Privacy Policy

1. Data Controller

Adcentra is the data controller responsible for your personal data collected through the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Information: When you create an account using Google Sign-In, we receive your name, email address, and profile picture from Google.
• Website URLs: URLs you submit for brand or product analysis.
• Brand Assets: Logos, images, and other brand materials you upload.
• Creative Preferences: Your preferences, settings, and customization choices for ad generation.
• Communications: Information you provide when you contact us for support or feedback.
• Payment Information: If you make purchases, payment details are processed securely by our third-party payment processors. We do not store complete payment card information.

2.2 Information Collected Automatically

When you access the Service, we automatically collect certain information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Information about how you interact with the Service, including pages visited, features used, session duration, and clickstream data.
• IP Address: Your Internet Protocol (IP) address, which may indicate your approximate geographic location.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activities. See Section 11 (Cookies) for more details.

2.3 Information from Third Parties

• Google Authentication: When you sign in with Google, we receive basic profile information as authorized by you.
• Website Analysis: When you submit a URL for analysis, we collect publicly available information from that website.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• To create and manage your account
• To analyze brand identities from submitted URLs
• To generate customized advertising content using AI
• To store and manage your creative sessions and assets
• To process transactions and payments

3.2 Service Improvement

• To analyze usage patterns and improve the Service
• To develop new features and functionalities
• To conduct research and analytics

3.3 Communication

• To respond to your inquiries and support requests
• To send service-related notifications and updates
• To send marketing communications (with your consent where required)

3.4 Security and Compliance

• To protect against unauthorized access, fraud, and abuse
• To enforce our Terms of Service
• To comply with legal obligations

4. AI Training and Data Processing

Avocad uses artificial intelligence to provide its services. We want to be transparent about how AI interacts with your data:

4.1 AI Content Generation

When you use our Service, your inputs (URLs, brand assets, preferences) are processed by AI models to generate advertising content. This processing is essential to provide the Service.

4.2 AI Model Improvement

We may use anonymized and aggregated data to improve our AI models. This data is stripped of personally identifiable information and cannot be traced back to individual users.

We do NOT use:

• Your identifiable User Content to train models available to other users
• Your personal information for AI training purposes
• Your brand assets in training data for competitors

4.3 Data Minimization

We only process the minimum amount of data necessary to provide and improve our services. AI processing is conducted with appropriate technical safeguards.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers who assist us in operating the Service, including:

• Cloud hosting and infrastructure providers
• Authentication service providers
• Analytics providers
• Payment processors
• AI model providers

These providers are contractually obligated to protect your data and may only use it to provide services to us.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders)
• Government requests
• Enforcement of our Terms of Service
• Protection of our rights, privacy, safety, or property
• Emergency situations involving potential threats to safety

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information in other circumstances with your explicit consent.

6. Third-Party Services

Our Service uses the following third-party services that may collect and process your data:

6.1 Google/Firebase Authentication

We use Google Sign-In via Firebase for user authentication. When you sign in with Google, Google's privacy policy applies to the data they collect. View Google's Privacy Policy

6.2 Cloud Storage

Your uploaded assets and generated content are stored on Google Cloud Platform. View Google Cloud's Privacy Policy

6.3 AI Service Providers

We use third-party AI models for content generation. Input data sent to these services is processed in accordance with their privacy policies and our data processing agreements.

6.4 Google Analytics

We use Google Analytics 4 (via Firebase Analytics) to understand how visitors interact with our Service. Google Analytics collects information such as:

• Pages visited and time spent on each page
• Features used and actions taken
• Device type, browser, and operating system
• Approximate geographic location (based on IP address)
• Referral source (how you arrived at our site)

This information is anonymized and aggregated to help us improve our Service. Google Analytics uses cookies to collect this data. You can opt out of Google Analytics by declining cookies when prompted or by using the Google Analytics Opt-out Browser Add-on.

View Google's Privacy Policy

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
• Secure Authentication: We use OAuth 2.0 for secure authentication via Google Sign-In.
• Regular Audits: We conduct periodic security assessments and audits.
• Incident Response: We have procedures in place to detect, respond to, and recover from security incidents.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your information for different periods depending on the type of data:

• Account Information: Retained for as long as your account is active and for a reasonable period afterward for legal and business purposes.
• Creative Sessions and Assets: Retained until you delete them or close your account, unless required for legal compliance.
• Usage and Analytics Data: Typically retained for up to 26 months.
• Billing Information: Retained as required by accounting and tax regulations (typically 7 years).
• Communication Records: Retained for customer service and legal purposes (typically 3 years).

Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required for legal, accounting, or legitimate business purposes.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including India and the United States where our service providers operate.

When transferring data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by relevant data protection authorities
• Data processing agreements with our service providers
• Certification mechanisms where applicable

10. Your Rights

10.1 General Rights

Regardless of your location, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications

10.2 EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights:

• Right of Access: Obtain confirmation and a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with a supervisory authority

10.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out: Opt out of the sale or sharing of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

10.4 Exercising Your Rights

To exercise any of these rights, please contact us at connect@adcentra.ai. We will respond to your request within the timeframes required by applicable law (typically 30 days).

We may need to verify your identity before processing your request. If we cannot verify your identity, we may not be able to fulfill your request.

11. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

11.1 Essential Cookies

Required for the Service to function properly, including authentication, security, and session management. You cannot opt out of these cookies.

11.2 Analytics Cookies

We use Google Analytics (via Firebase Analytics) to understand how visitors interact with the Service. These cookies are only set after you provide consent through our cookie banner. You can change your cookie preferences at any time through your browser settings.

Analytics cookies we use:

• _ga: Used to distinguish users (expires after 2 years)
• _ga_*: Used to persist session state (expires after 2 years)

11.3 Functional Cookies

Remember your preferences and settings to provide a more personalized experience.

11.4 Managing Cookies

Most browsers allow you to control cookies through their settings. Please note that disabling certain cookies may affect the functionality of the Service.

12. Children's Privacy

The Service is not directed to children under 16 years of age, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at connect@adcentra.ai.

13. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no common understanding of how to interpret DNT signals, the Service does not currently respond to browser DNT signals.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Service and updating the "Last Updated" date. We may also send you a notification via email for significant changes.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU residents, you may also contact your local data protection authority if you have concerns about our data processing practices.