How we keep your workspace safe

• Tokens from Meta, TikTok, Google, Snapchat, LinkedIn and Apple Ads are encrypted at rest, and never sent to your browser.
• We ask each platform for only the permissions we need to run what you ask for.
• Tokens are refreshed before they expire, and we warn you a week ahead when one needs you.
• Disconnect deletes a token at once. Even our staff only ever see its last four characters.

• Every table that holds customer data is protected by row-level security in the database, so one workspace can never read another’s rows.
• An automated test fails our build if a new table ships without those rules.
• Every request is checked against your session before it reads or changes anything; a workspace id from the browser is never trusted.

• Only named staff can reach our internal tools, with multi-factor sign-in and roles that limit what each person can do.
• Every change staff make is written to an audit log that can’t be edited.
• Support staff see the context you choose to attach to a conversation, not your whole workspace.

• Card details are handled by our payment providers and never touch our servers.
• Wallet balances move only through a double-entry ledger, reconciled every day against what the platforms report.
• Nothing spends until someone presses Launch or Fund on a page that shows exactly what will be spent.

• Every webhook from a platform or payment provider is checked against its signature before we act on it.
• When we read a link you paste, we block requests to private networks and internal addresses.
• Anonymous pages and forms are rate limited.
• Conversion events are matched with hashed emails and phone numbers; raw IP addresses aren’t stored with events.

• No secrets in our code. Keys live in our hosting providers’ secret stores.
• All traffic is encrypted in transit with TLS.
• Every platform integration can run in a rehearsal mode that never touches a real account, which is how we test changes.

Email hello@wonderads.io with the subject “Security”. Please give us a reasonable time to fix an issue before sharing it publicly. We’ll reply within 2 working days and keep you updated until it’s resolved.