Privacy Policy

AdPilot (“we”, “us”) is operated by Junaid Dar, sole proprietor, Ras Al Khaimah, United Arab Emirates — the controller for the processing described here. Contact for all privacy matters: junaid@heyadpilot.com. Where you are in the EU/EEA, UK, or Switzerland, the GDPR (or its UK/Swiss equivalents) applies to this processing.

Account & login. Your email, name, and login are handled by our authentication provider, Clerk. Our own database stores a reference to your workspace, not your password. Legal basis: performance of the contract.

Google Ads data.When you connect your Google Ads account via Google’s OAuth consent flow, we process campaign data (settings and performance metrics) solely to provide the service: analysis, recommendations, reports, and — only after your explicit approval — applying changes via the Google Ads API. OAuth refresh tokens are stored encrypted (AES-256-GCM). Legal basis: performance of the contract.

Google Analytics & Search Console (optional). If you choose to connect them, we read — strictly read-only, using the scopes analytics.readonly and webmasters.readonly — your Google Analytics 4 website statistics (visits, engagement, and traffic sources) and your Google Search Console data (how your site does in free Google search: clicks, impressions, and the search terms people used). We use this only to show it back to you in your reports and the assistant; we never write to or change these accounts. Legal basis: performance of the contract.

Google Merchant Center (optional). If you sell products and connect your Merchant Center account, we read — strictly read-only — your product and feed status: how many products are approved, pending, or disapproved, and the issues Google reports about them. Google offers only one Merchant Center permission (the content scope, which technically also allows writing), but AdPilot uses it solely to read this status and never changes your products or feed. Legal basis: performance of the contract.

AI processing. AdPilot’s assistant is powered by Claude, an AI model operated by Anthropic, PBC (USA), acting as our processor. Your chat messages and connected Google Ads campaign data (and, if you ask for a website analysis, content of the website you name) are sent to Anthropic to generate analyses, suggestions, and report texts. Anthropic does not use this data to train AI models and retains API data only for a limited period under its commercial terms. No change is ever applied to your account by AI alone — every change requires your explicit approval. Legal basis: performance of the contract.

Chat history. Your conversations with the assistant are stored so you can continue them and so we can meter usage (credits). Legal basis: performance of the contract.

Change records & audit log. Every proposed and applied change is recorded permanently: what changed, the before/after values, the chat message that triggered it, who approved it and when, and a pre-change snapshot. Before your first applied change we also record your acknowledgment of the AI risk notice, including its exact wording, version, time, IP address, and browser identifier. Legal basis: our legitimate interest in proving what was agreed and changed (establishment, exercise and defence of legal claims) — this protects you as much as us.

Billing. Payments are processed by Stripe; card details never touch our servers. We store your plan, subscription status, and credit balance. Legal basis: performance of the contract and legal (tax) obligations.

Server logs. Our hosting provider processes technical logs (IP address, browser type, timestamps) as required to deliver the site securely. Legal basis: legitimate interest in security and reliability.

We use a small set of service providers, each bound by a data processing agreement:

We do not sell personal data, and we do not run third-party advertising on our site.

We are established in the UAE and use service providers in the United States. Transfers from the EEA/UK/Switzerland to our US providers are protected by their certification under the EU–US Data Privacy Framework and/or Standard Contractual Clauses incorporated in our data processing agreements. Where data reaches us in the UAE, we apply this policy and the security measures described in it directly; the GDPR applies to that processing under Article 3(2).

Account, chat history, reports: kept while your account exists; deleted on account deletion (subject to the records below).

Google Ads tokens: deleted when you disconnect the account or delete your account.

Change records, audit log, acknowledgments: retained for up to 6 years after account closure to the extent necessary for the establishment, exercise or defence of legal claims (Art. 17(3)(e) GDPR). If you request erasure, we delete your profile, chat history, and access tokens, and we remove personal identifiers (names, message texts, IP addresses) from the retained change records, keeping only the fact, time, and content of each account change.

Billing records: kept as long as tax law requires.

Strictly necessary cookies keep the app working: an authentication session cookie (Clerk) and a short-lived security cookie during the Google sign-in flow. These are always on.

For visitor statistics we use two tools. Vercel Web Analytics is cookieless and does not track individuals across sites. Google Analytics 4 (provided by Google LLC) does set analytics cookies, such as _ga, which measure how visitors find and use this website so we can improve it. We use it for aggregate site statistics, not to serve you ads.

You can opt out of Google Analytics at any time with Google’s opt-out browser add-on, or by blocking cookies in your browser. Disabling these cookies does not affect your ability to use AdPilot.

AdPilot’s use and transfer of information received from Google APIs — Google Ads, and, if you connect them, Google Analytics, Search Console, and Merchant Center — adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data and do not use it for advertising purposes of our own. You can revoke AdPilot’s access at any time in your Google account security settings or in AdPilot’s settings.

Where the GDPR (or a similar law) applies, you have the right to access, rectify, erase, and receive a copy of your personal data, to restrict or object to certain processing, and to lodge a complaint with a supervisory authority in your country. Contact us at junaid@heyadpilot.com — we respond within one month. Deleting your account is always possible; see Section 5 for what is retained and why.

All traffic is encrypted in transit (TLS); the database is encrypted at rest; Google Ads refresh tokens are additionally encrypted at the application level (AES-256-GCM); payments are handled entirely by Stripe; access to production systems is restricted. Every account change requires explicit human approval and is recorded.

We will update this policy as the product evolves and indicate the date of the latest revision at the top. For material changes we will notify you in the app or by email.