Privacy Policy

What we collect

When you create an AdSpecIt account, we collect your name and email address. When you connect your Meta Ads account, we request read-only access to campaign, ad set, and ad performance data — we never receive or store your Meta password.

We also collect minimal usage analytics (page views, button clicks, audit completion events) to understand which features are useful and where users get stuck. We do not collect data from any advertising network.

How we use your data

Your ad account data is used solely to generate your audit report and to power features such as re-audit comparison and account history. We do not store raw ad data beyond what is required to produce, display, and re-run your reports. We never modify your campaigns or ad account settings.

We use your email to send transactional messages (verification, password reset, audit completion, receipts) and occasional product updates. You can opt out of product updates at any time.

Data retention

We retain your data only as long as it is useful to you and to us:

• Audit reports: 12 months active, then archived. You can request earlier deletion at any time.
• Meta access tokens: retained until you revoke them or your account is deleted.
• Account records (email, name): retained until you delete your account.
• Transactional records (invoices, charges): retained for 7 years as required by tax and audit law.
• Server logs and analytics events: retained for 30 days.

Subprocessors

We use the following third-party services to operate AdSpecIt. Each is bound by their own data processing terms and applicable regulations:

• Anthropic (US) — AI model that generates audit findings. Ad data is sent to Anthropic for processing during an audit run. Anthropic does not retain prompt data beyond the API call.
• Stripe (US) — payment processing. Stripe Privacy Policy.
• Supabase (US/EU regions) — database and authentication. Supabase Privacy Policy.
• Resend (US) — transactional email delivery. Resend Privacy Policy.
• Fly.io (multi-region) — backend hosting.
• Vercel (US, global edge) — frontend hosting.
• Sentry (US) — error monitoring.
• PostHog (US) — product analytics.

Cookies and analytics

We use first-party cookies and browser localStorage to keep you signed in and to track product analytics events (e.g., which pages you visit, when you complete an audit). We do not run advertising cookies, retargeting pixels, or third-party tracking scripts.

Your rights

You have the right to access, correct, export, and delete your personal data at any time. To request any of these, email us at hello@adspecit.com from your registered email address. See our Data Deletion page for the account deletion process.

If you are in the European Economic Area, the United Kingdom, or California, you also have the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. We do not sell personal data to anyone.

Data security

Access tokens are stored encrypted at rest. Session tokens are transmitted via secure, HTTP-only cookies on the root domain. All traffic is encrypted in transit via HTTPS. We follow industry-standard practices for password hashing (Argon2), secrets management (Fly secrets, Vercel environment variables), and access control.

Breach notification

In the event of a confirmed data breach affecting your personal data, we will notify you by email within 72 hours of discovery, along with the nature of the breach, what data was affected, and the steps we are taking to remediate it.

Revoking Meta access

You can revoke AdSpecIt's access to your Meta account at any time from your Meta Business Settings → Integrations. Revoking access disables future audits but does not delete past reports — for that, request account deletion (see below).

Children's privacy

AdSpecIt is intended for use by businesses and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email and announced on this page. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this policy or your data? Email hello@adspecit.com.