Your data, and the choices you have

01Information we collect

• Account information. When you sign up we store your email address, display name, and how you signed in (email and password, magic link, or Google). If you use Google, we receive your email and name from Google — never your Google password.
• Advertising account connections. When you connect an ad platform (Google Ads, Meta Ads, Amazon Ads, LinkedIn Ads, TikTok Ads) via OAuth, we store the access and refresh tokens that platform issues, the scopes you granted, the connected account's ID and name, and its currency and timezone. Tokens are encrypted at rest (see Security).
• Campaign and performance data. When your AI assistant runs a task, we retrieve campaign, ad group, keyword, budget and performance data from your connected accounts to answer your request or draft a change. We do not keep a standing copy beyond what is needed to serve the request and the audit trail below.
• Activity and audit logs. We record every action your AI assistant takes through AdLigner — the tool used, the platform, whether it read or wrote, a short human-readable summary, and the time — so you have a complete, reviewable trail.
• Billing information. On a paid plan, our payment processor (Stripe) handles your card details. We store only your Stripe customer and subscription identifiers, plan, and status. We never see or store full card numbers.
• Alerts and monitors. If you set up a monitor, we store the rule you defined and the email address you asked us to notify.
• Usage metering. We count the tool calls you make each billing period to enforce plan limits. This contains no advertising content.
• Technical and preference data. We store a language-preference cookie and use a coarse, country-level signal to pick a default language. We do not use advertising or cross-site tracking cookies.

02How we use your information

We use the information above to:

• operate your account and your platform connections;
• execute the read and write tasks your AI assistant requests;
• generate proposed campaign changes for you to review;
• meter usage and process billing;
• send transactional and alert emails;
• maintain the audit trail of every action;
• secure the service and prevent abuse; and
• comply with our legal obligations.

03How we share your information

• Advertising platforms you connect. To carry out your requests, we exchange data with the ad platforms you authorize. Each platform processes that data under its own privacy policy.
• Your AI assistant. AdLigner does not operate its own AI model. The assistant that reads your advertising data is the client you choose to connect — such as Claude, ChatGPT, Cursor, Gemini or Codex. Data your assistant retrieves through AdLigner is handled by that assistant's provider under their privacy policy, not ours. Choose and configure your AI client accordingly.
• Service providers (subprocessors). A small set of vendors runs AdLigner: Supabase (authentication and database), Cloudflare (application hosting), Stripe (payments), and Resend (transactional and alert email). They process data only to provide their service to us.
• Legal and safety. We may disclose information where required by law or to protect the rights, safety and security of our users or the service.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

04Human clearance and automation

AdLigner is built so that automation never spends your money without you. Every change your AI assistant proposes is shown to you for confirmation before it is sent to an ad platform, and every campaign or ad AdLigner creates is set to paused — a human must review and activate it. Read-only insights need no confirmation; anything that writes to your account does.

05Data retention

We keep your account data for as long as your account is active. Encrypted platform tokens are kept until you disconnect the platform or delete your account, after which they are deleted. Audit logs and billing records are retained as needed to provide the service, meter usage, and meet legal, tax and accounting obligations. When you delete your account, we delete or anonymize your personal data except where law requires us to retain it.

06Security

Advertising tokens are encrypted at rest with AES-256-GCM and are never exposed to your browser — they can be used only by our server. Access to the database is governed by row-level security, so you can reach only your own data. We connect to ad platforms through OAuth, so AdLigner never receives your platform passwords. No system is perfectly secure, but we work to protect your data in transit and at rest.

07Advertising platform credentials

We authorize access to your ad accounts exclusively through each platform's OAuth flow. We never ask for, receive, or store your username or password for any advertising platform. You can revoke AdLigner's access at any time from within AdLigner or from the platform's own security settings.

08Your rights and choices

• Disconnect any platform at any time from your Connections page; this deletes the stored tokens for that platform.
• Depending on where you live — including the EU/EEA and UK (GDPR), Türkiye (KVKK), and California (CCPA/CPRA) — you may have the right to access, correct, delete, export, or object to or restrict our processing of your personal data.
• To exercise any of these rights, email us at privacy@adligner.com. We may need to verify your identity first. You also have the right to lodge a complaint with your local data protection authority.

Legal bases (GDPR/KVKK): we process your data to perform our contract with you (running the service), to pursue our legitimate interests in securing and improving it, to comply with legal obligations, and with your consent where required — for example, when you connect a platform.

09International data transfers

AdLigner relies on service providers that may process data in countries other than your own. Where personal data is transferred across borders, we rely on appropriate safeguards, such as the providers' standard contractual clauses.

10Children's privacy

AdLigner is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

11Third-party services

Connecting a platform or an AI client means your data is also handled by that third party under their own terms and privacy policy. We are not responsible for the practices of services we do not operate. Review their policies before connecting.

12Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, notify you by email or in the app.

13Contact us

Questions or privacy requests: privacy@adligner.com. AdLigner is operated by Yücel Albar, Türkiye.