This Privacy Policy explains how Dennis Georgescu (a sole proprietor based in Ontario, Canada), operator of AdAutopilot, handles personal information collected through this website and through your AdAutopilot subscription. It sits alongside our Terms of Service and our Data deletion page. Questions: support@getadautopilot.com.
1. What we collect
There are three different situations, and they are worth keeping apart.
When you browse this website. We use Vercel Analytics, which gives us anonymous, aggregated usage figures and does not identify you personally. We also run the Meta pixel on this site, which is an advertising tool: it sets cookies and sends a page view event to Meta so we can measure our own advertising. Section 2 explains this and how to control it.
When you subscribe. Your name and email address, the account details you provide when you sign up, and billing information. Payment is processed by Stripe, and we never see or store your full card details. If you email us, we hold your email address and whatever you put in the message.
What lives in your workspace. To run the product for you we store:
- workspace, brand, and account settings, including the connections you set up;
- brand knowledge you or the AI agent write, such as your offers, personas, angles, and notes;
- media you upload, such as product photos and video;
- ad creative and copy generated for you, including staged ads awaiting approval;
- advertising performance data we retrieve from the Meta ad account you connect, such as spend, impressions, and results.
We do not ask for and do not want sensitive personal information in your workspace. Please do not put health, financial, biometric, government identifier, or similar sensitive data about anyone into it. AdAutopilot does not connect to a CRM and does not collect contact records.
2. Cookies and similar technologies
This marketing website loads the Meta pixel on every page and reports a page view to Meta. We use it to measure how well our own advertising works. The pixel sets cookies in your browser and shares that page view with Meta, which may connect it to your Meta account if you have one. We do not send Meta the contents of your workspace.
You can control this. Meta's own ad settings let you limit how Meta uses activity from sites like ours, and your browser can block or clear third-party cookies and trackers. Blocking the pixel does not affect your use of AdAutopilot in any way. The application at app.getadautopilot.com uses only the cookies needed to keep you signed in and to run the product.
3. Why we use it
We use this information to give you access to AdAutopilot and run it for you, to generate and publish the ads you approve, to bill your subscription, to send you email about your account, to provide support, to keep the Service secure, to meet legal, tax, and accounting obligations, and to measure and improve the product and the website.
4. Who we share it with
We share the minimum necessary information with the service providers that run the site and the product. Each processes information under its own privacy policy.
- Stripe, payments and subscription billing
- Supabase, the database and file storage that hold your workspace
- Vercel, hosting for this website and for the application, plus privacy-friendly analytics
- Resend, transactional email about your account
- Meta, where we retrieve advertising data from the ad account you connect and publish the ads you approve, and where the pixel on this website reports page views
- Your AI provider (Anthropic, OpenAI, or Google) and Foreplay, if you supply a key for it
The AI point matters, so here it is plainly: the AI work runs on your own account with your own key. When the agent researches, writes, or generates creative, that content goes to the provider you chose, billed to you, under your own agreement with that provider and their privacy and retention terms. We pass it through and store the result in your workspace.
5. We do not train on your data
We do not use the contents of your workspace to train any model, ours or anyone else's. We do not sell or rent personal information, and we do not share it for anyone else's advertising.
6. Security
Information is encrypted in transit. The access tokens for your connected accounts and the third-party keys you supply are encrypted at rest. Access to production data is limited to what is needed to run and support the Service. No system is perfectly secure, so we do not promise that it is, and we hold no security certification at this time.
7. Retention
We keep your workspace data for as long as your subscription is active and you want it there. When you ask us to delete it, we delete it within 30 days, and our backups roll off shortly after that. If your subscription ends, you have 30 days to export or retrieve your data before we delete it. Billing and tax records are kept for as long as the law requires, which is longer. Our Data deletion page explains exactly how to ask.
8. Your rights
You can ask us for access to the personal information we hold about you, for a copy of it, and for it to be corrected or deleted. Email support@getadautopilot.com from the address on your account and we aim to respond within 30 days.
In Canada these rights come from PIPEDA. If you are in the United Kingdom, the European Union, or California, you have additional rights under your own laws, such as objecting to or restricting processing, data portability, withdrawing consent, and opting out of the sale or sharing of personal information (we do neither). We honour those requests too. If you are not happy with our answer, you can complain to your privacy regulator, which in Canada is the Office of the Privacy Commissioner.
9. If there is a breach
If personal information we hold is lost or accessed without authorization in a way that creates a real risk of significant harm, we will notify the people affected and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and keep a record of the incident.
10. International processing
Our service providers are largely based in the United States, so your information is processed there and may be subject to the laws of that country, including lawful access by its authorities.
11. Children
AdAutopilot is a business product, sold for business use only as set out in our Terms of Service. It is not directed to anyone under 18, and we do not knowingly collect personal information from children. If we learn that we have, we delete it.
12. Changes
We may update this policy; the "last updated" date above reflects the current version. If a change materially affects how we handle your personal information, we will tell you by email to the address on your account.