This Privacy Policy explains how Digital Growth Core ("we", "us", "our"), the operator of Ad Narrator (the "Service") and the data controller of your personal data, collects, uses, stores, and shares your information. Contact: support@adnarrator.com.
1. Data we collect
- Account data: name, email, and password hash you provide at signup.
- Ad platform data: when you connect Google Ads or Meta Ads, we retrieve campaign, ad set, ad, spend, impressions, clicks, conversions, and change-history records on a read-only basis. We do not modify, create, or delete anything in your ad accounts.
- OAuth tokens: short-lived and long-lived access tokens issued by the platforms, stored encrypted at rest, used solely to fetch the data above.
- Billing data: when you purchase a paid plan, your payment details (card, billing address, tax ID) are collected and processed by our Merchant of Record, Paddle.com. We receive only limited transaction metadata (subscription status, plan, last 4 digits, country).
- Usage data: basic logs (IP, user agent, timestamps) for security and debugging.
2. How we use it
- To pull, store, and aggregate your advertising metrics.
- To generate monthly narrated reports using large language models.
- To operate, secure, and improve the Service.
- To process payments, issue invoices, and comply with tax obligations (via Paddle).
3. Legal basis (GDPR Article 6)
We process personal data on the following legal bases:
- Performance of a contract (Art. 6(1)(b)): account creation, providing the Service, processing payments and subscriptions.
- Legitimate interests (Art. 6(1)(f)): security, fraud prevention, service improvement, and basic analytics, balanced against your rights.
- Legal obligation (Art. 6(1)(c)): tax, accounting, and responding to lawful requests from authorities.
- Consent (Art. 6(1)(a)): for any optional marketing communications, withdrawable at any time.
4. Meta Platform data
When you connect a Meta Ads account we request ads_read and read_insights. We use this access only to read ad account structure, performance insights, and the activity log for your selected accounts. We do not share Meta Platform data with third parties except the infrastructure providers listed in section 5.
5. Sharing — categories of recipients
We do not sell your data. We share it only with:
- Paddle.com Market Ltd — our Merchant of Record. Paddle processes all payments, handles billing, tax compliance, invoicing, refunds, and chargebacks. Paddle acts as an independent data controller for payment data. See paddle.com/legal/privacy.
- AI model providers (OpenAI, Google) to generate report text from your aggregated metrics.
- Hosting and database providers (Supabase, Cloudflare) required to run the Service.
- Professional advisers (legal, accounting) where strictly necessary.
- Authorities where required by law.
6. International transfers
Some recipients above are located outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions issued by the European Commission.
7. Storage and security
Data is stored on managed infrastructure with encryption at rest and in transit. Access is restricted to authorized personnel. OAuth tokens are encrypted with application-level keys.
8. Retention
We keep your data while your account is active. When you disconnect a platform we delete the associated tokens immediately and the synced metrics within 30 days. When you delete your account we erase all of your data within 30 days (see Data Deletion). Billing records are retained by Paddle for the period required by tax law (typically 7–10 years).
9. Your rights
Subject to applicable law (including the UK GDPR / EU GDPR), you have the right to access, rectify, erase, restrict processing, port, and object to processing of your personal data, and to withdraw consent at any time. You may exercise these rights by emailing support@adnarrator.com. We will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.
10. Cookies
We use only essential cookies required to keep you signed in and to operate the Service. We do not use marketing or third-party advertising cookies.
11. Contact
Digital Growth Core, operating Ad Narrator. Privacy questions: support@adnarrator.com.