Privacy Policy

1. Introduction

Webabi OÜ ("we", "our", "AdInflow") operates adinflow.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Google Ads campaign generation service.

We are committed to protecting your privacy and complying with GDPR (EU), CCPA (California), and Google API Services User Data Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, first name, last name, password (hashed)
• Business Information: Company name, website URL, business description, target audience
• Payment Information: Processed by Stripe (we do not store credit card details)

2.2 Google Account Data

When you connect your Google Ads account, we collect:

• Google Profile: Email, name, profile picture
• Google Ads Data: Campaign performance metrics, keywords, ad copy, account structure
• Access Tokens: Stored encrypted in our database to maintain connection

Important: We use Google Ads API exclusively to:

• Generate optimized campaign structures based on your business data
• Track campaign performance analytics
• Provide keyword research and competitor insights

We do not modify your campaigns without explicit user action or share your Google Ads data with third parties except as described in this policy.

2.3 Automatically Collected Data

• Usage Data: Features used, campaigns created, timestamps
• Device Information: Browser type, device type, operating system
• Log Data: IP address, access times, pages viewed (stored in server logs)
• Cookies: Authentication, preferences, analytics (see Cookie Policy)

2.4 Marketing & Analytics

With your consent, we collect data through:

• Google Analytics: Website traffic, user behavior
• Google Tag Manager: Marketing tag management
• Meta Pixel: Ad performance tracking, retargeting
• Google Ads Tracking: Conversion tracking for our own advertising

3. How We Use Your Information

• Service Delivery: Generate AI-powered Google Ads campaigns, provide analytics
• Account Management: Process payments, manage subscriptions, send transactional emails
• AI Processing: Your business data is sent to OpenAI/Anthropic APIs to generate campaign content
• Improvement: Analyze usage patterns to enhance features
• Communication: Send updates, marketing emails (opt-out available)
• Legal Compliance: Fraud prevention, terms enforcement, legal obligations

4. Third-Party Services

We share data with the following service providers:

5. Data Retention

• Active Accounts: Data retained while your account is active
• After Deletion: Account data deleted within 30 days of deletion request
• Legal Obligations: Some data may be retained for compliance (e.g., payment records for 7 years per tax laws)
• Backups: Backup systems may retain data for up to 90 days

6. Your Rights (GDPR/CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure ("Right to be Forgotten"): Delete your account and data
• Portability: Export your campaign data (CSV format)
• Withdraw Consent: Opt-out of marketing emails, disconnect Google Ads
• Object: Restrict processing for specific purposes

To exercise these rights, email support@adinflow.comor delete your account in Settings → Account → Danger Zone.

7. Security Measures

• Encryption: All data transmitted via HTTPS (SSL/TLS)
• Database: Google Ads tokens encrypted at rest
• Authentication: Industry-standard bcrypt password hashing
• Access Control: Role-based permissions, regular security audits
• Third-Party Security: All providers are SOC 2 Type II certified

8. Cookies & Tracking

We use cookies for authentication, preferences, and analytics. See our detailed Cookie Policy.

You can manage cookie preferences via the banner on your first visit or in browser settings.

9. International Data Transfers

Our servers are located in the EU (via Supabase). Data may be transferred to the US for AI processing (OpenAI/Anthropic) under Standard Contractual Clauses (SCCs) and adequate safeguards.

10. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. Continued use constitutes acceptance of changes.

12. Contact Us

13. Google API Services Compliance

AdInflow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.