Privacy Policy

1. Introduction

AdWhiz ("we", "our", or "us") operates the website adwhiz.ai and the AdWhiz AI-powered advertising audit and optimization service for Google Ads and Meta (Facebook) Ads (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

2. Information We Collect

2.1 Information You Provide

• Account information: Email address when you sign up for early access or create an account.
• Payment information: Processed securely by Stripe. We never store your credit card details on our servers.
• Google Ads account data: Campaign metrics, keywords, search terms, and performance data accessed via the official Google Ads API with your explicit authorization.
• Meta (Facebook) Ads account data: Ad account information, campaign metrics, spend data, impressions, clicks, conversions, and frequency data accessed via the official Meta Graph API with your explicit authorization through Facebook OAuth.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, and interaction patterns.
• Device information: Browser type, operating system, and screen resolution.
• Log data: IP address, access times, and referring URLs.

3. How We Use Your Information

3.1 General Account & Usage Data

We use your account information (email, payment details) and automatically collected usage data to:

• Provide, operate, and maintain the Service.
• Process transactions and send purchase confirmations and invoices.
• Send you technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.
• Monitor and analyze general usage trends (page views, feature adoption) to improve the Service. This analysis uses only website usage data and does not involve Google Ads account data.

3.2 Google Ads Account Data

Data obtained from the Google Ads API is used solely to provide the audit and optimization features you see in the application. Specifically, we use your Google Ads data only to:

• Generate your personalized audit report with actionable recommendations.
• Display your campaign performance metrics, keywords, and search terms within your dashboard.
• Execute optimization actions that you explicitly approve.

We do not use your Google Ads data for any other purpose, including analytics, advertising, marketing, product development, or any use unrelated to the features visible in your AdWhiz dashboard.

3.3 Meta (Facebook) Ads Account Data

Data obtained from the Meta Graph API is used solely to provide the audit and optimization features you see in the application. Specifically, we use your Meta Ads data only to:

• Generate your personalized health score and audit report with actionable recommendations.
• Display your campaign performance metrics, spend trends, and conversion data within your dashboard.
• Execute optimization actions (such as pausing campaigns or adjusting budgets) that you explicitly approve.

We do not use your Meta Ads data for any other purpose, including analytics, advertising, marketing, product development, or any use unrelated to the features visible in your AdWhiz dashboard.

4. Google Ads Data & Google API Limited Use Disclosure

4.1 Limited Use Compliance

AdWhiz's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.2 How We Handle Your Google Ads Data

• We request read-only access to your Google Ads account. Your data is used solely to provide the user-facing audit and optimization features visible in your AdWhiz dashboard.
• Your Google Ads data is encrypted in transit (TLS) and at rest.
• You can revoke our access at any time through your Google Account settings.
• Every optimization action requires your explicit approval before execution.

4.3 Prohibited Uses of Google Ads Data

We do not and will not:

• Sell, rent, or transfer your Google Ads data to third parties such as advertising platforms, data brokers, or information resellers.
• Use your Google Ads data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• Use your Google Ads data to determine creditworthiness or for lending purposes.
• Use your Google Ads data for any purpose other than providing or improving the user-facing features of AdWhiz that are visible to you in the application interface.

4.4 AI Processing & No Model Training

AdWhiz uses artificial intelligence to analyze your Google Ads data and generate your personalized audit report. This AI processing is performed solely to produce your individual report and recommendations. We do not use your Google Ads data to train, improve, or fine-tune any generalized or non-personalized AI or machine-learning models.

4.5 Human Access to Google Ads Data

AdWhiz employees and contractors do not read or access your Google Ads data unless: (a) you have given explicit consent for a specific support request, (b) it is necessary for security purposes such as investigating abuse or a security incident, (c) it is required to comply with applicable law, or (d) the data has been aggregated and anonymized so that it can no longer be associated with any individual user.

