Privacy Policy

1. Introduction

Welcome to Adsynthesize ("Adsynthesize," "we," "us," or "our"). Adsynthesize, Inc. is a Delaware corporation that operates the Adsynthesize platform — a performance intelligence service for paid media teams (the "Service"). We are committed to protecting your privacy and ensuring the security of your information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (hashed), and profile information when you create an account
• Organization Information: Business name, website URL, industry, and the business context you choose to share with the Service (margins, goals, account history)
• Payment Information: Billing details processed through our payment provider (Stripe). We do not store full payment card numbers
• Communications: Information you provide when contacting us for support or feedback

2.2 Information from Connected Advertising and E-Commerce Platforms

When you connect an advertising or e-commerce account via OAuth, we collect data necessary to provide our analytics and recommendations:

• Meta (Facebook / Instagram) Ads Data: Campaign, ad set, ad, and creative metadata; performance metrics (impressions, clicks, spend, conversions, ROAS); ad account structure; and aggregate audience insights
• Google Ads Data: Campaign, ad group, ad, and keyword metadata; performance metrics; search term reports; landing page reports; quality scores; and conversion data
• Shopify Store Data: Aggregate daily order and revenue totals, product and variant catalog data, product costs and margins, and store configuration (currency, timezone). We use this data to calculate store-level revenue, marketing efficiency ratio (MER), and product-level profitability. We do not collect or store customer names, email addresses, postal addresses, phone numbers, or individual order records
• OAuth Tokens: Secure access and refresh tokens used to retrieve data on your behalf. Tokens are encrypted at rest and never exposed client-side
• Account Identifiers: Ad account IDs, manager account IDs, store domains, and platform user IDs necessary to associate data with the correct workspace

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent in the Service
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Cookies and Similar Technologies: See Section 7

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our analytics and AI-powered insights platform
• Data Analysis: To analyze your advertising performance and combine it with your business context to generate recommendations
• AI-Powered Recommendations: To generate written insights, summaries, and optimization suggestions using large language models provided by our AI sub-processor, Anthropic, PBC. Anthropic processes data solely to return a response to our request and is contractually prohibited from using it to train its models. We do not use your account data, advertising data, e-commerce data, or AI conversation history to train AI models that benefit any other customer. See Section 5.3 for details
• Account Management: To manage your account, process transactions, and provide customer support
• Communication: To send service updates, security alerts, and (with your consent) marketing communications
• Security: To detect, prevent, and address technical issues, abuse, and fraudulent activity
• Legal Compliance: To comply with applicable laws and regulations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), the UK, and Switzerland, we process personal data based on:

• Consent: Where you have given explicit consent for specific processing activities
• Contract Performance: Processing necessary to fulfill our service agreement with you
• Legitimate Interests: For purposes like improving our Service, provided these do not override your rights
• Legal Obligations: When required to comply with applicable laws

5. Information Sharing and Disclosure

We do not sell your personal information. We share information only as described below.

5.1 Service Providers (Sub-Processors)

We use the following sub-processors to operate the Service. Each is bound by contractual data protection terms.

We maintain an updated list of sub-processors and will provide reasonable notice of material changes.

5.2 Other Disclosures

• Legal Requirements: When required by law, subpoena, or legal process
• Protection of Rights: To protect the rights, privacy, safety, or property of Adsynthesize, our users, or others
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with notice to affected users)
• With Your Consent: For any other purpose with your explicit consent

5.3 Use of Customer Data for Service Improvement

We use Customer Data in three ways related to service improvement, each with different boundaries:

• Per-workspace personalization: We use the data within your workspace — including your account history, business context, terminology, and your responses to our recommendations — to personalize and improve the Service for you and your workspace. This means the Service learns your preferences, your accounts' patterns, and what kinds of recommendations you find useful over time. This personalization is limited to your workspace and does not affect other customers.
• Product-level improvements: We analyze aggregate usage patterns and feedback signals (such as which recommendation types are commonly accepted or dismissed across our user base) to improve the Service itself. These signals do not include your Customer Data and do not transfer your data to other customers.
• AI model training restrictions: We do not use Customer Data — including data we receive from Meta Ads, Google Ads, or Shopify via authorized API access — to train, fine-tune, or otherwise improve AI or machine-learning models that serve other customers. Our use of data received through the Meta Marketing API complies with the Meta Platform Terms, our use of data received through Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements, and our use of Shopify data complies with the Shopify API License and Terms of Use.

If we ever introduce optional features that involve cross-customer data sharing (such as anonymized industry benchmarks), participation will be opt-in only and governed by a separate, clear consent flow.

