Privacy Policy for AdWIQ

Last Updated: December 3, 2025

Effective Date: December 3, 2025

1. Introduction

Welcome to AdWIQ ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered ad monitoring and alerting platform.

AdWIQ is an intelligent advertising monitoring platform that helps businesses:

• Monitor ad campaign performance with AI-powered analysis in real-time
• Receive instant alerts when AI detects critical issues or anomalies
• Get multi-channel notifications (WhatsApp, Email, SMS, Telegram, Slack)
• Generate automated AI-powered reports with insights and recommendations
• Connect Meta Ads accounts for comprehensive monitoring

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

• Full name
• Email address
• Password (encrypted and managed by Clerk)
• Profile information you choose to provide

Tenant Configuration:

• Ad account connections
• Notification preferences
• Report scheduling preferences

Ad Account Information:

• Connected advertising platform accounts (Meta Ads)
• Ad account IDs, names, and access credentials
• OAuth access tokens and refresh tokens (encrypted)
• Ad campaign data, metrics, and performance statistics
• Ad creative content and metadata
• Budget and spending information
• Audience insights and targeting parameters
• Report configuration preferences
• Schedule preferences for automated AI reports

Notification Channel Information:

• Email addresses for email notifications
• Phone numbers for WhatsApp and SMS notifications
• Telegram usernames or chat IDs
• Slack webhook URLs or workspace connections
• Notification delivery preferences

Contact Form Data:

• Name and email address
• Message content
• Timestamp of submission

2.2 Information We Collect Automatically

Usage Data:

• Login times and frequency
• Dashboard pages visited
• Features used
• API requests made
• Error logs and performance data

Device and Technical Information:

• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Screen resolution
• Cookies and similar tracking technologies

2.3 Information from Third Parties

Authentication Provider (Clerk):

• User ID and email address
• Profile information
• Authentication tokens
• Login history and session data

Database Provider (Prisma with Accelerate):

• Database connection logs
• Query performance metrics
• Data storage and management

Meta Marketing API (Facebook/Instagram Ads):

• Ad account information (name, ID, currency, timezone)
• Campaign performance metrics (spend, impressions, clicks, conversions, ROAS, etc.)
• Ad creative data and insights
• OAuth access tokens (with your authorization)
• Token expiration and refresh data

Communication Platforms:

• WhatsApp (Twilio): Message delivery status, phone number validity
• Telegram: Message delivery confirmation, chat IDs
• Slack: Webhook delivery status, workspace information
• Email Providers: Delivery status, bounce notifications
• SMS (Twilio): Message delivery status

3. How We Use Your Information

3.1 Primary Purposes

We use the collected information to:

AI-Powered Ad Monitoring:

• Analyze your ad campaigns using artificial intelligence
• Detect issues, anomalies, and performance problems in real-time
• Identify optimization opportunities
• Generate actionable insights and recommendations
• Monitor campaign metrics continuously (for Growth and Scale plans)

Automated Alerts:

• Send instant notifications when AI detects critical issues
• Alert you to budget overspending or underspending
• Notify you of significant ROAS, CPC, or conversion changes
• Warn about ad disapprovals or policy violations
• Deliver alerts through your preferred channels (WhatsApp, Email, SMS, Telegram, Slack)

Performance Reports:

• Generate automated AI-powered reports (daily, weekly, or monthly)
• Provide campaign performance summaries
• Offer AI-driven recommendations for optimization
• Track historical performance trends
• Compare metrics across time periods

Service Improvement:

• Enhance AI models and detection algorithms
• Improve platform features and functionality
• Analyze usage patterns to optimize user experience
• Debug technical issues and optimize performance

Account Management:

• Create and maintain your account
• Authenticate your identity
• Provide customer support
• Communicate service updates and security alerts

Legal and Security:

• Prevent fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Protect user safety and security

3.2 Marketing Communications

We may use your email address to send:

• Service announcements and feature updates
• Educational content about ad optimization
• Promotional offers (you can opt-out anytime)

You can unsubscribe from marketing emails by clicking the "unsubscribe" link or contacting us at rudhamoy@gmail.com.

