Legal
Privacy Policy
Effective June 10, 2026
Plain and simple: we collect what's needed to generate your ads and run your account, we don't sell your data, and your brand assets stay yours.
What we collect
We collect only what we need to run the Service:
- Account data — your name, email address, and profile picture when you sign up (directly or via Google).
- Content you provide — product images, brand details, scripts, reference ads, and prompts you submit for generation or analysis.
- Usage data — how you interact with the Service, such as features used, renders created, and approximate device/browser information.
- Billing data — handled by our payment processor; we never store full card numbers.
How we use it
We use your information to:
- Provide and operate the Service, including generating and storing your ad content.
- Personalize output to your brand identity and improve generation quality.
- Process payments and manage subscriptions.
- Communicate with you about your account, security, and product updates.
- Maintain safety, prevent abuse, and comply with legal obligations.
AI processing
Content you submit is processed by AI models, including models operated by third-party providers, to generate and analyze advertising content. We send only what is needed to fulfill your request.
We may use aggregated, de-identified data to improve the Service. We do not use your private brand assets to train models made available to other customers without your consent.
Who we share with
We do not sell your personal data. We share it only with service providers who help us operate:
- Infrastructure and database hosting (e.g. Supabase).
- Authentication providers (e.g. Google, when you choose Google sign-in).
- Payment processing partners.
- AI model providers used for generation and analysis.
- Authorities, when legally required.
Cookies
We use essential cookies to keep you signed in and operate the Service. We do not run third-party advertising cookies on our site.
Data retention
We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required for legal, billing, or security purposes.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email us and we will respond within the legally required timeframe.
Security
We protect your data with industry-standard measures, including encryption in transit, scoped access controls, and isolated authentication. No system is perfectly secure, so we encourage strong, unique passwords.
International transfers
Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.
Changes to this policy
If we make material changes to this policy, we will notify you by email or in the product before they take effect.
Questions about this document? Reach us at hello@strads.ai.