Privacy Policy

AdBrain (“AdBrain”, “we”, “us”) helps businesses create ad creatives and run lead-generation campaigns on Meta (Facebook and Instagram). This policy explains what data we collect, why, and the choices you have. By using AdBrain you agree to this policy.

Information we collect

• Account data. Your email address and authentication details, handled by our authentication provider when you sign in.
• Brand data. The business details you add to your Brand Brain — name, description, industry, brand voice, colours, offers, service areas, and any custom instructions or assets you upload.
• Remembered preferences. If you opt in under Settings, we store the short creative or workflow preferences you explicitly save for that business and account, with their category and update date. We do not automatically learn preferences from clicks or old campaigns.
• Campaign & lead data. When you connect a Meta ad account and run campaigns, we store campaign settings, performance metrics, and the leads your ads generate (which may include a person’s name, email, phone number, and their answers to your lead form).
• Usage and diagnostic data. Account and business identifiers, pages visited, selected workflow actions, foreground page time, coarse screen-size categories, operation outcomes, response times, error categories, and AI usage and estimated costs help us operate and improve the product. Product-event logs exclude prompts, creative copy, lead contact details, passwords, access tokens, request bodies, and raw error messages. Optional browser telemetry uses no tracking cookies and respects Do Not Track and Global Privacy Control; essential server diagnostics remain separate.

How we use your data

• To generate ad creatives and campaign plans on your behalf.
• To consider your saved preferences when relevant to a new brief; the current request can override them.
• To create and manage your Meta campaigns and report on results.
• To collect and display the leads your campaigns generate.
• To operate, secure, and improve the service.

Third-party services

To provide AdBrain we share data with service providers, only as needed:

• Meta Platforms — to create campaigns and retrieve performance and lead data, subject to Meta’s own terms and policies.
• Supabase — database, authentication, and file storage.
• AI providers — brand details and briefs are sent to large-language-model and image-generation providers to produce creatives. If you enable remembered preferences, selected relevant notes may also be sent as advisory context for that request. We do not sell your data, and we do not use it to train third-party models beyond generating your requested output.

Data retention

We keep account and workspace data while it is needed to provide the service. Request an export or deletion from Settings; these requests are reviewed manually after ownership verification. Payment, invoice, refund and security records may need to be retained for legal or fraud prevention reasons. Removing AdBrain-held copies does not remove data held by Meta or other providers.

Preferences are off until you enable them. You can pause their use, edit or forget individual notes, clear all notes, or export the saved notes from Settings. Forgotten notes are removed from future preference retrieval; we do not backfill preferences from past activity when you enable them again. Business or account deletion also removes these records through database cascades.

Security

Product-event database records are targeted for deletion after 90 days through periodic cleanup; outages or cleanup backlogs may delay removal. Daily usage and performance totals without account or business identifiers may be retained for up to two years to understand product trends. Hosting-provider diagnostic logs follow separately configured retention. These account-linked diagnostics are available only to authorized operators, not to other customers.

Customer access to business data is isolated with row-level security. We also use transport encryption (HTTPS) and access controls on our infrastructure. No system is perfectly secure, but we take reasonable measures to protect your information.

Your rights

You can review and correct some business details in the app. To request a full-account export or deletion of AdBrain-held data, sign in and use the Privacy and data requests section in Settings. We verify account ownership before sharing or removing data; submitting a request does not automatically export or delete anything. If you handle other people’s personal data (your leads), you are the controller of that data and are responsible for having a lawful basis to collect and contact them.

For formal deletion requests, see our Data Deletion Instructions page.

Children

AdBrain is a business tool and is not directed to children under 16.

Changes

We may update this policy. Material changes will be reflected by the “last updated” date above.

Contact

To submit or follow an export or deletion request, use the signed-in Settings privacy section.