ADs is built so that your customers' details stay on your site. Here is exactly what leaves it, and when.
Email addresses:
- Every email address sent to a network is scrambled first (SHA-256 of the lower-case address). No plain address leaves your site.
- What has been sent to a list is remembered only as those scrambled values, so lists stay in step without keeping a copy of anyone's address.
- Anyone who unsubscribed, bounced or complained in your Mailer is never sent, and is removed from lists already sent.
- Audience Vault lists send only people identified by email; masked marketplace addresses are never sent.
Google Customer Match:
- Nothing is sent until you confirm that your privacy policy covers it and that you accept Google's Customer Match policy.
- EU, UK and Swiss subscribers are left out unless you also confirm they agreed to advertising use.
- The daily files for the Google Ads script follow the same rule, hold scrambled addresses only, and need the username and password shown.
The Google Ads script:
It talks only to your own site, with a private key. Nothing passes through anyone else's server. Make a new key replaces the key if you ever need to.
Tags and consent:
Ad network tags and ad click tracking wait for marketing consent with ResultsAiX Consent or any WordPress Consent API manager. Without a consent manager, the Audiences tab and Tracking health say so.
The analyst and your AI provider:
- The analyst sees email addresses as their domain only ("an address at gmail.com") unless you switch on Let the analyst see full email addresses.
- Your voice samples and ad text are sent only to the AI provider you chose, as part of the prompt.
- AI keys stay in your WordPress database and are hidden from the plugin logs.
Your data:
Everything ADs knows stays in your own WordPress database: campaigns, clicks, leads, sales, chats and logs.
A real example:
yoursite.com sends its buyers to Google and Meta. Google's daily file holds 431 scrambled values and nothing else. A subscriber who unsubscribed last week is no longer in it, and was removed from the Meta list on the next daily refresh.
Tips:
- Mention in your privacy policy that scrambled email addresses may be shared with ad networks for advertising.
- Add a consent banner if you have visitors in the EU, UK or Norway.