Privacy policy

WhyItWon is a creative intelligence platform for advertising teams. It reads a brand's advertising data, decodes what makes ads work, and produces analysis, briefs, and creative direction. The service is operated by Yehonatan Tav (עוסק מורשה 313201469), Rishon LeZion, Israel. This policy explains what we collect, how we use it, who we share it with, and how you can delete it.

We collect only what the service needs to work:

• Account information — the email address and profile details you use to sign in.
• Meta advertising data you authorize — when you connect your Facebook or Instagram business account, we read, on your behalf and with your permission, your ad accounts, campaigns, ads, ad creative (images, video, text), performance metrics, and the public comments on your ads. We request read-only access. We do not create, edit, pause, or spend on your campaigns.
• TikTok advertising data you authorize — when you connect your TikTok Ads account through TikTok's Marketing API, we read, on your behalf and with your permission, your advertiser accounts, campaigns, ads, creative videos and images, and performance reports (spend, impressions, clicks, conversions, and related metrics). We request read-only access. We do not create, edit, pause, delete, or spend on your campaigns.
• Google Ads and Google Analytics data you authorize — when you connect Google, we read, on your behalf and with your permission, Google Ads accounts you select (including YouTube ads performance and creative metadata) and, if you choose, Google Analytics 4 property summaries for enrichment. We request read-only access to Ads and Analytics. We do not create, edit, pause, delete, or spend on your campaigns, and we do not modify your Analytics configuration.
• Shopify store data you authorize — when you install WhyItWon on a Shopify store, we read, on your behalf and with your permission, order and product data needed for true revenue and ROAS (order totals, refunds, line items, and product identifiers). We request read-only Admin API access. We do not create or edit products, orders, or store settings.
• Usage information — basic logs of how you use the dashboard, so we can operate and improve it.

We use the data to:

• analyze your ad creative and explain why it wins or loses;
• generate insights, creative briefs, and creative direction for your next ads;
• display your performance in your private dashboard;
• operate, secure, and improve the service.

We do not sell your data. We do not use your Meta, TikTok, Google, or Shopify data for advertising to you or to anyone else. We use it only to provide the analysis you asked for.

Our use of data obtained through Meta's APIs follows the Meta Platform Terms and Developer Policies. Access is limited to the permissions you grant during connection, and used solely to provide the features described above. You can disconnect your Meta account at any time, which stops all further access.

Our use of data obtained through TikTok's Marketing API follows TikTok for Business developer terms and policies. We access only the advertising data you authorize (advertiser accounts, campaigns, ads, creative assets, and reports), store access and refresh tokens encrypted at rest, and keep that data only while your account is active or as needed to provide the service. Access is limited to the permissions you grant during connection, and used solely to provide the features described above. You can disconnect your TikTok account at any time in WhyItWon, or revoke the app in your TikTok Business Center / Ads Manager settings, which stops all further access. You can also email us at Hello@whyitwon.com to request deletion of TikTok-derived data associated with your connection.

Our use of data obtained through Google APIs follows Google's API Services User Data Policy, including the Limited Use requirements. We access only the Google Ads and Google Analytics data you authorize, store access and refresh tokens encrypted at rest, and keep that data only while your account is active or as needed to provide the service. We do not use Google user data to serve ads, sell personal information, or train generalized AI / ML models. You can disconnect Google at any time in WhyItWon Settings → Data sources, or revoke WhyItWon in your Google Account security settings (Google Account connections), which stops further access. Email Hello@whyitwon.com to request deletion of Google-derived data associated with your connection.

Our use of data obtained through Shopify's Admin API follows Shopify's Partner and API terms, including Protected Customer Data rules. We access only the order and product data you authorize, store access and refresh tokens encrypted at rest, and keep that data only while your account is active or as needed to provide the service. We respond to Shopify's mandatory privacy webhooks (customer data request, customer redact, shop redact). You can disconnect Shopify at any time in WhyItWon Settings → Data sources, or uninstall the WhyItWon app in Shopify Admin, which stops further access. Email Hello@whyitwon.com to request deletion of Shopify-derived data associated with your connection.

We share data only with the service providers that help us run the platform, and only so they can perform that work for us:

• Supabase — database and storage hosting.
• Vercel — application hosting.
• Anthropic and Google — AI models that analyze your creative to produce insights. Content sent for analysis is not used to train their models.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Access tokens for your connected accounts are encrypted at rest. Access to production data is restricted to the people who operate the service. We keep your data only as long as your account is active or as needed to provide the service.

You can request deletion of your data at any time in two ways:

• Email us at Hello@whyitwon.com and we will delete your account data and disconnect any linked Meta, TikTok, Google, or Shopify accounts.
• Remove the app from your Facebook settings (Settings and privacy → Settings → Business integrations). Facebook then notifies us automatically and we delete the data associated with your connection and provide a confirmation code you can track.
• Revoke WhyItWon in your TikTok Business Center or Ads Manager authorized apps, or disconnect TikTok inside WhyItWon. We then stop further access and delete the TikTok advertising data and tokens associated with that connection.
• Revoke WhyItWon under Google Account → Connections, or disconnect Google inside WhyItWon. We then stop further access and delete the Google Ads / Analytics data and tokens associated with that connection.
• Uninstall WhyItWon in Shopify Admin, or disconnect Shopify inside WhyItWon. We then stop further access and delete the Shopify tokens and derived store data associated with that connection.

You can request access to, correction of, or deletion of your personal data, and you can withdraw your consent to connect your Meta, TikTok, Google, or Shopify account at any time. To exercise any of these, contact us at Hello@whyitwon.com.

We may update this policy as the service evolves. When we do, we will change the "last updated" date above. Material changes will be communicated through the service.

Questions about this policy or your data? Email Hello@whyitwon.com.