Security

1. Overview

This page is an overview of our current security practices at AdFence, the ad account security monitoring service operated by Threasury Media LLC. It is a description of how we work, not a certification, an audit report, or a service commitment — and it changes as the Service changes.

We take the protection of your accounts and data seriously and design the Service to hold as little access as the job requires. At the same time, no service can promise absolute security, and we do not claim to.

2. What AdFence Does

AdFence watches the advertising accounts you connect and tells you when something looks wrong — unexpected changes, unfamiliar access, and other signals worth your attention. Its purpose is to shorten the gap between something happening in your ad accounts and you knowing about it. It supports your oversight of those accounts; it does not replace it.

3. Connecting Your Ad Accounts

Advertising accounts are connected through each platform's OAuth authorisation flow. We never ask for or store your advertising platform passwords; the connection rests on the token the platform issues when you authorise it, and you can revoke that authorisation with the platform at any time.

Monitoring is read-only by default. Under its standard monitoring access, AdFence reads from your connected accounts and makes no changes to campaigns, budgets, creatives or settings.

The Kill Switch is the single exception, and only if you enable it: it grants limited write access used solely to pause campaigns on the accounts you select. That access does nothing else, and it stays off until you turn it on.

4. Your AdFence Account

AdFence account passwords are stored hashed — we do not hold a readable copy of your password and cannot retrieve it for you. Sessions and the sign-in process are protected by the Service's own controls, and we act on reports of unauthorised access to an account.

5. Access Controls

Role-based access controls govern what each person can see and do within the Service, so team members reach the workspaces and accounts they have been given and not others.

6. Protecting Your Data

Data moving between you, AdFence and the advertising platforms is encrypted in transit using TLS/SSL, and encrypted at rest in the systems that store it. The Privacy Policy describes what we collect, why, and who we share it with.

7. Alerting

Alerts reach you through the channels you configure — Email, Slack and Telegram — with the severity thresholds and quiet hours you choose. Because delivery depends on those channels and on the advertising platform APIs that supply the underlying data, we cannot guarantee that every event is detected or that every alert arrives promptly, and monitoring is not a substitute for your own review of your accounts.

8. Controls in Your Hands

Much of the Service's security posture is yours to set. You choose which advertising accounts to connect, whether the Kill Switch is enabled and on which accounts, who on your team has access, and how alerts reach you. You can disconnect any connected advertising account at any time, which ends AdFence's access to it through the platform API, and you can revoke the authorisation with the platform directly.

9. Retention and Deletion

How long monitoring history is retained depends on your plan; the periods, and what happens to data when you disconnect an account or cancel a subscription, are set out in the Privacy Policy.

You can delete your AdFence account from your account settings. Deletion is handled as described in our published Privacy Policy.

10. Service Status

Current operational state is published at status.adfence.io. That page, not this one, is the place to check whether the Service is running normally right now.

11. Contact

Security questions, and reports of anything that looks like unauthorised access or a weakness in the Service, can be sent to hello@adfence.io. Our Acceptable Use Policy explains what we ask of you when reporting.

Threasury Media LLC — operator of AdFence.