6. Your Rights and Choices

6.1 All Users

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data (see Section 6.5)
• Disconnect Platforms: Revoke our access to your connected Meta Ads, Google Ads, or Shopify accounts at any time from within the Service
• Opt-Out: Unsubscribe from marketing communications

6.2 EEA / UK / Swiss Users (GDPR)

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

6.3 California Residents (CCPA / CPRA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale or sharing of personal information
• Right to non-discrimination for exercising your rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising.

6.4 Disconnecting Connected Accounts

You can disconnect any connected Meta Ads, Google Ads, or Shopify account at any time:

1. Sign in at https://app.adsynthesize.ai
2. Go to Settings → Connections
3. Click Disconnect next to the platform or account

On disconnection, we delete the associated OAuth tokens and stop all further data syncs for that account. Previously synced performance data may be retained in your workspace so that historical reporting remains available and so that reconnecting an account restores continuity. To have previously synced data deleted, request full deletion as described in Section 6.5, or contact us at privacy@adsynthesize.ai to request deletion of a specific account's historical data. For connected Shopify stores, disconnecting or uninstalling the app deletes the store connection, synced revenue data, and catalog data.

6.5 Account Deletion

You can request full deletion of your account and all associated data at any time by following the instructions at https://adsynthesize.ai/data-deletion. We confirm receipt within 2 business days and complete deletion within 30 days, unless we are legally required to retain specific records (in which case we will inform you of the basis for retention).

7. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for authentication and core Service functionality (session cookies)
• Analytics Cookies: Used to understand product usage and improve the Service
• Preference Cookies: Used to remember your settings

You can control cookies through your browser settings. Disabling essential cookies will prevent the Service from functioning.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Hashed and salted password storage
• Secure storage of OAuth tokens with server-side-only access
• Role-based access controls and audit logging
• Tenant-level data isolation enforced server-side
• Regular security reviews and dependency updates

No internet transmission or storage method is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your information for as long as:

• Your account remains active
• Necessary to provide the Service
• Required by applicable laws and regulations
• Needed to resolve disputes and enforce agreements

Advertising and e-commerce performance data is retained for up to 2 years to enable year-over-year analysis. On account deletion, we delete or anonymize your data within 30 days unless legally required to retain specific records.

10. International Data Transfers

Adsynthesize is based in the United States, and your information is processed in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. We rely on Standard Contractual Clauses approved by the European Commission and equivalent safeguards for transfers from the EEA, UK, and Switzerland to the United States.

11. Children's Privacy

The Service is intended for use by businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, contact us at privacy@adsynthesize.ai and we will delete the information.

In compliance with Meta's advertising policies, we do not use the Service to target advertising to users under 18 years of age.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending you an email notification for significant changes
• Displaying a prominent notice within the Service

Your continued use of the Service after changes indicates your acceptance of the updated policy.

14. Platform-Specific Disclosures

14.1 Meta Platform Terms

Our access to and use of data obtained through the Meta Marketing API is governed by the Meta Platform Terms and Developer Policies. Specifically:

• We access Meta data only with your explicit OAuth authorization
• We use Meta data only to provide the Service to the customer who authorized the connection
• We do not sell, license, or transfer Meta data to third parties except as described in Section 5
• We do not use Meta data for advertising or to develop independent advertising products
• You can revoke our access to your Meta accounts at any time as described in Section 6.4
• We delete Meta data from our systems within 30 days of account deletion as described in Section 6.5. On disconnection of an individual account, we delete the OAuth tokens and stop all syncs, and you may request deletion of previously synced data as described in Section 6.4

14.2 Google API Services Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, with respect to data obtained through Google APIs:

• Allowed use only: We use Google user data solely to provide and improve the user-facing features of the Service, in ways that are consistent with the Service's purpose
• No transfer: We do not transfer Google user data except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users
• No advertising use: We do not use Google user data to serve advertisements, including retargeted, personalized, or interest-based advertising
• No human reading: We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), it is necessary to comply with applicable law, or the data is aggregated and used for internal operations in accordance with applicable privacy and other laws

14.3 Shopify Protected Customer Data

Our access to and use of Shopify store data is governed by the Shopify API License and Terms of Use. We request the minimum protected customer data necessary to provide the Service.

• We use Shopify data solely to compute aggregate commercial performance metrics, including store revenue, marketing efficiency ratio, and product-margin analysis
• We process this data at daily and product-variant granularity only. We do not profile, score, or make automated decisions about individual customers
• We do not store customer names, email addresses, postal addresses, phone numbers, or any data keyed to an individual order or customer
• We do not sell, license, or transfer Shopify data to third parties except as described in Section 5
• You can disconnect a Shopify store at any time from Settings → Connections
• On disconnection or app uninstall, we delete the store connection, synced revenue data, and catalog data

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Adsynthesize, Inc.
Email: privacy@adsynthesize.ai
Website: https://adsynthesize.ai

For GDPR-related inquiries, you may also contact your local data protection authority.