; and
  • other information required to create, manage, optimise and report on advertising campaigns.

4. HOW CONNECTED ADVERTISING ACCOUNTS WORK.

When you connect an advertising account, you authorise Glitch through the relevant advertising platform.

For example, when Google Ads is connected using Google's OAuth authorisation process, Glitch receives an access authorisation which allows our platform to interact with the Google Ads account within the permissions granted by the user.

Glitch does not need your Google password to provide this access.

Changes to connected advertising accounts may be made:

  • automatically by Glitch software;
  • using artificial intelligence systems; and
  • by authorised Glitch employees or contractors using the Glitch platform.

Advertising platforms may record these changes as having been made by the user account which authorised Glitch. Glitch may separately maintain its own record of actions taken through its services.

5. HOW WE USE CONNECTED ADVERTISING ACCOUNT DATA.

We use connected advertising account data to provide, operate, secure and support the Glitch services.

This includes:

  • connecting Glitch to your advertising account;
  • creating and managing advertising campaigns;
  • analysing campaign performance;
  • generating recommendations;
  • optimising campaigns;
  • making authorised changes;
  • providing reports and insights;
  • detecting errors or performance issues;
  • maintaining security and audit records; and
  • supporting and troubleshooting your account.

We do not sell identifiable connected advertising account data.

We do not disclose one customer's identifiable advertising account data to another customer.

6. ARTIFICIAL INTELLIGENCE.

Glitch uses artificial intelligence and automated systems as part of its services.

Information may be processed using AI systems for purposes such as:

  • analysing advertising performance;
  • generating recommendations;
  • creating or improving advertising content;
  • identifying optimisation opportunities;
  • supporting campaign management; and
  • operating features within the Glitch platform.

Where third-party AI providers process customer data on our behalf, they act as service providers or subprocessors subject to contractual and data-protection requirements.

We require providers processing customer data on our behalf to process that data only for the purposes for which we engage them.

Customer data submitted to AI providers must not be used by those providers to train their own general-purpose models where our contractual arrangements prohibit such use.

7. ANONYMISED AND AGGREGATED DATA.

We may create anonymised and aggregated statistical information from use of our services and connected advertising accounts.

We may use this information to:

  • maintain and improve Glitch;
  • train, test and improve Glitch's own models and systems;
  • develop recommendations and product features;
  • analyse trends; and
  • provide benchmarks and comparisons within the Glitch service.

Before information is used for these purposes, we take steps designed to prevent the resulting dataset from identifying you, your business, your advertising account or an individual.

Benchmarks and comparisons are based on aggregated information from multiple customers and are designed so that one customer cannot identify another customer's data.

We do not sell or license anonymised connected advertising account datasets or provide them to third parties for the purpose of training third-party models.

8. SUBPROCESSORS AND SERVICE PROVIDERS.

Glitch uses third-party service providers to help provide, host, secure and support the services.

Where a provider processes personal data on our behalf in connection with customer services, that provider may act as a subprocessor.

glitchads.ai/subprocessors

9. YOUR DATA PROTECTION RIGHTS.

Some of our service providers and subprocessors may process personal data outside the European Economic Area.

Where personal data is transferred internationally, we use appropriate safeguards required by applicable data-protection law. Depending on the circumstances these may include:

  • an adequacy decision issued by the European Commission;
  • the European Commission's Standard Contractual Clauses; or
  • another lawful transfer mechanism.

Where Glitch acts as processor, international transfers are also governed by our Data Processing Agreement.

10. DISCONNECTING AND ADVERTISING ACCOUNT.

You may disconnect an advertising account through Glitch where that functionality is available or revoke Glitch's access through the relevant advertising platform.

Where you ask Glitch to perform the disconnection on your behalf, we will take reasonable steps to complete it within three business days.

Once access has been revoked, Glitch will no longer obtain new information from the connected account or make further changes through that authorisation.

11. RETENTION OF CONNECTED ADVERTISING ACCOUNT DATA.

We retain customer data only for as long as reasonably necessary for the purposes for which it was collected and in accordance with our contractual, legal and security obligations.

Following disconnection of an advertising account, previously obtained information may be retained for a limited period where necessary to:

  • maintain records of services provided;
  • comply with legal obligations;
  • investigate or resolve disputes;
  • maintain security;
  • enforce our agreements; or
  • complete deletion or anonymisation processes.

At the end of the applicable retention period, the data will be deleted or anonymised unless applicable law requires continued retention.

12. SECURITY.

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include access controls, authentication controls, logging, encryption and other security measures appropriate to the nature of the information processed.

Where we become aware of a personal-data security incident affecting data processed on behalf of a customer, we will notify that customer in accordance with our Data Processing Agreement.

13. YOUR RESPONSIBILITIES.

You are responsible for ensuring that:

  • you have authority to connect an advertising account to Glitch;
  • users granting Glitch access have appropriate permissions;
  • the personal data you provide to Glitch has been lawfully collected;
  • you provide any necessary notices to individuals whose personal data Glitch processes on your behalf; and
  • your use of Glitch complies with applicable advertising-platform terms and applicable law.

Where Glitch processes personal data on your behalf, you are responsible for determining the lawful basis for that processing unless applicable law provides otherwise.

14. YOUR DATA PROTECTION RIGHTS.

Where Glitch acts as controller in relation to your personal data, you may have rights under applicable data-protection law, including rights to:

  • access your personal data;
  • correct inaccurate or incomplete information;
  • request deletion in certain circumstances;
  • restrict processing;
  • object to certain processing;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with the Data Protection Commission.

Where Glitch processes personal data solely on behalf of one of our customers, requests relating to that data should generally be directed to the relevant customer as controller. We will provide reasonable assistance to that customer in responding to the request where required under our DPA.

15. CONTACT US.

Questions concerning this Product Privacy Notice or Glitch's processing of personal data may be sent to:

operations@glitchads.ai

Glitch Ads Limited
29/30 Lower Baggot Street
Dublin 2
D02 XT93
Ireland

16. CHANGES TO THIS NOTICE.

We may update this Product Privacy Notice from time to time to reflect changes to our services, technology, subprocessors, legal requirements or data-processing practices.

The current version will be published on our website together with the date on which it was last updated.