Privacy Policy

1. Who We Are

Adnostic.io ("Adnostic," "we," "our," or "us") provides software and services to help customers analyze, manage, and automate advertising workflows (the "Services").

Legal entity: AdNostic, Inc.

Address: 123 Main St, Anytown, USA

Contact: privacy@adnostic.io

2. Scope

This Privacy Policy applies to personal information we process about visitors to our website, users of our Services, and individuals who communicate with us. If you connect third-party platforms (e.g., advertising networks) to Adnostic, their processing is governed by their own privacy policies.

3. Information We Collect

3.1 Information You Provide

• Account & Contact Data: name, email, company, role, and team information.
• Billing Data: payment method, billing address, and transaction details (processed by our payment processor).
• Customer Content: data you upload or connect, including ad accounts, campaign metadata, performance metrics, creative assets, audiences, and related configuration.
• Support & Communications: messages, feedback, and survey responses.

3.2 Information Collected Automatically

• Usage & Device Data: IP address, device IDs, browser type, operating system, pages viewed, referring URLs, timestamps, and in-app actions.
• Cookies & Similar Tech: please see Cookies & Tracking.

3.3 Information from Integrations (At Your Direction)

When you connect third-party platforms (for example, Meta Ads, Google Ads, Workfront, or others), we receive data as authorized via OAuth or API keys. This may include account identifiers, campaign/ad/creative data, cost and performance metrics, and other information made available by those platforms according to their scopes and your settings.

4. How We Use Information

• Provide, operate, maintain, and secure the Services.
• Authenticate users and enable integrations you select.
• Process payments and send transactional communications.
• Respond to requests, provide support, and improve customer experience.
• Analyze usage to improve features, quality, and performance.
• Detect, prevent, and investigate security incidents, abuse, and fraud.
• Comply with legal obligations and enforce our agreements.
• Send service notices and (with your consent or as permitted) marketing communications. You can opt out of marketing at any time.

5. Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, we process personal data based on:

• Contract: to provide the Services you request.
• Legitimate Interests: e.g., product improvement, security, and anti-fraud (balanced against your rights).
• Consent: for certain uses (e.g., marketing or specific cookies). You may withdraw consent at any time.
• Legal Obligation: where required by law.

6. How We Share Information

• Service Providers: cloud hosting, storage, analytics, email delivery, customer support, and payment processing. These providers may access personal information to perform services on our behalf and are bound by contractual confidentiality and security obligations.
• Integration Partners (At Your Direction): when you connect platforms (e.g., Meta Ads, Google Ads), we exchange data as necessary to provide the integration.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of assets.
• Legal: to comply with law, legal process, or to protect rights, property, or safety.
• Consent: we may share information with your consent or at your explicit instruction.

We do not sell your personal information. If "sharing" for cross-context behavioral advertising ever applies under state law, we will provide a "Do Not Sell or Share" mechanism.

7. Data Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and context. You may request deletion as described in Your Rights.

8. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

We may transfer, store, and process information in countries other than where it was collected. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) to protect personal data transferred from the EEA/UK to third countries.

10. Your Rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal information.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise rights, contact us at privacy@adnostic.io. We may ask for information to verify your identity and request.

California (CPRA): California residents can request access, deletion, correction, and information about disclosures. We do not sell personal information. If we "share" for cross-context behavioral advertising, you may opt out via a "Do Not Sell or Share My Personal Information" link (if/when applicable).

11. Cookies & Tracking

We use cookies and similar technologies to operate and improve the Services, remember preferences, and analyze usage. You can manage cookies through your browser settings. Where required, we present a consent banner to control non-essential cookies.

12. Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy and updating the "Last Updated" date above, and, where required, by additional notice (e.g., email or in-app).

14. Contact Us

Questions or requests regarding this Privacy Policy can be sent to:

Email: privacy@adnostic.io
Address: 123 Main St, Anytown, USA

15. Jurisdiction & Complaints

Governing Law: the laws of the State of New Jersey, without regard to conflicts of law principles.

If you are in the EEA/UK, you also have the right to complain to your local data protection authority. Contact details for EU authorities are available at edpb.europa.eu. For the UK, see the ICO at ico.org.uk.