Privacy Policy
Last updated: 2026-09-09
Data we collect
We collect information you provide when creating an account or generating ads, such as your email address, prompts, ad draft content, generated images, and campaign and targeting settings. We use authentication cookies to keep you signed in. Vercel Analytics collects page-view analytics when you visit AdRoute. Our server logs also record operational events and errors, which may include your AdRoute user ID when needed to operate and troubleshoot the service.
Meta data
When you connect Meta through OAuth, we receive and store Meta authorization data, including an access token, token type and expiration details when supplied by Meta, and your Meta user ID. We use that connection to authenticate with Meta and retrieve the Facebook Pages and Meta ad accounts you can access. When you choose to publish, we process the selected Page and ad account, campaign structure, budget, creative content and media, destination URL, and targeting settings to create campaigns, ad sets, creatives, and ads in Meta. Campaigns, ad sets, and ads are initially created in a paused state and do not begin delivery automatically.
Why we collect data
We use your data to provide the AdRoute service, generate and store drafts, personalize your experience, publish the campaigns you request, troubleshoot failures, improve reliability and product performance, and provide customer support.
Sharing and processors
We use Supabase for authentication and stored account and draft data, OpenAI to process prompts and ad content and generate copy and images, and Vercel Analytics for page-view analytics. We communicate with Meta when you connect or reauthorize your account, when we retrieve the Pages and ad accounts available to you, and when you explicitly publish. Publishing sends the selected campaign, ad set, creative, budget, and targeting data to Meta. Campaigns, ad sets, and ads created through this flow are initially paused and do not begin delivery automatically. AdRoute does not control how these providers process data within their own services.
Retention
We retain personal data only as long as needed to provide the service, meet legal obligations, and resolve disputes. You can request deletion at any time, and we will remove eligible data within a reasonable timeframe.
Security
We use technical access controls intended to limit stored account, draft, and Meta connection data to the authenticated user. No method of storage or transmission is completely secure.
Your choices and rights
You can request access to, correction of, or deletion of your personal data by contacting us. We will respond within a reasonable timeframe.
Contact
Questions about privacy? Email us at contact@adrouteai.com.