Privacy Policy

1. Introduction

AdPilotAgent ("we", "us", "our") operates the adpilotagent.com website and the AdPilotAgent application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name
• Password (stored securely using one-way hashing)

2.2 Third-Party Platform Data

When you connect your advertising accounts, we access and store:

• Google Ads: Account ID, campaign data, ad performance metrics, keywords, and OAuth tokens (encrypted at rest using AES-256-GCM)
• Meta Ads: Ad account ID, page information, campaign data, ad performance metrics, and OAuth tokens (encrypted at rest using AES-256-GCM)
• Google Tag Manager: Container information and OAuth tokens (encrypted at rest)

2.3 Website Analysis Data

When you provide a URL for ad creation, we analyze the publicly available content of that website to generate advertising strategies, including:

• Page content and structure
• Product/service information
• Brand assets (colors, tonality)

2.4 Generated Content

We store AI-generated content created through the Service:

• Ad copy (headlines, descriptions, CTAs)
• AI-generated images and videos
• Marketing plans and strategies

2.5 Usage Data

We automatically collect certain information when you access the Service, including IP address, browser type, operating system, and pages visited.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain the Service
• To create, manage, and optimize advertising campaigns on your behalf
• To generate AI-powered ad content, strategies, and recommendations
• To sync and display campaign performance metrics
• To send you service-related notifications (e.g., weekly performance digests)
• To improve and develop new features
• To detect and prevent fraud or abuse

4. Data Sharing and Third Parties

We share your data with the following third parties, solely to provide the Service:

• Google (Ads API, Tag Manager API): To create and manage your Google advertising campaigns
• Meta (Marketing API): To create and manage your Meta/Facebook/Instagram advertising campaigns
• Google (Gemini AI): To generate ad copy, images, strategies, and optimization recommendations. Your website content and campaign data is sent to Google's AI services for processing.

We do not sell your personal information to third parties. We do not share your data with third parties for their own marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All OAuth tokens and API credentials are encrypted at rest using AES-256-GCM
• Passwords are hashed using industry-standard one-way algorithms
• All data transmission uses HTTPS/TLS encryption
• Access to production systems is restricted and logged
• Authentication uses JWT tokens with short expiration times

6. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your personal information and account data will be deleted within 30 days
• Campaign data and generated content will be permanently removed
• OAuth tokens and platform connections will be immediately revoked and deleted
• Generated media files will be deleted from our storage

We may retain anonymized, aggregated data for analytical purposes.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request we limit how we use your data
• Right to Data Portability: You can request your data in a machine-readable format
• Right to Object: You can object to the processing of your data
• Right to Withdraw Consent: You can withdraw consent at any time

To exercise any of these rights, contact us at the email address below.

8. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract: Processing necessary to provide the Service you subscribed to
• Consent: When you connect third-party advertising accounts
• Legitimate Interest: To improve our Service and prevent fraud

9. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies or third-party analytics cookies.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA, including the United States (for Google and Meta API services). These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) as required by GDPR.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

AdPilotAgent
Dominik Weber
Jöllenbecker Str. 143
33613 Bielefeld, Germany
Email: [email protected]
Phone: +49 521 44812504
VAT ID: DE341218956