Privacy Policy

This Policy explains how AdeptAds, Inc. ("AdeptAds", "we", "us") handles personal information through our website, application, and related services. It covers website visitors, account holders, customer representatives, and people who contact us. It is a notice about our practices, not a waiver of your privacy rights.

1. Who we are and our role

AdeptAds provides software that uses AI agents to research, create, publish, and optimize advertising campaigns. Our contact address is 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Reach us at contact@adeptads.ai.

We determine the purposes and means of processing information used to administer our business, manage customer accounts, provide support, secure the Services, and operate our website. For that processing, we act as a controller or equivalent business under applicable law.

Where a customer supplies personal information for us to process solely on its behalf, that customer determines the purposes of that processing and we act as its processor or service provider, subject to the applicable agreement. If your information was supplied by an agency or another customer, contact that organization about its use of your data; we can assist it with requests as appropriate. A data processing agreement, where applicable, governs that customer-directed processing.

2. Information we collect and its sources

• Account and identity information: name, email address, sign-in identifiers, profile details, and account settings, provided by you or the sign-in service you choose.
• Billing information: selected plans, transaction and invoice records, payment status, and payment-method metadata provided by you or our payment processor. Stripe processes payment credentials; we receive information needed to administer billing rather than full payment-card details.
• Connected advertising information: authorization credentials, account and campaign identifiers, campaign structures, budgets, bidding and targeting settings, assets, and performance data retrieved through accounts you connect.
• Campaign inputs and results: briefs, website URLs and content, business descriptions, audience instructions, uploaded materials, generated copy and images, research results, and task or activity records. Inputs come from you, connected platforms, and public websites or research services used for the requested work.
• Communications: contact-form submissions, support messages, newsletter details, and related correspondence.
• Device and usage information: IP address, device and browser characteristics, page URLs, referring origins, interaction events, timestamps, diagnostic logs, and website or application usage collected through our systems and analytics technologies.

Some information is required to create an account, authorize an integration, collect payment, or carry out a requested workflow. If it is not provided, the associated feature may not work. Do not include sensitive personal information, passwords, or payment-card details in campaign briefs or general support messages.

3. Purposes and legal bases

We use information to authenticate users, connect advertising accounts, carry out campaign creation and publishing, run enabled optimizations, show results and activity, administer subscriptions, provide support, maintain reliability, prevent fraud and abuse, understand product usage, and meet legal obligations.

We also use contact details for necessary account and service notices and, where permitted, product news or marketing. You can unsubscribe from marketing messages using the link provided or by contacting us. Necessary billing, security, and service messages may continue.

Where EEA or UK data-protection law applies, the relevant basis depends on the purpose:

• Contract: processing necessary to provide the service you request when you are party to the contract.
• Legitimate interests: operating a business service, supporting customer representatives, preventing abuse, and improving reliability, subject to your rights and a balancing of the interests involved.
• Consent: processing that requires your permission, including applicable non-essential tracking or marketing. Consent can be withdrawn without affecting the lawfulness of earlier processing.
• Legal obligations: applicable tax, accounting, regulatory, and legal-response requirements.

Customer-directed processing is governed by that customer's instructions and applicable data processing terms. Automated campaign decisions may affect ad delivery and spend. AdeptAds is not intended to make decisions about an individual's eligibility for employment, credit, housing, or similar significant personal matters.

4. Providers and other disclosures

Information is disclosed where needed for the purposes described in this Policy:

• Infrastructure and communications providers host the Services, store data and assets, deliver email, and support diagnostics. Our implementation uses AWS infrastructure and Mailgun email services.
• Payment providers, including Stripe, process transactions and provide billing, fraud-prevention, and payment records.
• AI and research providers process relevant prompts, campaign context, website content, and assets to generate or analyze material. Our integrations include OpenAI, Google AI, and Anthropic, depending on the feature, and web research services.
• Advertising platforms, including Google Ads, receive campaigns, assets, and changes through accounts you authorize us to manage. Their own terms and privacy notices also apply.
• Analytics providers, including Microsoft Clarity and tools configured through Google Tag Manager, receive usage information as explained below.
• Professional advisers, authorities, and other recipients may receive information where necessary to comply with law, respond to valid legal process, investigate abuse, establish or defend claims, or protect rights and security.
• Business transactions: information may be disclosed in a financing, reorganization, merger, or sale, subject to appropriate protections and applicable consent or other legal requirements. Restrictions attached to connected-platform data continue to apply.

Providers receive the information relevant to their functions. Some providers also process information for their own purposes under their own policies, such as payment compliance and analytics services. Contact us for information about providers relevant to your use of the Services and available data processing terms.

5. Connected Google data and AI processing

Google sign-in supplies identity information for authentication. Connecting Google Ads separately authorizes access to advertising-account information and credentials used to read, create, and manage campaigns. Relevant data is processed by our systems and service providers, including AI services when needed to perform the campaign features you request or enable.

Our use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including applicable Limited Use requirements. We restrict use of connected Google data to the authorized service features and other uses permitted by that policy. We do not sell connected Google data or use it to train general-purpose AI models or for unrelated advertising.

