Privacy Policy.

Badger Sheets is an Amazon PPC bulk-file audit tool operated by Ad Badger, based in Austin, Texas, USA. This policy covers sheets.adbadger.com and the audit tools served from it.

Ad Badger’s other products are covered by the policy at adbadger.com/privacy-policy. Where the two differ for Badger Sheets specifically, this page governs.

Your email address. Badger Sheets has no passwords at all. You sign in with a one-time link sent to your email, so your address is the account. You can optionally give a first name, which we use only to address you in the product and in email.

Your bulk file and the audit built from it. When you upload a bulk file to your account, we store the file and the audit derived from it — campaign and ad group names, keywords and product targets, search terms, ASINs and SKUs, and the associated spend, sales, clicks, orders and impressions. This is your business data. We treat it as yours.

Security records. To stop brute-force and abuse of the sign-in link, we record each attempt. We do not store your IP address or email in readable form for this — both are one-way hashed with a secret key before they are written down. The stored value can be matched against a repeat attempt but cannot be turned back into your IP or your address.

Product usage. Which pages you open and which features you use, via PostHog. This is tied to your account only after you give us your email; before that it is anonymous. We deliberately strip sign-in tokens out of every URL before it reaches analytics.

Support conversations. If you use the chat widget, your messages and email address go to our support inbox.

Some of our tools run entirely inside your browser, and this is a real technical boundary rather than a promise about what we choose to look at.

The in-browser audit viewer at /local parses and audits your file in a Web Worker on your own machine. The file is never uploaded, and no result is transmitted. You can run it with your network disconnected.

The free audit and n-gram tools on the homepage and at /ngram also parse your file in your browser — the file itself is never uploaded. To be precise about the part that does leave: when you enter your email to unlock the full report, the report (not the file) is sent to us and held so we can attach it to your account once you click the sign-in link. Until you verify, that record is keyed by a hash of your email rather than the address itself.

We use what we collect to:

• run your audit and show you the results;
• send your sign-in link and tell you when an audit has finished;
• keep your audit history available across your devices;
• protect the service from abuse, bots, and sign-in attacks;
• understand which parts of the product get used, so we can improve them;
• answer you when you contact support.

We do not use your campaign data to advertise to you, and we do not use it to train machine-learning models.

Badger Sheets compares your account against benchmarks built from other audits. This is worth explaining exactly, because it is the one place your numbers contribute to something other people see.

Benchmarks use only headline ratios — ACOS, ROAS, CTR and conversion rate — grouped into broad spend tiers. No campaign name, keyword, search term, ASIN, SKU, account identifier or email is ever part of a benchmark, and no benchmark can be traced back to an individual account.

A benchmark is only returned when at least 20 accounts sit in that group. Below that threshold the product shows nothing rather than a number that could describe a small enough set of accounts to identify one. Audits in currencies other than USD are excluded from the pool entirely.

We do not sell your personal information, and we never have. We do not share your campaign data with other customers, with Amazon, or with advertisers.

We use a small number of vendors to run the service. Each processes data only to provide their piece of it:

• Supabase — database, authentication and file storage. Your account, your audits and your uploaded files live here.
• Vercel — application hosting and delivery.
• Inngest — the background queue that runs your audit after upload.
• Resend — delivery of sign-in links and audit-ready notifications.
• PostHog — product analytics.
• Cloudflare — bot protection on the sign-in and email forms.
• Chatwoot — the support chat widget.

We may also disclose information where we are legally required to, or to protect our rights or the safety of others. If Ad Badger is ever acquired or merged, your data would transfer with the business, and this policy would continue to apply until you were told otherwise.

Audits are kept until you delete them. Your history stays available so you can compare an account over time.

The raw bulk file you upload is deleted 30 days after the audit completes. The audit itself, every finding and every figure, is stored separately and is not affected. Nothing reads the original file once the audit is done, so keeping it longer would only mean holding your campaign names, ASINs and spend for no reason.

Deleting an audit removes both the audit record and the underlying bulk file from storage. It is immediate and it is not recoverable, so delete deliberately.

Sign-in security records — the hashed IP and email described above — are kept only to enforce rate limits and investigate abuse. A report parked at email capture is deleted as soon as you claim it by clicking your sign-in link.

You can close your account yourself from the bottom of your audits page. Type DELETE to confirm, and your account, your audits, your uploaded files and any generated bulk sheets are removed immediately and irrecoverably. The only thing that remains is the hashed sign-in security record described above, so a deleted account cannot be used to reset the sign-in rate limit.

You can access, correct, export or delete your data. Most of it you can do yourself: your audit history is on your audits page, and each audit can be deleted from there.

For anything else — a full export, account deletion, or a question about what we hold — email thebadger@adbadger.com. We will respond within 30 days.

If you are in the EU or UK, our basis for processing is performance of our contract with you (running the audit you asked for) and our legitimate interest in keeping the service secure and improving it. You may withdraw consent, object to processing, request portability, and complain to your supervisory authority.

If you are in California or another US state with a privacy statute, you have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of it. We do not sell or share personal information, so there is nothing there to opt out of. We will not discriminate against you for exercising any of these rights.

To opt out of product analytics, block it with an ad blocker or your browser’s tracking protection — the audit tools work either way — or email us and we will exclude you. To be straight with you about a thing many policies fudge: we do not currently detect Do Not Track or Global Privacy Control browser signals, so please use one of those two routes rather than assuming a header stopped us.

We use a cookie to keep you signed in. That one is strictly necessary — without it the app cannot tell it is still you between pages.

Product analytics uses your browser’s local storage rather than cookies, and does not follow you to other websites. We do not run advertising trackers or third-party advertising pixels on Badger Sheets.

Everything is served over TLS. Your data is isolated at the database level so one account cannot read another’s, uploaded files are reachable only through short-lived signed links, and there are no passwords to steal because we never set any. Sign-in attempts are rate-limited and bot-checked.

No system is perfectly secure, and we will not pretend otherwise. If you believe you have found a vulnerability, please write to thebadger@adbadger.com — we would rather hear it from you than from an attacker.

Badger Sheets is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children. If we learn that we have, we delete it.

When this policy changes we update the date at the top of the page. If a change meaningfully affects how we handle data you have already given us, we will tell you by email rather than relying on you to re-read this page.

Ad Badger
Austin, Texas, USA
thebadger@adbadger.com