Privacy Policy - adEase.ai

1. Introduction

adEase.ai ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our AI-powered Google Ads management platform. We comply with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

2. Data We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. We do not access your Google password.

Google Ads Data

With your authorisation, we access your Google Ads account data including campaign performance, keywords, search terms, ad copy, and billing information. This data is accessed via the official Google Ads API and is used solely to provide our Service.

Usage Data

We collect information about how you use our Service, including API call counts, features used, and interaction patterns. This helps us improve the Service and monitor usage limits.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card details. Stripe may collect billing information as described in their privacy policy.

3. How We Use Your Data

To provide and maintain the Service, including AI-powered recommendations and analytics
To authenticate your identity and manage your account
To process payments and manage subscriptions
To send transactional emails (welcome, trial expiry, subscription confirmations)
To maintain audit logs of all account changes for security and compliance
To improve our Service through aggregated, anonymised usage analytics
To respond to your enquiries and provide customer support

4. Third-Party Services

We use the following third-party services to operate adEase.ai:

Google (OAuth & Ads API) — Authentication and Google Ads data access
Supabase — Database hosting, authentication, and data storage
Stripe — Payment processing and subscription management
Anthropic (Claude AI) — AI-powered chat, recommendations, and ad copy generation
Resend — Transactional email delivery
Vercel — Application hosting and deployment

Each third-party service processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

5. Data Storage & Security

Your data is stored securely using industry-standard encryption. Google Ads API refresh tokens are encrypted using AES-256-GCM before storage. All data transmission uses TLS encryption.

Google Ads performance data is accessed in real time from Google's servers. We cache certain metrics temporarily to improve performance but do not permanently store raw Google Ads data beyond audit logs and recommendation history.

6. Data Retention

We retain your data for as long as your account is active. Specifically:

Account data: Retained while your account exists
Audit logs: Retained for 12 months for compliance purposes
Usage data: Retained for 90 days in aggregated form
Payment records: Retained as required by financial regulations

When you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

Right of access — Request a copy of your personal data
Right to rectification — Request correction of inaccurate data
Right to erasure — Request deletion of your personal data
Right to restrict processing — Request limitation of data processing
Right to data portability — Receive your data in a machine-readable format
Right to object — Object to processing of your personal data
Right to withdraw consent — Withdraw consent at any time by revoking Google Ads access

To exercise any of these rights, contact us at support@adease.ai.

8. Cookies

We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Supabase sets authentication cookies to maintain your logged-in session. These are strictly necessary cookies and do not require consent under GDPR.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. The "Last updated" date at the top of this page indicates when this policy was last revised.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@adease.ai or visit our Contact page.