Your ad accounts, your money
Campaigns are published into your own Meta, Google, TikTok, Amazon and X ad accounts. Ad spend is billed by each platform directly to you — Four.ad never holds, routes or marks up your ad budget.
Security & trust
Your ad accounts stay yours.
Handing an AI the keys to your ad spend is a big step. Here is exactly how Four.ad connects, what it can and can't do, and who is behind it.
Official, reviewed API access
Four.ad connects only through each platform's official API and sign-in (OAuth). Google, Meta, TikTok, Amazon and X have each reviewed and approved Four.ad's API access, and Four.ad is a Google Partner. We never ask for your ad-platform passwords.
You stay in control of spend
With Automatic optimization on, the AI can pause ads, lower budgets and shift money between campaigns — but your total daily budget stays the same. Spending more always needs your approval, unless you set your own daily ceiling.
Disconnect any time
Remove a connection from Integrations in one click, or revoke Four.ad's access from the ad platform's own settings. Your campaigns stay in your ad account — they are yours.
Encrypted credentials
Ad-platform and store access tokens are encrypted at rest. Account passwords are stored only as salted hashes. Every connection to Four.ad runs over HTTPS with HSTS.
Privacy-first conversion tracking
Customer emails and phone numbers from your orders are hashed (SHA-256) before they are stored or matched with ad platforms — the raw values are never sent on.
EU company, EU servers
Four.ad is operated by DELAB, s.r.o., a company registered in Slovakia, and runs on servers in Germany. We follow GDPR and sign a Data Processing Agreement on request.
Payments through Stripe
Subscriptions are paid through Stripe. Your card details go straight to Stripe and never touch Four.ad's servers.
Abuse protection
Sign-up and contact forms are protected by Cloudflare Turnstile, and the API is rate-limited, so bots can't hammer your account or the service.
Report a security issue
Found a vulnerability? Email hello@four.ad with the subject "Security report" — it goes straight to the people who build Four.ad, usually answered within one business day. See also security.txt.
Data protection & sub-processors
The full list of services that process data on our behalf, your GDPR rights and how to request a DPA are on the GDPR page. What we collect and why is in the Privacy policy.