Privacy Policy
Last updated
- We collect what you give us to run your account, plus sign-in and usage records.
- Your content goes to our AI providers to write drafts. We don’t train models on it or sell your data.
- App, database and files are hosted in the EU; some providers, such as our AI, payment and email services, are in the US under recognized safeguards.
- Download or delete your data yourself under Account & GDPR.
Contents
1.Who we are
Adverizeo, USA is the controller for the personal data described here: data about people who visit our website or hold an Adverizeo account.
When your business puts other people’s personal data into Adverizeo, such as a customer named in a brief or a teammate’s email, your business is the controller and we act as its processor under our Data Processing Agreement.
2.What we collect
| Where it comes from | What we keep |
|---|---|
| Your account | Email address, password (stored only as a hash), and optionally your phone number. The date you accepted our Terms. |
| Setup | Business name, website, industry, audience, market and language, marketing goals, main use case, experience level, your name, job title and team size. |
| What you create | Briefs, brand voices, personas, products, knowledge documents, uploaded files, generated drafts, comments, client reports and the performance files you upload for them, and posts you schedule. |
| Connected platforms | Access tokens for the ad and social accounts you connect (encrypted), and the performance data you sync from them. |
| Sign-in and security | IP address and browser details at sign-in, security events and activity logs. |
| Payments | Your Stripe customer ID, plan and subscription status. Card details are entered on Stripe’s own page; we never see or store card numbers. |
| Forms and support | Contact form (name, email, company, topic, message, marketing choice), early access applications, newsletter sign-ups, support tickets (message, page, browser details, your plan, attachments) and live chat messages. |
| Free GDPR ad checker | The ad text you paste and its result, stored only if you tick the box, with no name, account or IP address attached. |
| Analytics | Pages viewed on our website and in the app, device type and approximate location, with a pseudonymous ID, through Google Analytics (see our Cookie Policy). |
| Referrals | The referral code you signed up with, and your sign-up IP address to detect referral abuse. |
| Emails we send | Whether an email from us was delivered, opened, clicked or bounced. |
3.How we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Run your account and the features you use | Contract |
| Take payments and keep billing records | Contract; legal obligation |
| Answer support tickets | Contract |
| Answer contact form messages | Consent, given on the form |
| Keep the service secure and prevent fraud and abuse (sign-in records, rate limits, bot checks, referral checks) | Legitimate interests |
| Emails about your account, such as verification, password resets and billing | Contract |
| Optional emails to account holders: activity emails, product updates and the weekly digest (each can be turned off, and every one has an unsubscribe link) | Legitimate interests (the weekly digest only if you turn it on) |
| Newsletter | Consent, given when you sign up |
| Analytics | Consent for visitors in Europe; legitimate interests elsewhere |
| Improve our compliance checks with free-checker submissions you choose to share | Consent, given by ticking the box |
| Cross-business patterns and client benchmarks (see “AI and automated checks”) | Consent: an opt-in setting in your account (off by default), or per client |
4.AI and automated checks
To write, review and analyze content, we send what each request needs (briefs, brand settings and knowledge documents, photos you ask us to edit, draft ads and client report data) to our AI providers, OpenAI and Anthropic. We don’t train AI models on your content.
Compliance scores and suggestions are automated guidance about your ad text. They are not legal advice and don’t make decisions about you with legal or similar effects.
If you opt in, the Learning Engine combines ad traits and performance numbers (never names or ad text) with other opted-in accounts to find patterns, and only publishes a pattern backed by at least 10 businesses. Client benchmarks use only clients you opt in, shown as group averages.
6.International transfers
Our app and database run in the Netherlands and files are stored in Germany. Some processors, including our AI, payment, email and analytics providers, are in the United States. Those transfers are covered by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, as listed on the Subprocessors page.
7.How long we keep it
| Data | Kept for |
|---|---|
| Account, setup, content and files | Until you delete your account. Deletion runs 30 days after you request it, and you can cancel during that time. |
| Sign-in, security and activity logs | 90 days |
| Referral sign-up IP address | Until you delete your account |
| Support tickets | Until you delete your account |
| Contact messages, early access applications, newsletter sign-ups, email delivery records | Until you ask us to delete them |
| Free checker submissions you share | Kept without any identity attached |
| Payment records | Kept by Stripe for as long as the law requires |
| Database backups | Up to 90 days, then deleted. Data you delete leaves our backups within that time. |
| Website analytics | According to our Google Analytics retention setting |
8.Your rights
You can ask to access, correct, delete, restrict or move your data, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
- Download your data, change your email or password, and delete your account yourself under Dashboard → Account & GDPR.
- Choose which optional emails you get in the same place (or use the unsubscribe link in any of them), and change analytics with Cookie Settings in the site footer.
- For anything else, contact us. Acknowledged within 1 business day, answered within 30 days.
- You can also complain to the data protection authority where you live or work.
9.Security
- All traffic is encrypted in transit (TLS).
- Passwords are stored as Argon2 hashes, and passwords found in known breaches are refused at sign-up.
- Tokens for connected platforms are encrypted with AES-256-GCM.
- On the Agency plan, team roles control what each teammate can do. Actions by Adverizeo staff in our admin tools are logged.
- We don’t hold SOC 2 or ISO 27001 certification yet.
- If a personal data breach happens, we report it to the supervisory authority within 72 hours of becoming aware of it, unless it’s unlikely to put anyone at risk, and we tell you without undue delay if it’s likely to put you at high risk.
10.Age limit
Adverizeo is a business tool for people aged 18 or over. We don’t knowingly collect data from anyone younger.
11.Changes to this policy
We’ll tell you by email or in the app before a material change takes effect. The date at the top shows the latest version.
12.Contact
Questions about this policy or your data: contact us.