Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. When you sign in with Google, we receive your name, email address, and profile image from Google. We store these along with an account identifier we generate.
• Content you upload or generate.Product photos, prompts, reference images, and any images, clips, or ads produced through the Service. We refer to this as "Your Content" in our Terms.
• Billing information.Payments are processed by Stripe. We don't see or store your full card number; we receive a customer identifier, the last four digits, card brand, billing country, and the status of your subscription and invoices.
• Usage data. Records of generation requests, credits spent, model and provider used, request and response metadata (sizes, durations, success/failure), and timestamps. This is what powers your usage history and our internal metering.
• Device and log data. IP address, browser and operating-system info, referring URL, and pages viewed. Used for security, abuse prevention, and debugging.
• Cookies and similar technologies. A session cookie set by our authentication provider keeps you signed in. We use product analytics (PostHog) to understand how the Service is used; this sets first-party identifiers in your browser.
• Communications. If you email us or fill in a support form, we keep the contents of those messages.

2. How we use information

We use the information above to:

• Provide, operate, and secure the Service.
• Generate the product images and campaign assets you request, including by sending the necessary inputs to third-party AI providers (see Section 4).
• Meter and bill credit usage, manage subscriptions, send receipts and billing notices, and prevent fraud.
• Respond to support requests, troubleshoot issues, and communicate service updates and security notices.
• Improve the Service — including diagnosing performance issues and prioritizing roadmap work — using aggregated and de-identified usage signals.
• Comply with legal obligations and enforce our Terms.

We don't use your uploaded photos or generated outputs to train foundation models— ours or any third party's. Generations run as inference-only requests against the providers in Section 4.

3. Legal bases (EEA / UK users)

If you're in the European Economic Area or United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to provide the Service you signed up for and process your payments.
• Legitimate interests — for security, abuse prevention, debugging, and improving the Service, balanced against your rights.
• Consent — for non-essential analytics cookies, where required.
• Legal obligation — to comply with tax, accounting, and other applicable laws.

4. Third-party AI and infrastructure providers

To operate the Service we share the necessary information with the following sub-processors. Each acts on our instructions and is bound by their own terms.

• Convex — application backend, database, and file storage (R2). Hosts your account, projects, generated outputs, and usage records.
• Cloudflare — DNS, CDN, and DDoS protection.
• Vercel — hosting for the web application.
• Better Auth (Google OAuth) — authentication and session management.
• Stripe — payment processing, subscription management, and the Customer Portal.
• OpenRouter — routes prompts and reference images to LLM and image-generation models (including models from Anthropic, Google, and Moonshot AI).
• fal.ai — runs background-removal models.
• PostHog — product analytics and error tracking.

These providers may process data outside your country, including in the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

5. When we share information

We don't sell your personal information. We share it only:

• With the sub-processors above, as needed to operate the Service.
• To comply with applicable law, lawful requests from public authorities, or to protect the rights, property, or safety of Adkick, our users, or others.
• In connection with a merger, acquisition, financing, or sale of assets, in which case we'll provide notice before your information is transferred and becomes subject to a different privacy policy.
• With your consent, or at your direction.

6. Retention

We keep account information, Your Content, and usage records for as long as your account is active. If you delete your account, we delete or de-identify your account information and Your Content within 30 days, except where we're required to retain records (for example, billing records for tax purposes). Aggregated, de-identified usage data may be retained indefinitely.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated content.
• Export a copy of Your Content.
• Object to or restrict certain processing, or withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority (EEA / UK users).

To exercise any of these rights, email privacy@adkick.ai. We may ask you to verify your identity before acting on a request.

8. Security

We use industry-standard safeguards including TLS in transit, encryption at rest with our infrastructure providers, scoped access controls, and audit logging. No system is perfectly secure; if we become aware of a breach affecting your information, we'll notify you and any required regulators as the law requires.

9. Children

The Service isn't directed to children under 18 and we don't knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.

10. International users

Adkick is operated from the United States. By using the Service you understand your information will be processed in the United States and other countries where our sub-processors operate, which may have different data-protection laws than your country of residence.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we'll notify you (e.g., by email or in-product notice) before they take effect. The "Last updated" date at the top tells you when the current version took effect.

12. Contact

Questions about this Policy or your information? Reach us at privacy@adkick.ai.