Effective date: January 1, 2025. Your privacy is important to us. This Privacy Policy explains how adcreafy.ai (an AI marketing SaaS operated in the U.S.) collects, uses, and discloses personal information when you use our services. We collect information such as your name, email, payment details (e.g. credit card data), location data, and advertising account information. We are committed to protecting this data and complying with applicable privacy laws, including the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Information We Collect

We collect the following personal information when you register for an account or use our platform:

Account and Contact Information: Your name, email address, password, phone number, billing address, and other identifiers you provide.
Payment Information: Details needed to process payments (for example, credit card or bank account information), processed through secure third-party payment processors.
Location Data: Your general location (for example, country or city) when you use the service, collected from your IP address or device settings.
Advertising Account Information: Data from your linked advertising accounts (such as Google Ads, Facebook Ads, etc.), which may include account IDs, campaign metrics, ad group and advertisement details. This is used to provide our marketing services.
Usage Data: Details of how you use our services (such as pages visited, features used, time spent, errors encountered), collected automatically to improve our site and services.
Cookies and Tracking Data: We use cookies and similar technologies to maintain your login session, track usage, and personalize your experience. See “Cookies and Tracking” below for details.
User-Generated Content: Any content you submit through the platform (such as ad copy, feedback, uploaded files, or comments).

All of the above is considered “personal data” or “personal information” because it relates to an identified or identifiable person. Under GDPR and CCPA, we must handle this data transparently and lawfully.

How We Collect Information

Directly from You: When you sign up, fill in forms, make payments, or communicate with us, you provide information (name, email, payment details, advertising data, etc.).
Automatically: We automatically collect data about your usage of the site and services (for example, through cookies or analytics tools).
From Third Parties: We may receive information from our service providers (such as payment processors, analytics tools, or advertising platforms) or publicly available sources. For example, if you link a social media advertising account, we collect the data you authorize from that account.

How We Use Your Information

We use your personal information for these purposes:

To Provide and Manage Services: Create and manage your account, process payments, deliver marketing analytics, and operate ad campaigns on your behalf.
Communication: Send you service-related updates, technical notices, customer support, and marketing communications (you may opt out of marketing emails at any time).
Improvements and Personalization: Improve and optimize our service (e.g. by analyzing usage data) and personalize content. For example, as recommended by GDPR guidance, we clearly describe uses of data (we may use click history to target relevant advertising to you).
Safety and Security: Detect and prevent fraud, abuse, unauthorized access, and security incidents.
Legal Compliance: Comply with legal obligations (such as tax or accounting rules), enforce our policies, and cooperate with law enforcement if required.
Business Operations: Provide internal reporting and auditing, data analysis, and general business administration.

We do not use your data for unrelated purposes without your consent. We may combine your data with information from other sources (e.g. analytics) to improve service quality, always respecting privacy laws.

Sharing and Disclosure

We may share your personal information with the following parties:

Service Providers: Trusted third-party vendors who perform services on our behalf, such as payment processors, email delivery services, customer support, cloud hosting (e.g. AWS/Azure), and analytics providers (e.g. Google Analytics). These providers may access your personal data only to perform services for us and must keep it confidential.
Advertising Platforms: If you link external advertising accounts, we share the necessary data with those advertising platforms to manage your campaigns.
Legal and Safety: If required by law or legal process, to protect the rights and safety of others, or if we reasonably believe disclosure is necessary to investigate fraud or illegal activities.
Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the new owner (with notice to you).
Aggregate or De-identified Data: We may share aggregated or anonymized data that does not identify you (for example, industry trends or statistics).

We do not sell personal information to third parties for marketing purposes. Any data shared is only for the purposes listed above (providing and improving the service). Per CCPA requirements, any sharing of data is limited to categories and purposes explained in this policy.

Cookies and Tracking

We and our partners use cookies and similar tracking technologies on our website to maintain your login session, analyze usage, and tailor content. This may include third-party cookies from Google Analytics and other analytics or advertising providers. You can typically manage cookies in your browser settings. Our use of these tools is consistent with GDPR/CCPA guidance to be transparent about analytics and tracking.

Data Retention and Security

We retain your personal information only as long as necessary to provide the service or as legally required. For example, we keep account and billing data while your account is active and for tax purposes thereafter. If you ask us to delete your account and data, we will do so (subject to any legal obligations) and remove your personal data from active use. As required under GDPR and CCPA, we specify retention criteria when feasible.

We implement reasonable technical and organizational measures to protect your data (encryption, access controls, etc.), but no system is completely secure. We cannot guarantee absolute security.

Children’s Privacy

Our services are not directed to children under age 13, and we do not knowingly collect personal information from minors under 13 without parental consent. If we learn of data collected from a minor without consent, we will delete it. By using the service, you represent that you are at least the age of majority in your jurisdiction or have consent from a parent or guardian.

European (GDPR) Privacy Rights

If you are in the European Economic Area (EEA), you have certain rights over your personal data under the GDPR. These include:

The right to access the data we hold about you, to correct or update it, and to erase it (right to be forgotten).
The right to restrict or object to how we process your data (including profiling), and to port your data to another service.
The right to withdraw consent at any time if you previously consented to any data processing.
The right to file a complaint with a data protection authority about our handling of your data.

We process your data based on lawful grounds such as your consent, performance of our service contract (e.g. account maintenance), and our legitimate interests (improving our service). We clearly describe purposes and lawful bases in this policy. If you wish to exercise any of these rights, please contact us as described below. Under GDPR, we provide this Privacy Policy in a clear and accessible form.

California (CCPA) Privacy Rights

If you are a California resident, the CCPA/CPRA grants you rights over your personal information. This includes the right to:

Know the categories of personal data we have collected about you and how we have used or shared it.
Request deletion of your personal data held by us (subject to certain exceptions).
Opt out of the sale of your personal data. (We do not sell personal data for profit.)
Non-discrimination: We will not discriminate against you for exercising any of these rights.

As required, we disclose categories of personal information collected, sources, purposes of use, and categories of third parties with whom data is shared. For example, we collect identifiers (name, email), financial info (payment records), internet data (IP address, cookies), geolocation, and commercial information (advertising data). We share data only as described above (analytics and payment providers, etc.). California consumers may contact us to request details or deletion of their data. We will verify requests following CCPA guidelines. A summary of California rights (under CCPA/CPRA) is: Right to Know, Right to Delete, Right to Opt-Out, Right to Correct, Right to Limit use of sensitive data, and Right to Non-Discrimination. To exercise these rights, please see “Contact Us” below.

Your Choices and Controls

Accessing/Updating: You can review and update your account information at any time by logging in. You may also contact us to request access to your personal data.
Deleting Data: You can delete your account to remove your data. We will comply with deletion requests as required by law (subject to business records we must keep).
Marketing Communications: You can opt out of our marketing emails by following the unsubscribe link or contacting us.
Cookies: You can disable cookies in your browser, but some features of the site may not function.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time (e.g. to address changes in law or our practices). We will post the updated policy on our website and update the “Effective Date” above. In accordance with CCPA guidance, we update our policy at least once a year and note the date of last revision.

Contact Us

For privacy concerns or to exercise your data rights (GDPR/CCPA requests), please contact us at privacy@adcreafy.ai. We will respond within the timeframes required by applicable law. Additionally, if you are a GDPR data subject, you may lodge a complaint with your local data protection authority.