AdReportly

Privacy Policy

Last updated: February 2025

1. Introduction

AdReportly ("we", "us", or "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding that data when you use our website and ad reporting service.

2. Data We Collect

We collect the following categories of data:

  • Account data: Email address and password (hashed) when you create an account. Managed by our authentication provider.
  • Profile data: Plan type, report usage limits, and optionally your logo or branding preferences for paid plans.
  • Report data: Client names, report months, advertising metrics (spend, clicks, conversions, etc.), campaign names, and similar data you upload or enter to generate reports.
  • AI-generated content: Executive summaries, insights, and recommendations generated from your report data.
  • Payment data: We do not store payment card details. Payments are processed by Paddle, our payment provider. We receive and store transaction IDs, plan purchased, amount, and status for billing and support.
  • Usage data: Logs of your use of the service (e.g., when you create or access reports) for operation and support.

3. How We Use Your Data

We use your data to:

  • Provide the service (create reports, generate AI content, save and retrieve your reports)
  • Authenticate you and manage your account
  • Process payments and manage your subscription
  • Respond to support requests and improve the service
  • Comply with legal obligations

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services. Each has its own privacy policy:

  • Supabase: Authentication and database. Your account data and report data are stored on Supabase infrastructure. Supabase Privacy Policy
  • Paddle: Payment processing. Paddle is the Merchant of Record and processes payments. We receive transaction information from Paddle. Paddle Privacy Policy
  • OpenAI: AI content generation. Report data (metrics, client name, month) is sent to OpenAI to generate summaries and insights. OpenAI does not use this data to train models per their API terms. OpenAI Privacy Policy

If you use email-based authentication (e.g., password reset), emails may be sent via our email provider (e.g., Resend). Emails are sent only for account-related purposes.

5. Cookies and Similar Technologies

We use essential cookies and local storage to keep you logged in and to remember your preferences during a session. These are necessary for the service to function. We do not use advertising or third-party tracking cookies.

6. Data Retention

We retain your data for as long as your account is active and as needed to provide the service. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, tax, or regulatory purposes.

7. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and at rest where applicable. Passwords are hashed. Access to data is restricted to authorized personnel and systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal retention requirements)
  • Portability: Request your data in a portable format
  • Object or restrict: Object to processing or request restriction in certain circumstances
  • Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise these rights, contact us at support@adreportly.com. You may also have the right to lodge a complaint with a supervisory authority in your country.

9. International Transfers

Your data may be processed in countries outside your residence. We use providers that offer appropriate safeguards (e.g., standard contractual clauses) where required by law.

10. Children

The service is not intended for users under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy or your personal data, contact us at support@adreportly.com.