Privacy Policy

1. Introduction

Adless ("we", "us", "our") operates the Adless platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

• Account information: email address, name, and profile picture (when signing up via Google OAuth or email/password). If you connect TikTok, we store your TikTok access tokens, username, and avatar
• Business information: business name, description, category, features, and tone provided during onboarding or scraped from URLs you submit
• Usage data: prompts, generated slideshows, generation history, subscription status, and feature usage
• Uploaded content: images you upload to use as slide backgrounds
• Technical data: browser type, device information, IP address, and cookies necessary for authentication and session management

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service, including generating AI-powered slideshow content
• Personalize content generation based on your business context and preferences
• Process subscriptions and manage your account
• Improve the Service, fix bugs, and develop new features

4. AI Processing

Your prompts and business context are sent to third-party AI providers (OpenAI and Replicate) for content generation. These providers process your data according to their own privacy policies. We do not use your content to train AI models. Generated content is stored in your account and is not shared with other users.

5. Third-Party Services

We use the following third-party services to operate the platform: Supabase (authentication, database, and file storage), OpenAI (text generation), Replicate (image generation), and TikTok (content publishing when you connect your account). Each provider has its own privacy policy governing their handling of data. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

For details on how these providers handle your data, refer to their privacy policies: TikTok (https://www.tiktok.com/legal/privacy-policy), OpenAI (https://openai.com/privacy), Replicate (https://replicate.com/privacy).

6. TikTok Integration

When you connect your TikTok account to Adless, the following applies:

• We request only the permissions (scopes) necessary to operate the Service: reading your basic profile information and publishing content on your behalf
• Your TikTok OAuth access tokens and refresh tokens are stored securely in our database with row-level security policies ensuring only you can access your connection data
• Tokens are automatically refreshed when they expire. If your refresh token expires, you will need to reconnect your account
• You can disconnect your TikTok account at any time from the Settings page. Disconnecting immediately deletes all stored TikTok tokens and profile information from our systems
• Content is only posted to TikTok when you explicitly initiate a post from the slideshow editor. Adless never posts content automatically or without your direct action
• When posting, your slideshow images are temporarily stored in a public storage bucket so TikTok can retrieve them. These rendered images persist in storage but are only associated with your account

7. Data Retention

We retain your data as follows:

• Account data: retained as long as your account is active. Upon account deletion, all associated data (including slideshows, business context, images, and third-party connection tokens) is permanently deleted
• TikTok connection data: retained until you disconnect your TikTok account or delete your Adless account, whichever comes first
• Generated slideshows and images: retained as long as your account is active, unless you delete them individually
• Usage logs and generation telemetry: retained for up to 90 days for service improvement and debugging purposes

8. Data Storage and Security

Your data is stored securely using Supabase infrastructure. We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication tokens, and row-level security policies on our database. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Cookies

We use essential cookies strictly necessary for authentication and session management. We do not use advertising cookies or third-party tracking cookies. Session cookies are automatically deleted when you close your browser or when your session expires.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Request a copy of the data we hold about you
• Withdraw consent for data processing at any time
• Request deletion of your account and all associated data by contacting us

11. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@adless.app.