Privacy policy

Last updated 7 November 2026

This page says what Optimum holds about people, why, where, for how long, and what you can ask us to do. It is written for a person, not a lawyer. Where the law needs a precise term, it is in brackets.

Who we are

Optimum is operated by Allied Clicks LLC, a company registered in the United States, at optimum.ad (this site) and app.optimum.ad (the app). For the data of the people who sign in to the app, Allied Clicks LLC decides what is collected and why (it is the "controller"). Questions about privacy go to privacy@optimum.ad.

Three kinds of people

Optimum touches the data of three kinds of people, and the rules differ for each.

1. People who sign in to the app: the staff of a client brand and of Optimum. We are the controller of their data.
2. A client's customers: the people who buy from a brand's Shopify store. We handle their order data only on the brand's behalf and on its instructions (we are the brand's "processor"; the brand is the controller).
3. People behind advertising data: a brand's Meta ad accounts hold campaigns, spend and results. That data is about ads and money, not about named people, but it belongs to the brand and we treat it the same way.

People who sign in to the app

What we hold

• Your email address and name.
• A hash of your password (the password itself is never stored).
• The secret of your authenticator app, encrypted.
• Your sessions: when you signed in, from which IP address and browser, and the workspace you were looking at. A session ends after 7 days, or after 24 hours without use, or when you sign out.
• An audit log of what you did in Optimum: which action, when, from which IP address, and a hash of what you asked for. Nothing you type as a password or code is ever in it.
• Counts of wrong sign-in attempts, per account and per IP address, for a short time, so that repeated guessing can be slowed down.

Why

To let you in and keep everyone else out, and to be able to say afterwards who changed what. This is needed to provide the service to the client you work for (the contract with the client) and to keep it secure (our legitimate interest, and the client's).

How you get an account

There is no sign-up. An administrator creates each person at a client's request; you set your own password at that moment, and then your authenticator app, before you can see anything.

A client's customers

What we hold

When a brand installs Optimum's app in its Shopify store, Optimum copies the store's orders. An order carries what was bought and for how much, the customer's name, email address, phone number and addresses (where the store has granted the app access to them), and the attributes the brand's own storefront attached to it. Optimum keeps each order as Shopify sent it, beside the parts it reads out of it: the amounts, dates and statuses, Shopify's id for the customer, and whether it was that customer's first order.

The brand's storefront records, on the brand's own domain, which ad a visitor came from: a click identifier, Meta's click identifier (fbclid) and, where the visitor has agreed, Meta's browser identifier (fbp). These travel with the order to Optimum.

Why

• To count orders and revenue per store and per day, and to compute the ratios a brand runs its advertising by (MER, cost per order, and the like).
• To match each order to the ad and the click that brought it, so the brand can see which ads work.
• To tell a first order from a repeat order.

Whose rules apply

The brand decides what is collected and why, and is responsible for telling its customers and for asking their consent where that is required. Optimum acts on the brand's instructions under a written agreement with it. If you are a customer of a brand and want to know what is held about you or want it deleted, ask the brand; Optimum helps the brand answer.

Advertising data from Meta

What we hold

• The brand's ad accounts: ids, names, currencies and timezones.
• Ad sets, with their names, statuses and daily budgets, and the ids of the campaigns they belong to.
• Spend, impressions, clicks and purchases per ad and per day, as Meta reports them.
• An access token the brand issued to Optimum, so Optimum can read these and, within the caps the brand set, change budgets and pause ad sets. The token is encrypted at rest.

Why

To show the brand its numbers next to its orders, and to carry out the changes the brand's people ask for or the rules they switched on. Optimum changes only ad sets in accounts the brand attached to it, never more than the brand's caps allow, and writes every change down before sending it.

What we do not do

• We do not sell data, rent it, or share it with anyone for their own purposes.
• We do not advertise to consumers ourselves. The ads Optimum runs are a brand's ads, in the brand's accounts, under the brand's name.
• We do not build profiles of individual shoppers or make decisions about individuals. Orders are matched to ads to measure the ads, not the people.
• We do not use personal data to train AI models, and we do not give it to anyone who would. Optimum sends no data to an AI provider today. When its creative tools are connected to one, what they send will be about products and ads, not about a brand's customers, and this page will name the provider.

