Privacy Policy

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and other information you provide during registration.

Google Ads Account Data

With your explicit permission granted via OAuth 2.0, we access your Google Ads account data including campaign performance metrics, keywords, bids, budgets, and ad groups. We only access data necessary to provide our services.

Usage Data

We collect information about how you interact with our platform, including pages visited, features used, and actions taken within the dashboard.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number or payment details on our servers. Stripe's privacy policy governs the handling of your payment information.

Communication Data

We retain records of communications with us, including emails, support tickets, and contact form submissions.

3. How We Use Your Information

We use the information we collect to:

• Provide and improve AdFlask services, including AI-powered campaign optimization
• Manage your Google Ads campaigns via the Google Ads API
• Send performance reports and campaign alerts
• Process subscription payments
• Communicate product updates and service announcements

4. Google Ads Data

We take the handling of your Google Ads data seriously. The following principles govern our use of this data:

• We access your Google Ads account data solely to provide AdFlask services as described in our Terms of Service.
• We do not sell, rent, or share your Google Ads data with any third parties for their own purposes.
• We do not use your campaign data to train AI models for other customers. Your data is used exclusively to optimize your campaigns.
• All access to your Google Ads account is granted via OAuth 2.0. You can revoke AdFlask's access at any time from your Google Account settings.
• We comply with Google's API Services User Data Policy, including the Limited Use requirements.

5. Data Sharing

We do not sell your personal data. We share data only with the following categories of service providers, all of whom are bound by data processing agreements:

• Google — via the Google Ads API, to manage your campaigns on your behalf
• Stripe — to process subscription payments securely
• Infrastructure providers (Google Cloud Platform, Vercel, Supabase) — to host and operate the platform under data processing agreements

We may also disclose information where required by law, regulation, or legal process.

6. Data Retention

• Account data: Retained while your account is active, plus 90 days after account deletion to allow for reactivation or address disputes.
• Campaign performance data: Retained for up to 24 months from the date of collection.
• You may request deletion of your data at any time by contacting us at contact@adflask.com.

7. Data Security

We implement industry-standard security measures to protect your data:

• OAuth tokens are encrypted using AES-256 encryption at rest
• All data in transit is protected via TLS 1.3
• Role-based access controls and audit logging on all data operations
• Regular security reviews and vulnerability assessments

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data
• Withdraw Google Ads OAuth access at any time through your Google Account settings
• Exercise GDPR rights if you are a resident of the European Union, including the right to data portability and the right to restrict processing

To exercise any of these rights, please contact us at contact@adflask.com.

9. Cookies

AdFlask uses essential cookies only, which are necessary for the proper functioning of the Service (e.g., session management and authentication). We do not use advertising cookies, third-party tracking cookies, or any non-essential cookies.

10. Children's Privacy

AdFlask is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or through a notice on our platform at least 30 days before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: