Privacy
Privacy policy
What we collect, why, and how long we keep it — in plain language.
Last updated: 11 Oct 2026
Who we are
EdgeConversions ("we") provides a service that sends conversion events from a server to ad platforms such as Meta and Google. This policy covers two kinds of data: your account data as a customer, and your website visitors' data, which we process on your behalf.
Account data
We store your email address, plan, and payment history (handled by Stripe; we never store card numbers).
Meta access tokens and GA4 API secrets are stored encrypted (AES-256-GCM) and only decrypted when sending events.
Your visitors' data
For each event we receive the event name, page URL, IP address, user agent, ad cookies (_fbp, _fbc, _ga), and the data you send such as order value.
Email, phone, name and address are hashed with SHA-256 on our server before being forwarded. Raw values are never stored.
In this relationship you are the data controller and we are the processor. You are responsible for having a valid legal basis and visitor consent under GDPR, Indonesia's PDP Law, or any other applicable law.
Retention
Delivery logs are kept for 7 days and then deleted automatically. Event payloads are only stored temporarily while queued for delivery.
Account data is kept while your account is active. Deleting an account or website deletes its related data.
Your rights
You can access, correct, export or delete your account data at any time from the dashboard or by contacting us. Requests from your visitors should be forwarded to us so we can help.
Contact
Questions about privacy? Use the Contact page and pick the topic "Something else".
Something unclear? Contact us