4. Data Sharing and Disclosure

4.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

Clerk (Authentication):

• Purpose: Secure user authentication and session management
• Data shared: Email, name, user ID
• Privacy Policy: https://clerk.com/privacy

Prisma with Accelerate (Database Hosting):

• Purpose: Secure data storage and database management
• Data shared: All application data
• Privacy Policy: https://www.prisma.io/privacy

Meta Marketing API (Ad Platform Integration):

• Purpose: Fetch advertising metrics, campaign data, and lead information
• Data shared: OAuth access tokens, ad account IDs
• Data received: Campaign metrics, ad performance data, lead data, conversion events
• Privacy Policy: https://www.facebook.com/privacy/policy
• Your Control: You authorize access through OAuth and can revoke at any time

Twilio (WhatsApp and SMS):

• Purpose: Send WhatsApp and SMS notifications
• Data shared: Recipient phone numbers, message content, alert notifications
• Privacy Policy: https://www.twilio.com/legal/privacy

Telegram Bot API:

• Purpose: Send Telegram notifications
• Data shared: Chat IDs, message content, alert notifications
• Privacy Policy: https://telegram.org/privacy

Slack API:

• Purpose: Send Slack workspace notifications
• Data shared: Webhook URLs, message content, alert notifications
• Privacy Policy: https://slack.com/privacy-policy

Email Service Providers:

• Purpose: Send email notifications and reports
• Data shared: Recipient email addresses, report content, alert notifications
• Privacy Policy: Varies by provider

Vercel (Hosting):

• Purpose: Application hosting and deployment
• Data shared: Server logs, performance metrics
• Privacy Policy: https://vercel.com/legal/privacy-policy

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or subpoenas
• Government requests
• Legal proceedings
• Protection of our rights or property
• Prevention of fraud or abuse

4.4 Business Transfers

If AdWIQ is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication via Clerk with modern security protocols
• OAuth token encryption and secure storage
• Automated token refresh and expiration handling
• API key authentication and secure management
• Webhook signature verification
• Regular security updates

Access Controls:

• Multi-tenant data isolation (tenant-based access control)
• Role-based access control
• Session management and automatic timeout
• Password hashing and secure credential storage
• Database-level security with Prisma

Operational Security:

• Regular security audits
• Intrusion detection and monitoring
• Automated backups with encryption
• Disaster recovery procedures

5.2 Your Responsibility

You are responsible for:

• Keeping your password secure
• Not sharing account credentials
• Logging out from shared devices
• Monitoring account activity
• Reporting suspicious activity to rudhamoy@gmail.com

5.3 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide information about:

• What happened
• What information was affected
• Steps we're taking to address the breach
• Steps you should take to protect yourself

6. Data Retention

6.1 Retention Periods by Plan

Free Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 7 days
• AI analysis history: 7 days
• Usage logs: 30 days

Starter Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 30 days
• AI analysis history: 30 days
• Usage logs: 30 days

Growth Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 90 days
• AI analysis history: 90 days
• Usage logs: 90 days

Pro Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 365 days (1 year)
• AI analysis history: 365 days
• Usage logs: 365 days

All Plans:

• OAuth tokens: Retained until you disconnect ad account or token expires
• Backup data: Retained for 30 days
• Deleted accounts: Purged within 30 days (backups within 60 days)

6.2 Data Deletion

You can request deletion of your data at any time by:

• Disconnecting ad accounts (also revokes OAuth tokens)
• Deleting ad report configurations
• Deleting your entire account
• Contacting us at rudhamoy@gmail.com

Note: Disconnecting an ad account will:

• Delete stored OAuth tokens from our database
• Remove all associated report configurations
• Stop all scheduled reports and AI monitoring
• Delete ad performance data according to your plan's retention period

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access your personal information
• Export your ad performance data and AI reports
• Receive a copy of your data in machine-readable format

7.2 Correction and Deletion

You have the right to:

• Update your account information
• Correct inaccurate data
• Delete reports and configurations
• Delete your entire account

7.3 Opt-Out Rights

You have the right to:

• Opt-out of marketing emails (unsubscribe link)
• Disable AI monitoring for specific ad accounts
• Remove notification channels
• Disconnect advertising accounts
• Disable or delete automated reports

7.4 Do Not Track

Our Service does not respond to Do Not Track (DNT) signals because there is no industry standard for DNT compliance.

8. Children's Privacy

AdWIQ is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at rudhamoy@gmail.com. We will delete such information from our systems within 30 days.

9. International Data Transfers

9.1 Data Location

Your information may be transferred to and maintained on servers located outside of your country of residence, including:

• United States (Vercel hosting)
• Europe (Prisma database)

By using our Service, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules.

9.2 Compliance

We ensure appropriate safeguards are in place for international transfers:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Service provider certifications
• Contractual obligations with data processors

10. Cookies and Tracking Technologies

10.1 Cookies We Use

Essential Cookies:

• Authentication (Clerk session)
• Security tokens
• User preferences and settings

Analytics Cookies:

• Usage tracking and analytics
• Performance monitoring
• Error logging and debugging

10.2 Managing Cookies

You can control cookies through:

• Browser settings (block/delete cookies)
• Opting out of analytics
• Using privacy extensions

Note: Disabling essential cookies may prevent you from using certain features of AdWIQ.

11. AI and Automated Processing

11.1 How We Use AI

AdWIQ uses artificial intelligence to:

• Analyze ad campaign performance automatically
• Detect anomalies and performance issues
• Generate insights and recommendations
• Determine alert severity and urgency
• Predict potential problems before they impact your campaigns

11.2 Your Control

You maintain full control over your ad accounts and campaigns:

• AI provides recommendations only - you make the final decisions
• You can disable AI monitoring at any time
• You can adjust alert preferences and thresholds (Growth and Scale plans)
• You can override or ignore any AI recommendation

11.3 AI Providers

Depending on your plan, we may use different AI providers:

• Free Plan: Google Gemini only
• Starter Plan: Google Gemini or OpenAI GPT-4
• Growth Plan: Google Gemini, OpenAI GPT-4, or Anthropic Claude
• Scale Plan: All providers including Ollama Mistral for privacy-focused users

12. Third-Party Links

Our Service may contain links to third-party websites, including:

• Documentation resources
• Partner services
• Ad platform dashboards

We are not responsible for the privacy practices of third-party websites. Please review their privacy policies before providing any information.

13. Business Users and End Users

13.1 For Business Users (Our Customers)

You are responsible for:

• Complying with applicable privacy laws (GDPR, CCPA, etc.)
• Obtaining proper authorization for ad account access
• Informing team members about data collection
• Managing notification recipient permissions

13.2 Meta Ads Integration - Detailed Data Handling

OAuth Authorization Process:

• You explicitly authorize AdWIQ to access your Meta Ads account through Facebook's OAuth 2.0 flow
• You are redirected to Facebook's official authorization page (facebook.com/dialog/oauth)
• We never see or store your Facebook password
• Access tokens are encrypted and stored securely in our database
• You can revoke access anytime through your Facebook settings or by disconnecting your ad account in AdWIQ

Permissions We Request:

• ads_read: Read-only access to view your ad campaign performance data
• ads_management: Access to manage ads (for future features like auto-pause campaigns)

Data We Retrieve From Meta Marketing API:

Ad Account Information:

• Account ID, name, currency, timezone
• Account status and verification status
• Business information (if applicable)
• Account spending limits and budget information

Campaign Data:

• Campaign IDs, names, objectives, status (active/paused/archived)
• Campaign budget, bid strategy, optimization goals
• Campaign start/end dates
• Campaign delivery insights

Ad Set Data:

• Ad set IDs, names, status
• Targeting parameters (age, gender, location, interests)
• Budget allocation and bid amounts
• Placement settings (Facebook, Instagram, Audience Network)
• Schedule and dayparting settings

Ad Creative Data:

• Ad IDs, names, status
• Ad copy and headlines
• Image/video URLs (for preview purposes only)
• Call-to-action buttons
• Destination URLs

Performance Metrics (Retrieved in Real-Time):

• Impressions, reach, frequency
• Clicks, link clicks, unique clicks
• Spend, cost per result
• Conversions, conversion value
• ROAS (Return on Ad Spend)
• CPC (Cost Per Click), CPM (Cost Per Mille), CPA (Cost Per Action)
• CTR (Click-Through Rate), conversion rate
• Video views, engagement metrics
• Breakdown by age, gender, device, placement

How We Use This Data:

1. AI-Powered Analysis:

   • Our AI analyzes campaign metrics to detect performance anomalies
   • We compare current performance against historical trends
   • We identify underperforming or overperforming campaigns
   • We detect sudden changes in ROAS, CPC, or conversion rates

2. Alert Generation:

   • When AI detects critical issues (e.g., CPA spike, budget overspend), we send instant alerts
   • Alerts include the specific metric that triggered the alert and AI recommendations
   • You receive alerts only through channels you've configured (WhatsApp, Email, SMS, Telegram, Slack)

3. Automated Reports:

   • We generate scheduled reports (daily/weekly/monthly) with AI insights
   • Reports summarize campaign performance across selected timeframes
   • Reports include actionable recommendations from our AI

4. Data Storage and Retention:

   • Ad performance data is cached temporarily in our database for analysis
   • Data retention varies by plan: Free (7 days), Starter (30 days), Growth (90 days), Scale (365 days)
   • When you disconnect your ad account, we immediately stop fetching new data
   • Stored historical data is deleted according to your plan's retention period

5. Data Access Controls:

   • Your advertising data is isolated by tenant (multi-tenant architecture)
   • Only you can access your ad performance data within AdWIQ
   • Our AI analysis runs server-side with strict access controls
   • No other AdWIQ users can see your advertising data

What We DO NOT Do With Your Meta Ads Data:

• ❌ We do NOT sell your advertising data to third parties
• ❌ We do NOT share your metrics with competitors or other AdWIQ users
• ❌ We do NOT use your data to train AI models that benefit other customers
• ❌ We do NOT access your personal Facebook profile or posts
• ❌ We do NOT access data from your Facebook pages (unless explicitly connected)
• ❌ We do NOT modify your ads or campaigns without your explicit action
• ❌ We do NOT access billing information or payment methods from Meta

Data Refresh and API Calls:

• We fetch ad data at intervals based on your plan (Free: manual, Starter: hourly, Growth/Scale: every 15-60 minutes)
• Each API call retrieves only the metrics you've configured in your reports
• We use Facebook's Graph API v24.0 with read-only access by default
• API calls are logged for debugging and rate limit management only

Compliance With Meta's Platform Policies:

• We comply with Meta's Platform Terms: https://developers.facebook.com/terms
• We adhere to Meta's Business Tools Terms: https://www.facebook.com/legal/technology_terms
• We follow Meta's Marketing API Rate Limits
• We implement proper error handling and retry logic
• We respect Meta's data use policies and advertising standards

Your Control Over Meta Ads Data:

• View Connected Accounts: See all connected Meta ad accounts in your dashboard
• Disconnect Anytime: Immediately stop data access by disconnecting your account
• Revoke OAuth: Revoke AdWIQ's access through Facebook Business Settings
• Delete Historical Data: Request deletion of stored ad performance data
• Control Report Frequency: Adjust how often we fetch and analyze your data
• Customize Alerts: Choose which metrics trigger alerts and notification channels

Third-Party Platform Policies: When you connect an advertising account, you also agree to that platform's terms:

• Meta Ads Platform Terms: https://www.facebook.com/legal/terms
• Meta Business Tools Terms: https://www.facebook.com/legal/technology_terms
• Meta Platform Policy: https://developers.facebook.com/policy
• Google Ads (coming soon): https://policies.google.com/terms

14. Compliance with Privacy Laws

14.1 GDPR (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

Legal Basis for Processing:

• Consent: You agreed to our Privacy Policy
• Contract: Necessary to provide the Service
• Legitimate Interests: Improve and secure the Service

Your GDPR Rights:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with supervisory authority

Contact for GDPR Requests: Email: rudhamoy@gmail.com

14.2 CCPA (California Users)

If you are a California resident, you have rights under CCPA:

Information We Collect: See Section 2 for categories of information collected

Your CCPA Rights:

• Right to know what information we collect
• Right to delete your information
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination

How to Exercise Rights: Email: rudhamoy@gmail.com or visit your account settings

Verification: We may ask for verification (email confirmation) before processing requests.

14.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. Contact us if you have questions about compliance in your region.

15. Changes to This Privacy Policy

15.1 Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Notification of Material Changes:

• Email notification to registered users
• Dashboard notification
• 30 days notice before changes take effect

15.2 Continued Use

Your continued use of the Service after changes indicates acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy:

Email: rudhamoy@gmail.com

Support: rudhamoy@gmail.com

Privacy Requests: rudhamoy@gmail.com

Security Incidents: rudhamoy@gmail.com

Response Time: We will respond to privacy requests within 30 days.

17. Additional Terms

17.1 Accuracy

You are responsible for ensuring the accuracy of information you provide. Please keep your account information up to date.

17.2 Security Incidents

If you suspect unauthorized access to your account, please contact us immediately at rudhamoy@gmail.com.

17.3 Automated Decision-Making

We use AI to analyze ad performance and generate recommendations, but we do not use automated decision-making for purposes that produce legal effects concerning you. All AI recommendations are advisory only.

17.4 Sensitive Information

Please do not submit sensitive personal information (health data, financial data, government IDs) unless absolutely necessary for the Service.

18. Consent

By using AdWIQ, you consent to:

• Collection of information as described in this Privacy Policy
• Processing of information for the purposes stated
• Use of AI to analyze ad performance and generate insights
• Transfer of information as described
• Use of cookies and tracking technologies

You can withdraw consent at any time by deleting your account or contacting us at rudhamoy@gmail.com.

19. Definitions

Personal Information: Information that identifies, relates to, or could reasonably be linked to you.

Service: The AdWIQ website, dashboard, and API.

User/You: The person or entity using our Service.

Ad Account: Your connected advertising platform account (e.g., Meta Ads).

AI Analysis: Automated analysis of ad performance using artificial intelligence.

Alert: Instant notification sent when AI detects a critical issue.

Report: Scheduled summary of ad performance with AI insights.

20. Dispute Resolution

Any disputes regarding this Privacy Policy will be resolved through:

1. Good faith negotiation
2. Mediation (if negotiation fails)
3. Arbitration or small claims court

21. Severability

If any provision of this Privacy Policy is found to be unenforceable, the remaining provisions will remain in full force and effect.

This Privacy Policy is effective as of December 3, 2025.

Version: 2.0

Quick Reference

Questions? Contact us at rudhamoy@gmail.com

Your Privacy Matters. We are committed to protecting your data and being transparent about our practices. Our AI-powered monitoring helps you optimize ad performance while maintaining the highest standards of data privacy and security.