Privacy Policy — AdPilot

1. Who We Are

AdPilot is operated by Socials Century s.r.o., IČO 21189927 ("we", "us", "our"). If you have questions about this policy, contact us at adpilot@socialscentury.com.

2. What Data We Collect

When you use AdPilot, we collect the following types of data:

Account information — name, email address, and password hash when you register.
Ad platform data — campaign names, performance metrics (impressions, clicks, spend, conversions), ad copy, and keywords synced from your Google Ads and Meta Ads accounts via OAuth.
OAuth tokens — encrypted access and refresh tokens to maintain your ad platform connections. We never store your Google or Meta passwords.
Usage data — pages visited, features used, and timestamps for improving the service.
Payment information — processed by Stripe. We do not store credit card numbers on our servers.

3. How We Use Your Data

To display your ad campaign performance in the dashboard.
To provide AI-powered analysis, recommendations, and ad copy generation when you use AI features.
To send you notifications and alerts about your campaigns (if enabled).
To process payments and manage your subscription.
To improve the service based on aggregated, anonymized usage patterns.

4. AI Data Processing

When you use AI features (campaign evaluation, ad copy generation, budget recommendations, etc.), relevant campaign data is sent to our AI provider, Anthropic (Claude API), for processing.

Data is sent only when you explicitly trigger an AI feature.
Your data is not used to train AI models.
AI responses are generated in real-time and not stored by Anthropic.

5. Data Storage and Security

Data is stored on servers located in the European Union.
All connections use HTTPS (TLS) encryption.
OAuth tokens and sensitive data are encrypted at rest.
Access to production systems is restricted and logged.

6. Data Sharing

We do not sell your data. We share data only with:

Anthropic — for AI feature processing (as described above).
Stripe — for payment processing.
Google and Meta — to read and manage your ad campaigns via their APIs.

We do not share your data with any other third parties.

7. Data Retention

We retain your data for as long as your account is active. Campaign performance data is synced and stored for up to 90 days. If you delete your account, we will delete your personal data and campaign data within 30 days. Some data may be retained longer if required by law.

8. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access your personal data.
Correct inaccurate data.
Delete your account and data.
Export your data in a portable format.
Withdraw consent for data processing at any time.
Object to processing or restrict processing.

To exercise any of these rights, email us at adpilot@socialscentury.com. We will respond within 30 days.

9. Cookies

AdPilot uses essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notification. The "Last updated" date at the top reflects the most recent revision.