Privacy Policy

1. Who we are

AdsBaker provides website advertising audits, launch kits, account connections, monitoring, and related reporting tools. For privacy questions or requests, contact us at support@adsbaker.com.

2. Information we collect

We collect information in the following categories:

• Account information: name, email address, password (stored as a secure hash), plan selection, and account preferences such as email report settings.
• Website and scan data: URLs you submit, crawl results, tracking signals detected on your site (for example GTM, GA4, Meta Pixel IDs), page content excerpts used for analysis, competitor URLs you provide, and generated reports or launch kits.
• Connected platform data: if you choose to connect Google Ads, GA4, or Meta Ads, we receive OAuth tokens and read performance data from those accounts — such as campaign spend, clicks, impressions, conversions, search terms, sessions, landing pages, and demographic summaries — only as needed to provide sync and reporting features.
• Payment information: billing is handled by Stripe. We receive customer IDs, subscription status, and transaction metadata from Stripe. We do not store full payment card numbers on our servers.
• Communications: messages you send us and emails we send you (for example password resets and monthly reports you opt into).
• Technical data: server logs, IP address, browser type, timestamps, and similar diagnostic information used for security and operations.

3. How we use information

We use the information we collect to:

• Create and manage your account;
• Run website scans, generate recommendations, exports, and launch materials;
• Connect to and sync data from advertising and analytics platforms you authorize;
• Deliver monitoring alerts, operator reviews, and monthly optimization reports;
• Process payments and manage subscriptions;
• Send service-related emails such as password resets and report delivery;
• Improve, secure, and troubleshoot the Service;
• Comply with legal obligations and enforce our Terms.

Where enabled, we may send scan or site content to an AI provider to enhance ad copy or recommendations. We do not use your connected ad account credentials for AI training.

4. Legal bases (where applicable)

If you are in the European Economic Area, United Kingdom, or another region with similar laws, we process personal data based on one or more of the following:

• Contract: to provide the Service you signed up for or purchased;
• Legitimate interests: to secure the Service, prevent abuse, and improve our product, balanced against your rights;
• Consent: where you connect third-party accounts or opt into optional communications;
• Legal obligation: where required by applicable law.

5. How we share information

We do not sell your personal information. We may share information with:

• Service providers that help us operate the Service, such as hosting providers, Stripe (payments), Resend or similar email delivery services, and optional AI providers when enhancement features are enabled;
• Platforms you connect (Google, Meta) when you initiate OAuth authorization — governed by their own policies;
• Professional advisers or authorities when required by law or to protect rights, safety, and security;
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Cookies and similar technologies

We use a strictly necessary session cookie named adsbaker_session to keep you signed in. It is HTTP-only, uses a secure flag in production, and expires after 30 days of inactivity or when you log out.

We do not use third-party advertising cookies on the Service. If we add analytics cookies in the future, we will update this Policy and, where required, ask for consent.

7. Data retention

We retain account and scan data for as long as your account is active or as needed to provide the Service. Connected OAuth tokens are stored encrypted and removed when you disconnect an account or delete your account. Payment records may be retained as required for accounting, tax, and fraud prevention. Server logs are kept for a limited period for security and diagnostics.

8. Security

We use administrative, technical, and organizational measures designed to protect your information, including encrypted storage of OAuth tokens, hashed passwords, HTTPS in production, and access controls for operator tools. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We may process and store information on servers located outside your country. Where required, we rely on appropriate safeguards for cross-border transfers.

10. Your choices and rights

Depending on where you live, you may have the right to:

• Access, correct, or delete personal information we hold about you;
• Export your data or request a copy;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Disconnect third-party accounts at any time from your dashboard;
• Opt out of marketing emails using unsubscribe instructions in those emails.

To make a request, email support@adsbaker.com. We may need to verify your identity before responding. You may also lodge a complaint with your local data protection authority.

11. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Third-party websites and services

The Service may link to or integrate with third-party sites and APIs (for example Google Ads, GA4, Meta, Stripe). Their privacy practices are governed by their own policies. We are not responsible for third-party services you choose to use.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after changes become effective means you accept the updated Policy.

14. Contact

Questions about this Privacy Policy or our data practices may be sent to support@adsbaker.com.