5. Meta (Facebook) Platform Data

5.1 Data We Access

When you connect your Meta (Facebook) account, we request the following permissions:

• ads_read: Read your ad account information, campaigns, and performance insights (spend, impressions, clicks, conversions, frequency).
• ads_management: Execute user-approved optimization actions such as pausing campaigns or adjusting budgets. All mutations require your explicit approval.
• pages_read_engagement & pages_show_list: Read Page information associated with your ad campaigns for complete campaign performance analysis.
• email: Retrieve your email address for account identification.

5.2 How We Handle Your Meta Data

• Your Meta Ads data is used solely to provide the user-facing audit and optimization features visible in your AdWhiz dashboard.
• Meta OAuth access tokens are encrypted using AES-256-GCM before storage and are never stored in plaintext.
• All data is encrypted in transit (TLS) and at rest.
• You can disconnect your Meta account at any time from the Settings page. Disconnecting immediately revokes the stored token and removes all Meta data from AdWhiz.
• You can also revoke access from your Facebook Business Integrations settings.

5.3 Prohibited Uses of Meta Data

We do not and will not:

• Sell, license, or transfer Meta Platform Data to any third party, including ad networks, data brokers, or information resellers.
• Use Meta Platform Data for surveillance, tracking, or monitoring of individuals.
• Use Meta Platform Data to discriminate against or disadvantage any individual or group.
• Use Meta Platform Data for any purpose other than providing or improving the user-facing features of AdWhiz.
• Combine Meta Platform Data with data from other sources in ways not authorized by Meta's Platform Terms.

5.4 Meta Data Retention & Deletion

Meta Ads performance data is fetched in real time for display in your dashboard and is not stored beyond what is needed to compute your health score and recommendations. When you disconnect your Meta account or delete your AdWhiz account, all stored Meta tokens and associated data are permanently deleted within 24 hours. We comply with Meta's data deletion requirements.

6. Data Sharing & Third Parties

We only share your information with third parties in the following circumstances:

• Infrastructure providers (for operating the Service): Stripe (payment processing), Supabase (database hosting), SendGrid (transactional emails), Vercel (application hosting), and Google Cloud Platform (audit microservice hosting). These providers only process the minimum data necessary to perform their services on our behalf. Google Ads and Meta Ads data may be processed by our infrastructure providers solely to generate your audit reports and power dashboard features — it is never shared with these providers for their own purposes.
• Legal requirements: If required by law, regulation, or legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, general account data may be transferred as part of that transaction. Google user data obtained through Google APIs and Meta Platform Data will only be transferred in such a transaction with your explicit prior consent, in compliance with the respective platform policies including the Google API Services User Data Policy.

We do not transfer or sell Google Ads or Meta Ads data to advertising platforms, data brokers, or any information resellers under any circumstances.

7. Data Retention

We retain your personal account information (email, profile) for as long as your account is active or as needed to provide the Service.

Google Ads data retention: Raw Google Ads API data (campaign metrics, keywords, search terms) is fetched and processed during audit generation and is not stored beyond what is needed to produce your report. The generated audit report — which contains our analysis and recommendations, not raw Google data — is retained for 90 days after generation unless you request earlier deletion. For Meta Ads data retention, see Section 5.4 above.

You may request deletion of your account and all associated data at any time by contacting us at support@adwhiz.ai. Upon account deletion, we will also delete any stored Google OAuth refresh tokens and Meta OAuth access tokens.

8. Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, secure API authentication, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies for advertising purposes. Analytics cookies, if used, are anonymized and help us understand how the Service is used so we can improve it.

10. Your Rights

Depending on your location, you may have the following rights:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request data portability.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@adwhiz.ai.

11. Government & Law Enforcement Requests

AdWhiz may disclose user data to government or law enforcement agencies only when we are legally compelled to do so — for example, in response to a valid court order, subpoena, or binding legal process in the applicable jurisdiction.

When permitted by law, we will notify affected users of any government request for their data before disclosure. We review each request to ensure it is legally valid and appropriately scoped, and we may challenge requests that we believe are overbroad or legally deficient.

We do not provide any government or law enforcement agency with direct or bulk access to user data. We do not participate in surveillance programs and do not build backdoors into our systems.

12. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at support@adwhiz.ai.