Privacy Policy

OVS ("we," "us," or "our") operates AdControlCenter (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information: When you sign up, we collect your name, email address, and authentication credentials through our authentication provider (Clerk).

Business Information: You may provide your business name, website URL, industry, and advertising goals to help us tailor campaign recommendations.

Ad Platform Data: When you connect advertising accounts (Google Ads, Meta, TikTok, LinkedIn, X, Reddit), we access campaign data, performance metrics, and account information through official platform APIs using OAuth authorization. We store encrypted access tokens to maintain these connections.

Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and session duration.

2. How We Use Your Information

• To provide, operate, and maintain the Service
• To manage your ad campaigns across connected platforms
• To generate AI-powered campaign recommendations and optimizations
• To send you notifications about your campaigns, account status, and important alerts
• To process transactions and manage your subscription
• To improve and develop the Service
• To comply with legal obligations

3. How We Protect Your Information

We take security seriously:

• All ad platform tokens are encrypted at rest using AES-256 encryption
• Data is transmitted over HTTPS with strict transport security
• We use rate limiting and audit logging to detect and prevent unauthorized access
• Database access is restricted and monitored

4. Third-Party Services

We use the following third-party services to operate the Service:

• Clerk — Authentication and user management
• Supabase — Database hosting and file storage
• Vercel — Application hosting
• Resend — Transactional email delivery
• LemonSqueezy / Stripe — Payment processing
• Google Analytics — Usage analytics
• AI Providers (Anthropic, OpenAI, Google) — Campaign analysis and recommendations

Each of these services has their own privacy policy governing how they handle data.

5. Facebook / Meta Data

When you connect a Meta (Facebook/Instagram) advertising account, we access the following data through the Meta Marketing API:

• Ad account information (name, ID, currency, status)
• Campaign, ad set, and ad data (names, statuses, budgets, targeting)
• Performance metrics (impressions, clicks, spend, conversions)
• Facebook Page information (name, ID) for ad creation

We use this data solely to display, manage, and optimize your advertising campaigns within our Service. We do not use Meta data for any purpose unrelated to providing the Service to you.

Data Deletion: You can request deletion of all data obtained from Meta by disconnecting your Meta account in Settings, or by contacting us. Upon disconnection or deletion request, we revoke all Meta access tokens and delete associated campaign data within 30 days. Meta can also initiate data deletion via our callback endpoint, and we will process such requests immediately.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

• With third-party service providers listed above, solely to operate the Service
• When required by law, regulation, or legal process
• To protect the rights, property, or safety of our users or the public

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

8. Your Rights

You have the right to:

• Access and review the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect any ad platform at any time, which revokes our access to that platform's data

9. Cookies

We use only essential cookies required for authentication and session management. We do not use third-party tracking cookies.

10. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at support@adcontrolcenter.com.