Who else handles the data, and where

• Hosting: Optimum runs on a server in Germany, rented from Hetzner Online GmbH and operated by Allied Clicks LLC. The database, the encrypted tokens and the audit log are on that server.
• Shopify and Meta: the sources of the data above. Each holds the brand's data under its own terms with the brand; Optimum reads from them through the access the brand granted and can be cut off by the brand at any time (uninstalling the Shopify app, or revoking the Meta token).
• Email: Optimum sends no email today. When it starts to (for instance, to invite a person to the app), the provider will be named here.

No analytics service, advertising network or other third party receives data from this site or from the app.

International transfers

Data about people in the European Union and the United Kingdom is processed and stored in Germany. Allied Clicks LLC is a United States company, and its staff may access the data from the United States to operate the service. Where the law requires it, that access is covered by standard contractual clauses (the European Commission's, and the UK addendum to them) in our agreement with each client.

How long we keep it

• A client's data (orders, customers, advertising data and tokens) is kept while the client uses the service and for 30 days after the service ends, and is then deleted. A client can ask for earlier deletion at any time.
• Access tokens stop being used at once when a brand uninstalls the app, revokes the token or asks us to disconnect, and are deleted within 30 days.
• An app user's account is deleted when the client asks, or when the client's service ends. Records of a person in the audit log are kept for as long as the log is, with the person's name and email removed from them.
• The audit log is kept for the life of the service and for up to 12 months after a client leaves, because it is what shows afterwards who changed what. It is never edited.
• Backups: regular backups kept away from the server are being set up. When they are, this page will say how long a backup lives; deleted data stays in a backup until that backup expires.

How it is protected

• Access tokens and authenticator secrets are encrypted with a key that is kept outside the database.
• Passwords are stored as salted hashes with a memory-hard algorithm, never as they are.
• Every person signs in with a password and a code from an authenticator app; a fresh code is needed again before anything that spends money.
• Each client's data is separated from every other client's at the database level.
• Every action, by a person, a tool or a rule, goes through one path that writes an audit row.
• All traffic to this site and the app is over HTTPS.

Your rights

If you are in the European Union or the United Kingdom, the GDPR and the UK GDPR give you the right to see the data held about you, to have it corrected or deleted, to receive a copy of it in a usable form, to object to some uses of it, and to complain to a supervisory authority (for the UK, the Information Commissioner's Office). People elsewhere can ask us the same things and we will answer.

• If you sign in to the app: write to privacy@optimum.ad from the address your account uses. We answer within 30 days.
• If you are a customer of a brand that uses Optimum: ask the brand, which is the controller of your data. The brand instructs us, and we carry out the instruction within 30 days. If you write to us directly, we will tell the brand and help it answer.

Deleting your data is described step by step on the data deletion page.

Cookies

This site (optimum.ad) sets no cookies, uses no analytics and loads nothing from other domains. That is why there is no cookie banner.

The app (app.optimum.ad) sets two cookies, both first-party and both strictly necessary:

• __Host-optimum_session: your session, so you stay signed in. It ends after 7 days, after 24 hours without use, or when you sign out.
• __Host-optimum_device: a mark that this browser has signed in before, so that strangers guessing passwords cannot lock you out of your own browser. It identifies the browser to Optimum only; it is not sent anywhere else and it tracks nothing.

The app also keeps your choice of light or dark appearance in your browser's own storage. It never leaves your browser.

Children

Optimum is a tool for businesses. It is not for anyone under 18, and we do not knowingly hold data about anyone under 18 except as part of a brand's orders, which the brand controls.

Changes to this page

When this page changes, the date at the top changes with it. A change that matters to the people who sign in to the app is also noted in the app's changelog. Earlier versions are available on request.

Contact

Allied Clicks LLC, United States.
Privacy: privacy@optimum.ad
Everything else: support@optimum.ad