Privacy Policy

Last updated: October 31, 2026

1. Who is responsible

[Operator legal name] operates yourads and is responsible for personal information handled through the Service. Contact us at [Operator contact email] or [Operator business address] with privacy questions or requests.

2. Information we handle

• Account information: name, email address, and Clerk account identifier. Clerk verifies sign-in and may provide your profile image. Google sign-in is handled through Clerk and Google.
• Campaign and creative information: campaign names and settings, performance metrics, product details, prompts, generated copy and media, and files you upload.
• Connected-service information: advertising and messaging platform credentials or identifiers you choose to save, and provider responses needed to perform requested actions. Stored platform credentials are encrypted in the application database.
• Leads and messages: contact details, referral information, message content, opt-out status, and sales details that you or your connected messaging provider submit.
• Technical information: information needed to operate authentication, requests, security, and error handling. The exact server logs and retention depend on the operator’s hosting configuration.

3. How information is used

We use information to operate your account; show your campaigns, metrics, creatives, leads, and settings; store connected-service credentials; carry out actions you request; generate content and recommendations; protect the Service; and respond to support or legal requests.

4. AI and connected providers

When AI features are enabled, prompts and relevant campaign or product context may be sent to Anthropic to generate copy or answers. If you request image or video generation, the relevant prompt and generation request may be sent to Higgsfield. Your product image is handled according to the feature you select.

When you connect Meta, TikTok, Google Ads, or WhatsApp, information and instructions may be sent to that provider to perform imports, campaign actions, or message handling you request. Providers process information under their own terms and privacy notices. Clerk processes authentication information; Google may process information when you choose Google sign-in. We do not control those providers’ independent privacy practices.

5. How information is stored and protected

Application records are stored in the configured PostgreSQL database. Connected platform credentials are encrypted before storage. Authentication is provided by Clerk. We use access controls intended to limit account data to the relevant signed-in user and take reasonable measures to protect information. No method of storage or transmission is completely secure.

6. Retention and deletion

Information is kept while needed to provide the Service, maintain account records, meet legal obligations, resolve disputes, and protect the Service. Exact retention periods for the database, server logs, media files, provider systems, and backups depend on the operator’s deployment and backup schedule. The Service does not currently provide an in-app account deletion control. To request access, correction, or deletion, contact [Operator contact email]. We may need to retain some information where law permits or requires it.

7. Cookies and local storage

Clerk uses cookies and similar browser storage to maintain and secure your sign-in session and complete authentication flows. The application does not currently use advertising cookies or a third-party analytics SDK. Your browser and connected providers may have their own storage and privacy settings.

8. Sharing

We share information with service providers only as needed to host and operate the Service, authenticate users, provide AI features, or carry out connections you choose. We may also disclose information when required by law or reasonably necessary to protect users, the Service, or others. We do not make your account data available to other users.

9. Your choices and rights

You can manage or remove saved platform connections in the Service. Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. Contact [Operator contact email] to make a request. You may also contact the relevant provider about information it processes independently.

10. Children and international processing

The Service is intended for business use and is not directed to children. The operator’s hosting location and connected providers may process information in countries other than your own, subject to the safeguards those services provide and any applicable law.

11. Updates

We may update this Policy as the Service changes. We will post the current version here and revise the “Last updated” date. Where required, we will provide additional notice or request consent.