AdVantage Automate ("we", "us", "our") operates the AdVantage Automate marketing automation platform (the "Service"). This page tells you what data we collect, why we collect it, and how you can request deletion.
1. Information we collect
Account data: name, email address, company name, hashed password (if you signed up with email + password).
Authentication data: if you sign in with Google, we receive your name, email, and Google profile ID via Emergent-managed OAuth. We never receive your Google password.
Billing data: PayPal payment IDs, subscription status, plan tier, and billing email. We do not store credit card numbers — those live with PayPal.
Ad platform data: when you connect Meta, Google, LinkedIn, or other ad accounts, we receive the access tokens and basic profile info (ad account IDs, business names, campaign IDs). Tokens are encrypted at rest.
Campaign performance data: impressions, clicks, conversions, spend, and ROI reported by the ad platforms you connect. Used to render your dashboard.
Usage data: pages visited, features clicked, login counts, IP address (for security and rate limiting).
2. How we use your data
We use your data only to operate the Service:
- Authenticate you and keep your account secure.
- Create, manage, and optimize ad campaigns on the platforms you connect.
- Send transactional emails (welcome, password reset, payment receipts, trial-ending nudges).
- Show you analytics dashboards.
- Send opt-in marketing emails — you can unsubscribe at any time from any email we send.
- Comply with legal obligations.
We do not sell your personal data. We do not share data with third parties for their own marketing.
3. Third-party services
We use the following sub-processors:
- PayPal — payment processing.
- Resend — transactional email delivery.
- MongoDB Atlas / Emergent infrastructure — encrypted data storage.
- Emergent-managed Google OAuth — optional social login.
- Meta, Google, LinkedIn, Twitter Ads APIs — only the ad platforms you choose to connect.
- Anthropic (Claude) via Emergent LLM Key — AI blog drafting. We send only the topic prompts, never your audience or campaign data.
4. Data deletion & data access
You can:
- Export your data — email us at privacy@advantageautomate.com with the subject "Data export request". We respond within 7 days.
- Delete your account — email us at the same address with "Delete my account". We permanently delete your user record, campaigns, and connected ad account tokens within 30 days. Anonymized aggregate metrics may be retained for product analytics.
- Disconnect an ad platform — go to Integrations → click "Disconnect" on the platform. This revokes our access token immediately.
- Object to processing — if you're an EU/UK resident under GDPR, email us and we'll review within the statutory 30-day window.
6. Children's privacy
The Service is not intended for users under 16. We don't knowingly collect personal data from minors. If you believe a minor has provided us data, email privacy@advantageautomate.com and we'll delete it.
7. Security
We use industry-standard practices:
- Passwords are hashed with bcrypt — we never store or see them in plaintext.
- HTTPS / TLS in transit for every request.
- Ad platform access tokens are encrypted at rest.
- Backend secrets (Resend, PayPal, MongoDB) live in environment variables — never in source code.
8. Changes to this policy
If we change anything material, we'll email all active accounts at least 14 days before the change takes effect.
9. Contact us
Email privacy@advantageautomate.com for any privacy-related question, data request, or complaint. We aim to respond within 7 days.
