Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. Your password is securely hashed and never stored in plain text.

Billing Information

Payment processing is handled by Stripe. We do not store your credit card numbers, CVV codes, or full payment card details on our servers. Stripe may share with us limited billing details such as the last four digits of your card, card brand, expiration date, and billing address for record-keeping purposes.

Usage Data

We collect information about how you interact with the Service, including ads generated, templates used, ad scoring history, feature usage, session duration, and pages visited. This data helps us improve the Service and provide a better experience.

Uploaded Content

When you upload content to the Service, such as logos, brand assets, or ad images, we store that content to provide the Service. You retain ownership of all content you upload.

Meta/Facebook Data

When you connect your Meta (Facebook/Instagram) ad account via OAuth, we access ad performance data, campaign metrics, ad spend information, and lead information as authorized by your permissions. We use this data solely to provide campaign management features within the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate AI-powered ad creatives and provide ad scoring
• Process payments and manage subscriptions
• Communicate with you about your account, updates, and promotional offers
• Analyze usage patterns to improve the Service and develop new features
• Detect, prevent, and address fraud, abuse, and technical issues
• Comply with legal obligations and enforce our terms

3. Third-Party Services

We integrate with the following third-party services to provide the Service. Each third-party service processes data in accordance with their own privacy policies, which we encourage you to review:

• Meta/Facebook — Ad account management via the Meta Marketing API for campaign creation, management, and performance tracking
• Google — Future ad management integration for Google Ads campaigns
• OpenAI — AI-powered ad copy generation and creative optimization
• fal.ai — AI image processing and generation for ad creatives
• Stripe — Secure payment processing and subscription management
• Supabase — Database hosting and user authentication
• Vercel — Application hosting and content delivery

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

We may share your information only in the following circumstances:

• Service Providers: With the third-party services listed above, solely to provide and improve the Service
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your data may be transferred as part of the transaction
• With Your Consent: When you have given us explicit consent to share your information for a specific purpose

5. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Data at rest is encrypted using AES-256 encryption
• OAuth tokens for third-party integrations (Meta, Google) are stored securely with encryption
• Row Level Security (RLS) is enforced at the database level so users can only access their own data
• Regular security audits and vulnerability assessments are conducted
• Access to production systems is restricted and logged

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your information.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct any inaccurate or incomplete data
• Deletion: Request that we delete your personal data, subject to legal retention requirements
• Data Export: Request a portable copy of your data in a machine-readable format
• Opt Out: Unsubscribe from marketing communications at any time via the link in our emails or your account settings
• Restrict Processing: Request that we limit the processing of your data in certain circumstances

To exercise any of these rights, please contact us at vantageadsai@gmail.com. We will respond to your request within 30 days.

7. Cookie Policy

We use cookies and similar tracking technologies to operate and improve the Service. The types of cookies we use include:

• Essential Cookies: Required for authentication, security, and core functionality. These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Service. These are optional and can be disabled.
• Preference Cookies: Remember your settings and preferences for a better experience

For more details, please see our Cookie Policy.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at vantageadsai@gmail.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email and/or by posting a prominent notice on the Service prior to the changes taking effect. Your continued use of the Service after any modifications constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

10. Google & Meta Ads Data

Vantage Ads accesses Google Ads and Meta (Facebook/Instagram) advertising account data through the official Google Ads API and Meta Marketing API using OAuth 2.0 authentication. This section describes how we handle data obtained from these advertising accounts.

Data We Access

We access campaign performance metrics (impressions, clicks, conversions, cost), keyword and search term data, ad copy and creative assets, bid and budget settings, geographic and device performance, audience data, and ad account structure as authorized by the account holder during the OAuth consent flow. For Meta accounts, this also includes Facebook Page data and Instagram account data necessary for ad delivery.

How We Use Google Ads Data

We use Google Ads and Meta Ads data solely to provide our advertising management services to you. This includes displaying performance dashboards, generating optimization recommendations, executing bid and budget adjustments you approve, producing performance reports, and training our AI optimization models on your account-specific patterns. We do not use your Google Ads data for any purpose unrelated to providing and improving our services to you.

Data Sharing

We do not sell, rent, license, or share your Google Ads or Meta Ads account data with any third parties for their own marketing, advertising, or commercial purposes. Your Google Ads data may be processed by our infrastructure providers (hosting, database) solely for the purpose of delivering our services, under strict data processing agreements.

Data Storage & Security

Google Ads and Meta OAuth refresh tokens are encrypted at rest in our database. Campaign performance data from both platforms is stored in our secure database infrastructure for the duration of your account. We use industry-standard encryption (TLS 1.2+) for all data in transit.

Data Retention & Deletion

We retain Google Ads data for the duration of your active account. When you disconnect your Google Ads or Meta Ads account from our platform or delete your Vantage Ads account, we delete all stored advertising data, including OAuth tokens and cached performance data, within 30 days. Meta access tokens automatically expire after 60 days unless refreshed by active use of the Service.

For self-service data deletion options, visit our Data Deletion Instructions page at https://vantageads.ai/data-deletion.

Revoking Access

You can disconnect your Google Ads or Meta Ads account at any time from the Integrations page within Vantage Ads. You can also revoke access directly from your Google Account at myaccount.google.com/permissions. For Meta accounts, revoke access from Facebook Business Integrations. Upon revocation, we immediately stop accessing your advertising data and delete stored tokens.

Google API Services User Data Policy Compliance

Vantage Ads' use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google Ads data to provide and improve the advertising management features you see in our platform.
• We do not transfer Google Ads data to third parties unless necessary to provide our services, you explicitly consent, or we are required by law.
• We do not use Google Ads data for serving advertisements unrelated to our service.
• We do not use Google Ads data for any purpose other than providing our core advertising management functionality.
• All human access to Google Ads data is limited to our engineering team for debugging and support purposes only, and only when authorized by you.

Compliance

Our use of the Google Ads API complies with the Google Ads API Terms of Service and the Google API Services User Data Policy, including the Limited Use requirements. Our use of the Meta Marketing API complies with Meta Platform Terms, Meta Developer Policies, and all applicable Meta data use requirements. We provide a deauthorization callback and data deletion callback as required by Meta Platform Terms. When a user removes our app from their Facebook Business Integrations, we automatically delete all associated Meta Platform Data within 30 days.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: vantageadsai@gmail.com
• Company: Vantage Digital LLC
• Website: vantageads.ai