Privacy Policy

1. Information We Collect

We collect information to deliver predictive diagnostics, facilitate account authentication, process subscription billings, and optimize platform throughput:

A. Information You Provide Directly

• Account Credentials: Full name, business email address, company or workspace name, and authentication records managed securely.
• User Creative Assets: Short-form video files (MP4, MOV), thumbnail frames, audio tracks, and written ad scripts uploaded into the Creative Lab workspace.
• Configuration Parameters: Selected target industry verticals, audience age/gender parameters, and custom buyer persona traits configured in the Audience Archetypes suite.
• Support & Communications: Inquiries, diagnostic bug reports, or emails submitted to our customer care team.

B. Information Collected Automatically

• Telemetry & Usage Data: Number of simulation credits consumed, diagnostic run timestamps, model cascade execution latencies, and device metadata.
• Log & Connection Telemetry: IP addresses, browser agent headers, access timestamps, and edge crash reports.

C. Billing & Payment Information

AdFlame does not process, store, or transmit raw credit card or bank details on our own servers. All payment transactions, subscription checkouts, and invoicing are handled securely through our PCI-DSS Level 1 compliant payment processor. We retain only tokenized customer identifiers, subscription tier status, and billing cycle renewal dates.

2. How We Use Your Information

We process collected data under the following legitimate business purposes:

• Executing Diagnostic Simulations: Parsing frames, generating synthetic viewer retention curves, computing Visual Saliency, auditing Safe-Zone clearance, and calculating Predicted CTR.
• Workspace Management: Maintaining multi-tenant team accounts, tracking credit consumption, and verifying subscription tier permissions.
• System Reliability & Security: Mitigating denial-of-service attempts, preventing fraudulent trial exploitation, and enforcing API rate limits.
• Billing & Invoicing: Facilitating automated recurring payments and generating tax compliance receipts.
• Transactional Notifications: Sending password reset links, credit replenishment notifications, and simulation completion alerts.

3. Service Providers & Third-Party Infrastructure

We do not sell, rent, or trade your personal information or uploaded video assets. We share data strictly with vetted, enterprise-grade third-party infrastructure providers necessary to operate our SaaS platform:

• Cloud Machine Learning & Inference Providers: Transmission of ad videos, transcripts and analysis prompts to AI model providers to generate your diagnostics, under paid business terms that exclude customer content from model training.
• Cloud Hosting & Database Infrastructure: Secure, tenant-isolated relational database storage, authentication services, and encrypted cloud storage for your workspace assets and campaign test records.
• Payment & Billing Processors: PCI-DSS Level 1 certified payment processing services that securely manage credit card billing, subscriptions, and recurring invoices without AdFlame storing raw card numbers.
• Edge Routing & Content Delivery: Global content delivery networks (CDNs) and application hosting providers that manage network traffic, edge caching, and firewall protections.
• Website Analytics: Vercel Web Analytics counts page views, referring sites, approximate country and device type without cookies and without identifying individual visitors.
• Advertising Measurement: If you allow it (see Section 7), Google Ads cookies record when a visit that started from one of our ads leads to a sign-up or purchase, so we can measure and improve our advertising.
• Bot & Abuse Protection: A security check (Cloudflare Turnstile) runs on sign-up and sign-in forms to block automated abuse. Together with your sign-up email and IP address, it helps us enforce one free trial per person and network.

4. Data Retention and Creative Asset Lifecycle

We retain personal data and media assets only as long as necessary to provide your active workspace:

• Raw Video Storage: Uploaded video files (MP4/MOV) remain stored in your encrypted workspace storage bucket to power the diagnostic video player. You can permanently delete any video asset at any time directly through the Projects tab, triggering permanent deletion across storage buckets.
• Diagnostic Test Reports: Second-by-second retention curves, script remediations, and benchmark scores remain associated with your campaign ID until you delete the project or close your account.
• Account Deletion: Upon receiving an account termination request, all associated workspace data, billing references, and creative records are permanently purged from active databases within 30 days.

5. Global Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction (including the European Economic Area, the United Kingdom, and the State of California), you possess statutory privacy rights:

• Right of Access & Portability: You may request a copy of all personal telemetry data and diagnostic records stored about you in a machine-readable format.
• Right to Rectification: You can update account data directly via your Workspace Settings or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request complete erasure of your personal data and creative files from our systems.
• Right to Restrict or Object: You can restrict or object to certain types of processing, including marketing communications.
• California "Do Not Sell or Share" Statement: AdFlame does not sell or share personal consumer information for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA/CPRA).

To exercise any statutory data right, please contact us at privacyadflame.ai.

6. Security Safeguards

We implement industry-standard administrative, physical, and technical controls to safeguard your proprietary ad creatives:

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory modifications. If material changes are made that alter your rights, we will notify you by updating the "Effective Date" at the top of this page and providing notification in your dashboard or via your account email.

9. Contact Our Data Protection Team

If you have questions, inquiries, or complaints regarding this Privacy Policy or our creative asset handling practices, please contact our team: