Privacy Policy for AdWIQ

Last Updated: December 3, 2025

Effective Date: December 3, 2025

1. Introduction

Welcome to AdWIQ ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered ad monitoring and alerting platform.

AdWIQ is an intelligent advertising monitoring platform that helps businesses:

• Monitor ad campaign performance with AI-powered analysis in real-time
• Receive instant alerts when AI detects critical issues or anomalies
• Get multi-channel notifications (WhatsApp, Email, SMS, Telegram, Slack)
• Track leads and conversion events from ad campaigns
• Generate automated AI-powered reports with insights and recommendations
• Discover and monitor events from website tracking
• Connect Meta Ads accounts for comprehensive monitoring

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

• Full name
• Email address
• Password (encrypted and managed by Clerk)
• Profile information you choose to provide

Project Information:

• Project names and descriptions
• Ad account connections
• Notification preferences

Ad Account Information:

• Connected advertising platform accounts (Meta Ads)
• Ad account IDs, names, and access credentials
• OAuth access tokens and refresh tokens (encrypted)
• Ad campaign data, metrics, and performance statistics
• Ad creative content and metadata
• Budget and spending information
• Lead data and conversion events
• Audience insights and targeting parameters
• Report configuration preferences
• Schedule preferences for automated AI reports

Notification Channel Information:

• Email addresses for email notifications
• Phone numbers for WhatsApp and SMS notifications
• Telegram usernames or chat IDs
• Slack webhook URLs or workspace connections
• Notification delivery preferences

Contact Form Data:

• Name and email address
• Message content
• Timestamp of submission

2.2 Information We Collect Automatically

Website Tracking Data (if you enable our tracking snippet):

• Website visitor behavior and events
• Page views and navigation patterns
• Conversion events and goal completions
• Device and browser information
• IP addresses (anonymized where possible)
• UTM parameters and campaign attribution

Usage Data:

• Login times and frequency
• Dashboard pages visited
• Features used
• API requests made
• Error logs and performance data

Device and Technical Information:

• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Screen resolution
• Cookies and similar tracking technologies

2.3 Information from Third Parties

Authentication Provider (Clerk):

• User ID and email address
• Profile information
• Authentication tokens
• Login history and session data

Database Provider (Prisma with Accelerate):

• Database connection logs
• Query performance metrics
• Data storage and management

Meta Marketing API (Facebook/Instagram Ads):

• Ad account information (name, ID, currency, timezone)
• Campaign performance metrics (spend, impressions, clicks, conversions, ROAS, etc.)
• Ad creative data and insights
• Lead data from ad campaigns
• Conversion events and tracking data
• OAuth access tokens (with your authorization)
• Token expiration and refresh data

Communication Platforms:

• WhatsApp (Twilio): Message delivery status, phone number validity
• Telegram: Message delivery confirmation, chat IDs
• Slack: Webhook delivery status, workspace information
• Email Providers: Delivery status, bounce notifications
• SMS (Twilio): Message delivery status

3. How We Use Your Information

3.1 Primary Purposes

We use the collected information to:

AI-Powered Ad Monitoring:

• Analyze your ad campaigns using artificial intelligence
• Detect issues, anomalies, and performance problems in real-time
• Identify optimization opportunities
• Generate actionable insights and recommendations
• Monitor campaign metrics continuously (for Growth and Scale plans)

Automated Alerts:

• Send instant notifications when AI detects critical issues
• Alert you to budget overspending or underspending
• Notify you of significant ROAS, CPC, or conversion changes
• Warn about ad disapprovals or policy violations
• Deliver alerts through your preferred channels (WhatsApp, Email, SMS, Telegram, Slack)

Performance Reports:

• Generate automated AI-powered reports (daily, weekly, or monthly)
• Provide campaign performance summaries
• Offer AI-driven recommendations for optimization
• Track historical performance trends
• Compare metrics across time periods

Lead Tracking:

• Monitor new leads captured through your ad campaigns
• Track lead sources and attribution
• Discover conversion events automatically
• Provide lead analytics and insights

Event Discovery:

• Identify conversion events from your website
• Track custom events and goals
• Monitor event performance across campaigns

Service Improvement:

• Enhance AI models and detection algorithms
• Improve platform features and functionality
• Analyze usage patterns to optimize user experience
• Debug technical issues and optimize performance

Account Management:

• Create and maintain your account
• Authenticate your identity
• Provide customer support
• Communicate service updates and security alerts

Legal and Security:

• Prevent fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Protect user safety and security

3.2 Marketing Communications

We may use your email address to send:

• Service announcements and feature updates
• Educational content about ad optimization
• Promotional offers (you can opt-out anytime)

You can unsubscribe from marketing emails by clicking the "unsubscribe" link or contacting us at rudhamoy@gmail.com.

4. Data Sharing and Disclosure

4.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

Clerk (Authentication):

• Purpose: Secure user authentication and session management
• Data shared: Email, name, user ID
• Privacy Policy: https://clerk.com/privacy

Prisma with Accelerate (Database Hosting):

• Purpose: Secure data storage and database management
• Data shared: All application data
• Privacy Policy: https://www.prisma.io/privacy

Meta Marketing API (Ad Platform Integration):

• Purpose: Fetch advertising metrics, campaign data, and lead information
• Data shared: OAuth access tokens, ad account IDs
• Data received: Campaign metrics, ad performance data, lead data, conversion events
• Privacy Policy: https://www.facebook.com/privacy/policy
• Your Control: You authorize access through OAuth and can revoke at any time

Twilio (WhatsApp and SMS):

• Purpose: Send WhatsApp and SMS notifications
• Data shared: Recipient phone numbers, message content, alert notifications
• Privacy Policy: https://www.twilio.com/legal/privacy

Telegram Bot API:

• Purpose: Send Telegram notifications
• Data shared: Chat IDs, message content, alert notifications
• Privacy Policy: https://telegram.org/privacy

Slack API:

• Purpose: Send Slack workspace notifications
• Data shared: Webhook URLs, message content, alert notifications
• Privacy Policy: https://slack.com/privacy-policy

Email Service Providers:

• Purpose: Send email notifications and reports
• Data shared: Recipient email addresses, report content, alert notifications
• Privacy Policy: Varies by provider

Vercel (Hosting):

• Purpose: Application hosting and deployment
• Data shared: Server logs, performance metrics
• Privacy Policy: https://vercel.com/legal/privacy-policy

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or subpoenas
• Government requests
• Legal proceedings
• Protection of our rights or property
• Prevention of fraud or abuse

4.4 Business Transfers

If AdWIQ is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication via Clerk with modern security protocols
• OAuth token encryption and secure storage
• Automated token refresh and expiration handling
• API key authentication and secure management
• Webhook signature verification
• Regular security updates

Access Controls:

• Multi-tenant data isolation (tenant-based access control)
• Role-based access control
• Session management and automatic timeout
• Password hashing and secure credential storage
• Database-level security with Prisma

Operational Security:

• Regular security audits
• Intrusion detection and monitoring
• Automated backups with encryption
• Disaster recovery procedures

5.2 Your Responsibility

You are responsible for:

• Keeping your password secure
• Not sharing account credentials
• Logging out from shared devices
• Monitoring account activity
• Reporting suspicious activity to rudhamoy@gmail.com

5.3 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide information about:

• What happened
• What information was affected
• Steps we're taking to address the breach
• Steps you should take to protect yourself

6. Data Retention

6.1 Retention Periods by Plan

Free Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 7 days
• AI analysis history: 7 days
• Lead data: 7 days
• Usage logs: 30 days

Starter Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 30 days
• AI analysis history: 30 days
• Lead data: 30 days
• Usage logs: 30 days

Growth Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 90 days
• AI analysis history: 90 days
• Lead data: 90 days
• Usage logs: 90 days

Scale Plan:

• Account data: Retained while your account is active
• Ad data and metrics: 365 days (1 year)
• AI analysis history: 365 days
• Lead data: 365 days
• Usage logs: 365 days

All Plans:

• OAuth tokens: Retained until you disconnect ad account or token expires
• Backup data: Retained for 30 days
• Deleted accounts: Purged within 30 days (backups within 60 days)

6.2 Data Deletion

You can request deletion of your data at any time by:

• Deleting individual leads from your dashboard
• Disconnecting ad accounts (also revokes OAuth tokens)
• Deleting ad report configurations
• Deleting projects
• Deleting your entire account
• Contacting us at rudhamoy@gmail.com

Note: Disconnecting an ad account will:

• Delete stored OAuth tokens from our database
• Remove all associated report configurations
• Stop all scheduled reports and AI monitoring
• Delete ad performance data according to your plan's retention period

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access your personal information
• Export your lead data
• Export your ad performance data and AI reports
• Receive a copy of your data in machine-readable format

7.2 Correction and Deletion

You have the right to:

• Update your account information
• Correct inaccurate data
• Delete individual leads or reports
• Delete your entire account

7.3 Opt-Out Rights

You have the right to:

• Opt-out of marketing emails (unsubscribe link)
• Disable AI monitoring for specific ad accounts
• Remove notification channels
• Disconnect advertising accounts
• Disable or delete automated reports
• Turn off website tracking

7.4 Do Not Track

Our Service does not respond to Do Not Track (DNT) signals because there is no industry standard for DNT compliance.

8. Children's Privacy

AdWIQ is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at rudhamoy@gmail.com. We will delete such information from our systems within 30 days.

9. International Data Transfers

9.1 Data Location

Your information may be transferred to and maintained on servers located outside of your country of residence, including:

• United States (Vercel hosting)
• Europe (Prisma database)

By using our Service, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules.

9.2 Compliance

We ensure appropriate safeguards are in place for international transfers:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Service provider certifications
• Contractual obligations with data processors

10. Cookies and Tracking Technologies

10.1 Cookies We Use

Essential Cookies:

• Authentication (Clerk session)
• Security tokens
• User preferences and settings

Analytics Cookies:

• Usage tracking and analytics
• Performance monitoring
• Error logging and debugging

Website Tracking Snippet (Optional): If you enable our website tracking snippet, it uses:

• JavaScript event listeners
• Session tracking
• LocalStorage (for retry logic)
• Cookie-based tracking (optional)

10.2 Managing Cookies

You can control cookies through:

• Browser settings (block/delete cookies)
• Opting out of analytics
• Using privacy extensions

Note: Disabling essential cookies may prevent you from using certain features of AdWIQ.

11. AI and Automated Processing

11.1 How We Use AI

AdWIQ uses artificial intelligence to:

• Analyze ad campaign performance automatically
• Detect anomalies and performance issues
• Generate insights and recommendations
• Determine alert severity and urgency
• Predict potential problems before they impact your campaigns

11.2 Your Control

You maintain full control over your ad accounts and campaigns:

• AI provides recommendations only - you make the final decisions
• You can disable AI monitoring at any time
• You can adjust alert preferences and thresholds (Growth and Scale plans)
• You can override or ignore any AI recommendation

11.3 AI Providers

Depending on your plan, we may use different AI providers:

• Free Plan: Google Gemini only
• Starter Plan: Google Gemini or OpenAI GPT-4
• Growth Plan: Google Gemini, OpenAI GPT-4, or Anthropic Claude
• Scale Plan: All providers including Ollama Mistral for privacy-focused users

12. Third-Party Links

Our Service may contain links to third-party websites, including:

• Your tracked websites
• Documentation resources
• Partner services
• Ad platform dashboards

We are not responsible for the privacy practices of third-party websites. Please review their privacy policies before providing any information.

13. Business Users and End Users

13.1 For Business Users (Our Customers)

You are responsible for:

• Complying with applicable privacy laws (GDPR, CCPA, etc.)
• Obtaining proper authorization for ad account access
• Informing team members about data collection
• Managing notification recipient permissions

13.2 Advertising Platform Data

Data From Your Ad Accounts:

• We only access advertising data you explicitly authorize through OAuth
• You can revoke access at any time by disconnecting your ad account
• We do not share your advertising metrics with third parties
• Ad performance data is used solely to generate AI insights and reports for you

Third-Party Platform Policies: When you connect an advertising account, you also agree to that platform's terms:

• Meta Ads: https://www.facebook.com/legal/terms
• Google Ads (coming soon): https://policies.google.com/terms

14. Compliance with Privacy Laws

14.1 GDPR (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

Legal Basis for Processing:

• Consent: You agreed to our Privacy Policy
• Contract: Necessary to provide the Service
• Legitimate Interests: Improve and secure the Service

Your GDPR Rights:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with supervisory authority

Contact for GDPR Requests: Email: rudhamoy@gmail.com

14.2 CCPA (California Users)

If you are a California resident, you have rights under CCPA:

Information We Collect: See Section 2 for categories of information collected

Your CCPA Rights:

• Right to know what information we collect
• Right to delete your information
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination

How to Exercise Rights: Email: rudhamoy@gmail.com or visit your account settings

Verification: We may ask for verification (email confirmation) before processing requests.

14.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. Contact us if you have questions about compliance in your region.

15. Changes to This Privacy Policy

15.1 Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Notification of Material Changes:

• Email notification to registered users
• Dashboard notification
• 30 days notice before changes take effect

15.2 Continued Use

Your continued use of the Service after changes indicates acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy:

Email: rudhamoy@gmail.com

Support: rudhamoy@gmail.com

Privacy Requests: rudhamoy@gmail.com

Security Incidents: rudhamoy@gmail.com

Response Time: We will respond to privacy requests within 30 days.

17. Additional Terms

17.1 Accuracy

You are responsible for ensuring the accuracy of information you provide. Please keep your account information up to date.

17.2 Security Incidents

If you suspect unauthorized access to your account, please contact us immediately at rudhamoy@gmail.com.

17.3 Automated Decision-Making

We use AI to analyze ad performance and generate recommendations, but we do not use automated decision-making for purposes that produce legal effects concerning you. All AI recommendations are advisory only.

17.4 Sensitive Information

Please do not submit sensitive personal information (health data, financial data, government IDs) unless absolutely necessary for the Service.

18. Consent

By using AdWIQ, you consent to:

• Collection of information as described in this Privacy Policy
• Processing of information for the purposes stated
• Use of AI to analyze ad performance and generate insights
• Transfer of information as described
• Use of cookies and tracking technologies

You can withdraw consent at any time by deleting your account or contacting us at rudhamoy@gmail.com.

19. Definitions

Personal Information: Information that identifies, relates to, or could reasonably be linked to you.

Service: The AdWIQ website, dashboard, API, and tracking snippet.

User/You: The person or entity using our Service.

Ad Account: Your connected advertising platform account (e.g., Meta Ads).

AI Analysis: Automated analysis of ad performance using artificial intelligence.

Alert: Instant notification sent when AI detects a critical issue.

Report: Scheduled summary of ad performance with AI insights.

Tracking Snippet: JavaScript code embedded on websites to track events (optional feature).

20. Dispute Resolution

Any disputes regarding this Privacy Policy will be resolved through:

1. Good faith negotiation
2. Mediation (if negotiation fails)
3. Arbitration or small claims court

21. Severability

If any provision of this Privacy Policy is found to be unenforceable, the remaining provisions will remain in full force and effect.

This Privacy Policy is effective as of December 3, 2025.

Version: 2.0

Quick Reference

Questions? Contact us at rudhamoy@gmail.com

Your Privacy Matters. We are committed to protecting your data and being transparent about our practices. Our AI-powered monitoring helps you optimize ad performance while maintaining the highest standards of data privacy and security.