Privacy policy

Last updated: November 14, 2026

In short: Minro reads only reporting data from a brand's own ad, analytics and store accounts, and uses it only for that brand's reports. We do not sell data or use it for advertising. Access can be revoked at any time; to request deletion, email can@getminro.com.

1. Who operates Minro

Minro is a read-only reporting platform for performance marketing, operated by Can Taş, an independent performance marketer ("Minro", "we" or "the operator" in this policy). This policy covers the getminro.com website and the Minro application (app.getminro.com). The data controller is Can Taş. Contact: can@getminro.com.

The operator sets Minro up on behalf of brands: a brand grants the operator read access to its ad accounts and analytics properties, the operator connects those accounts to Minro once, and executives invited by the brand see only the reports opened to them.

2. Data we process

Account information

• The name and email address of each invited person.
• When signing in with Google: the name, email address and Google account ID that Google shares (only the openid, email and profile scopes).
• For people who set a password through an invitation link: a one-way hash of the password (the password itself is never stored).
• Which brands and channels a person can access, their last sign-in time and the reports they create.

Platform connection information

• Access and refresh tokens obtained through each platform's official authorization (OAuth) flow, or access tokens issued by the platform for this purpose.
• The name, ID, currency and time zone of the connected accounts.

Reporting data

• From ad accounts: performance metrics such as spend, impressions, clicks, conversions, conversion value and revenue; campaign, ad set (ad group) and ad names and IDs.
• Aggregated breakdowns provided by the ad platforms (for example age range, gender, region, device). These are totals, not data about individual people.
• From Google Analytics 4: sessions, traffic sources, conversions and purchase funnel metrics.
• From Shopify: aggregated sales data such as order counts and amounts, discounts and refunds, product names, sales channel and city.

Data we do not process

• Personal data of TikTok, Meta or Google users, or of people who saw or interacted with ads.
• Audiences, custom audience lists or audience members.
• Shopify customers' names, email addresses, phone numbers or addresses.
• Payment or card details. Minro does not take payments from signed-in users.

3. How we use data

• To provide ready-made reports, an executive overview, period comparisons and shareable reports to the brand that owns the data and to the people that brand authorizes.
• To refresh data hourly and detect connection errors.
• To let you sign in, send invitation emails and enforce who can see which brand.
• To keep the service secure and prevent misuse.

We do not use data for ad targeting, profiling, credit decisions, resale, or for another brand's reports. One brand's data is never combined with another brand's.

4. Google, TikTok, Meta and Shopify data

Google API Services

Minro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Ads and Google Analytics data is used only to provide the reporting features described above. It is not transferred to others except as needed to provide those features, for security, or to comply with law; it is not used for advertising; it is read by humans only with the user's explicit consent, for security purposes, to comply with law, or for internal operations as permitted; and it is not used to train AI models.

TikTok API for Business and Meta Marketing API

Data received from TikTok and Meta is used only to report to the advertiser (brand) that owns the data, and to the people that advertiser authorizes. Minro does not create, modify or pause campaigns, ad groups, ads or budgets on these platforms; it only reads reporting endpoints. It does not access personal data of platform users, does not build audiences, and does not transfer this data to third parties.

Shopify

Shopify stores are connected with read-only scopes, and aggregated sales data is used for reports. Customer contact details are not requested or stored.

5. Storage and security

• Platform access tokens are stored encrypted (AES-256-GCM) in the database. The encryption key is kept separately from the database.
• Data is stored on servers controlled by the operator; application traffic is encrypted with HTTPS.
• Access is by invitation only; each person sees only the brands and channels assigned to them.
• Passwords are stored only as one-way hashes.

No system can guarantee complete security. If a security incident affects your data, we will notify the affected brands and people without undue delay.

6. Sharing

We do not sell or rent data. Data reaches others only in these cases:

• Ad and analytics platforms: requests are sent to the APIs of Meta, Google, TikTok and Shopify to retrieve reporting data.
• Infrastructure providers: providers of server hosting and invitation email delivery, who can access data only to provide that service.
• What you share: when you create a share link for a report or export it as an HTML file, anyone with the link or file can see that report. Share links can be revoked.
• Legal requirements: binding requests from competent authorities under applicable law.

7. Retention and deletion

• Account and reporting data is kept for as long as the brand uses Minro.
• When a brand revokes access (for example in Meta Business Manager, Google Ads, GA4, TikTok or Shopify settings), Minro can no longer retrieve new data from that account. When the brand or the operator removes the connection, its tokens are deleted.
• When you request deletion for a brand, person or account, the related account information, tokens and stored reporting data are deleted within 30 days at the latest.
• For deletion and access requests: can@getminro.com.

8. Your rights

You have the right to access your data, ask for it to be corrected or deleted, and object to its processing. Send requests to can@getminro.com; we respond within 30 days. If you are in Türkiye, you also have the rights listed in Article 11 of Law No. 6698 on the Protection of Personal Data (KVKK); see the Turkish version of this policy.

9. Cookies

This website (getminro.com) uses no cookies, tracking pixels or analytics tools. The Minro application uses only a strictly necessary session cookie for signed-in users and a short-lived security cookie during Google sign-in. No advertising or tracking cookies are used.

10. Changes and contact

Minro is not intended for people under 18. When we change this policy, we update the date on this page and notify users of significant changes by email.

Questions: Can Taş, can@getminro.com.