Privacy Policy

1. Data we collect

• Account data - your name, email address and authentication credentials. Passwords are stored hashed by our authentication provider; we never see them in plain text.
• Content you provide - the website URLs you submit, your business details and the campaigns you generate, review and publish.
• Website content we analyse - when you submit a URL, we crawl the publicly accessible pages of that website to prepare a campaign. We do not access password-protected or private content.
• Usage data - logs, AI usage metering (for fair-use and billing), device and browser information, and IP address.
• Payment data - handled by our payment processor. We do not store your full card details. We retain invoice and subscription records.
• Communications - the content of support requests and emails you send us.
• Cookies and local storage - used to keep you signed in and to remember preferences (such as language and theme).

2. How we use your data

• To provide and operate the service, including crawling, analysis, campaign generation and publishing to your connected Google Ads account.
• To process payments, manage subscriptions and send invoices.
• To provide support and respond to your requests.
• To secure the service and prevent abuse (for example bot and brute-force protection).
• To maintain, improve and troubleshoot the service.
• To comply with legal obligations.

3. AI processing

To analyse your website and generate campaigns, the relevant content (such as crawled page text and the business details you provide) is sent to third-party AI providers. This content is processed to deliver the result you requested and is not used by those providers to train their models. Depending on your plan, generation runs on our pooled AI keys or on the API keys you supply yourself.

4. Third parties and sub-processors

We share data only with service providers needed to run AdBuilder, and only to the extent necessary:

• Supabase - authentication and database hosting.
• Anthropic, OpenAI and Google (Gemini) - AI analysis and generation.
• Google Ads API - to publish campaigns to the Google Ads account you connect.
• Stripe - payment processing.
• Moneybird - invoicing.
• ElasticEmail - sending transactional emails.
• Cloudflare (Turnstile) - bot and abuse protection.

We do not sell your personal data.

Google API Services User Data Policy. AdBuilder's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We access your Google Ads account, with your explicit authorisation, solely to create, manage and publish advertising campaigns on your behalf. We do not use Google user data for serving advertisements of our own, we do not sell it, and we do not transfer it to others except as necessary to provide or improve this functionality, for security purposes, or to comply with applicable law. We do not use Google user data to train AI or machine learning models.

Conversion measurement (Enhanced Conversions). To measure the effectiveness of our advertising, we may send Google Ads conversion events for sign-ups and purchases. As part of Google Enhanced Conversions, your email address is hashed (SHA-256) in your browser before it is sent, so we never share your email in plain text. Google uses this hashed data only to match conversions to ad interactions. You can object to this processing at any time via [email protected].

5. Legal basis

Where the GDPR applies, we process your data on the basis of: performance of our contract with you (to deliver the service), our legitimate interests (to secure and improve the service), your consent (where requested), and compliance with legal obligations.

6. Data retention

We keep your data for as long as your account is active and as needed to provide the service. After you close your account we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (such as invoices) to meet legal obligations.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, export, restrict or object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with your data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).

8. International transfers

Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Security

We use technical and organisational measures to protect your data, including encryption in transit, hashed credentials and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to address any incident promptly.

10. Children

AdBuilder is not intended for use by anyone under the age of 16, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated where appropriate.

12. Contact

AdBuilder.online
Hoofdveste 10
3992 DG Houten
The Netherlands
[email protected]