We do not use your campaign inputs or connected account data to train our own general-purpose models or disclose them to other customers. Relevant AI inputs and outputs may still be processed and retained by service providers to deliver the requested functionality and satisfy applicable operational or legal requirements.

You can disconnect an integration in AdeptAds or revoke permission through Google Account connections. Disconnecting removes the associated integration credentials from the application's active integration records; revoking access in Google prevents further authorized API access. These actions do not erase all historical records, delete campaigns in Google Ads, or stop their advertising spend. You can request deletion of retained personal information separately.

6. Cookies, local storage, and analytics

We use cookies and similar browser storage for sign-in, session continuity, preferences, security, and attribution. Our website loads Google Tag Manager to manage measurement tags and Microsoft Clarity for usage analytics. The application also includes Clarity.

Clarity can collect interaction and device information to produce session replays, heatmaps, and usage measurements. Cookies and similar technologies help identify browser activity. Microsoft may also process collected information under its own policy, including for service improvement and advertising purposes. See the Microsoft Privacy Statement. Tags managed through Google Tag Manager depend on the container configuration; Google describes its processing in the Google Privacy Policy.

Browser controls and extensions can limit cookies, storage, or tracking, although some features may stop working. Clearing cookies may reset preferences. You can contact us about analytics and privacy choices. A browser's legacy Do Not Track signal is not a universal opt-out implemented by the Services; legally recognized opt-out signals are a separate matter.

We do not sell personal information for money. Some advertising-related disclosures may be considered a "sale" or "sharing" under particular state laws even without payment. Where those laws apply, you may request an opt-out of covered processing; see Your privacy rights. This Policy does not itself obtain consent for tracking or substitute for a required consent or opt-out mechanism.

7. Retention, disconnection, and deletion

We retain information according to its purpose, the customer relationship, operational needs, contractual requirements, and applicable law. Relevant criteria include whether information is needed to provide an active feature, investigate security or billing issues, maintain required records, resolve disputes, or comply with a valid preservation obligation.

• Account and campaign records may remain while you use the Services and for a period afterward where needed for support, recovery, compliance, or dispute resolution.
• Billing and transaction records may be retained after cancellation to meet accounting, tax, and legal requirements.
• Integration credentials are removed from active integration records when you disconnect that integration. Historical task, campaign, or audit records are separate.
• Logs, support records, and backups follow their operational retention processes and may not be deleted at the same time as active account data.

Account deletion initially deactivates the account and stops the associated subscription; it is not an immediate purge of every record or backup. To request erasure of retained personal information, contact us. We assess the request under applicable law, explain relevant exceptions, and respond within the required period. Records held independently by Google, payment providers, or other controllers are subject to their own policies.

8. Security

We use technical and organizational measures intended to protect personal information, including access controls, secure communications, and operational monitoring. Measures depend on the systems and information involved. No service, network, or storage system can be guaranteed completely secure. Please report suspected account compromise promptly and do not send credentials in a support message.

9. Your privacy rights

Depending on your location and applicable law, you may have rights to access or obtain a copy of personal information, correct it, request deletion, restrict or object to processing, withdraw consent, or receive a portable copy. You may also be able to opt out of certain sales, sharing, targeted advertising, or profiling, and appeal a decision about a request.

Email contact@adeptads.ai with the right you wish to exercise and enough information to locate the relevant account. We may ask for proportionate verification or evidence of an authorized agent's authority. Do not send passwords or identity documents unless we specifically arrange a suitable verification method.

We will respond within applicable deadlines, explain any lawful exception or extension, and will not discriminate against you for exercising protected rights. If we deny a request, you may ask us to reconsider or appeal where applicable by replying to the response. You may also complain to the relevant regulator.

For EEA and UK residents, this includes the right to complain to a competent data protection authority. The European Data Protection Board lists EEA authorities; UK residents can contact the Information Commissioner's Office.

For California residents, rights may include knowing the categories and specific pieces of information collected, their sources and purposes, the categories of recipients, correction, deletion, and opting out of sale or sharing, including through a recognized preference signal where applicable. The collection and recipient categories above describe our processing. Applicability depends on the law's coverage and your circumstances; this notice does not claim certification under any privacy regime.

10. International processing

AdeptAds is based in the United States and uses providers that may process information in other countries. Those countries may have different privacy laws from your location. Cross-border processing remains subject to applicable transfer requirements. Where a specific safeguard is required, such as an approved contractual mechanism or an applicable adequacy decision, that requirement must be satisfied; your use of the Services alone does not waive it.

Contact us for details of processing locations and transfer arrangements relevant to your service. Any applicable data processing agreement provides additional terms for customer-directed processing.

11. Children

The Services are intended for adults acting in a business or professional capacity, not children under 18. We do not knowingly collect personal information from children for an account. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

12. Policy updates

We may revise this Policy as the Services or our practices change. We will update the date and provide additional notice of material changes where required. Where a new use requires consent or renewed platform authorization, posting a revised policy alone does not provide that authorization.

13. Contact

Privacy questions, requests, and complaints: contact@adeptads.ai.