Privacy Policy
Last updated: September 11, 2026 · Effective date: September 11, 2026 · Version 1.0
This version supersedes all prior versions.
This Privacy Policy explains how Adfinery ("we", "us") collects, uses, shares, and protects personal data when you use adfinery.com, our applications, and our services (the "Service"). Adfinery is the data controller. It applies to visitors, account holders, and the people whose images may appear in content created on the Service.
- 1. Who we are
- 2. Data we collect
- 3. Sources
- 4. Purposes & legal bases
- 5. Cookies
- 6. How we share
- 7. International transfers
- 8. Retention
- 9. Security
- 10. Your rights (GDPR)
- 11. Your rights (US/California)
- 12. Your choices & GPC
- 13. Automated processing & AI
- 14. Children
- 15. Marketing
- 16. Third-party links
- 17. Changes
- 18. Contact
1. Who we are
Adfinery is the controller of the personal data described here. You can reach our privacy team at privacy@adfinery.com or by mail at [Registered business address]. If we serve the EU/UK without an establishment there, our representative is: [EU/UK representative, if appointed].
2. Information we collect and how
- You provide: account data (name, email, hashed password); your Inputs (briefs, prompts) and uploaded product photos and logos; any presenter/likeness images or voice you upload; and support messages.
- Generated/derived: the ads and videos we create for you, your credit usage, and project history.
- Automatically: IP address, device and browser data, log and usage data, and cookies (see the Cookie Policy).
- From third parties: our payment processors, and analytics or referral partners.
Uploaded photos and presenter images may contain images of identifiable people and are treated with additional care.
3. Sources of data
We obtain data (a) directly from you, (b) automatically from your use of the Service, and (c) from third parties such as payment processors and analytics providers.
4. Purposes of processing & legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide and operate the Service; generate your ads and videos | Performance of a contract |
| Billing, fraud prevention, and security | Contract; legitimate interests; legal obligation |
| Analytics and improving the Service | Legitimate interests (or consent where required) |
| Marketing communications; non-essential cookies | Consent |
| Meeting legal and tax obligations | Legal obligation |
5. Cookies & tracking
We use strictly necessary cookies to run the site, and, with your consent, preference and analytics cookies. You can accept or reject non-essential cookies and change your choice at any time. See our Cookie Policy for details.
6. How we share your information
We share personal data only as needed to run the Service, under contracts requiring its protection, with: AI and infrastructure providers (Google Vertex AI/Gemini and fal.ai to generate your content; our hosting provider and Cloudflare for delivery and security); payment processors (Stripe, PayPal); analytics, email, and support providers; social platforms when you choose to publish; and authorities or acquirers where legally required or in a business transfer. We do not sell your personal data.
7. International data transfers
Some providers are in the United States or elsewhere. Where we transfer personal data internationally we rely on appropriate safeguards, such as the EU–US Data Privacy Framework (where the provider is certified) or Standard Contractual Clauses (with the UK Addendum and Swiss framework as applicable).
8. Data retention
- Generated ads and videos: automatically deleted after 30 days.
- Account data: kept while your account is active and for a limited period after closure.
- Uploaded images / likeness data: kept only as needed to provide the Service and deleted on a short, defined schedule.
- Billing records: retained as required by tax and accounting law.
- Logs: kept for a limited period for security and diagnostics.
9. Security
We use encryption in transit, access controls, and other measures to protect your data. No method is perfectly secure; if a breach affects your personal data we will notify you and regulators as required by law.
10. Your rights — EU/UK (GDPR)
You may request access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests), and you may withdraw consent at any time. You also have the right not to be subject to a decision based solely on automated processing that produces legal effects, and the right to lodge a complaint with your supervisory authority. To exercise a right, email privacy@adfinery.com; we respond within the time the law requires (generally one month).
11. Your rights — California (CCPA/CPRA) & other US states
Depending on your state you may have the right to know/access, delete, correct, obtain a portable copy, opt out of "sale" or "sharing," limit the use of sensitive personal information, appeal a decision, and not be discriminated against for exercising these rights. The categories of personal information we collect are described in Section 2, the purposes in Section 4, and the recipients in Section 6. If we collect sensitive personal information (such as account credentials or images that may reveal identity), we use it only to provide the Service. To submit a request, email privacy@adfinery.com; we may verify your identity and respond within 45 days (extendable).
12. Your privacy choices & Global Privacy Control
Even though we do not sell personal data, if any analytics or advertising cookies constitute "sharing" for cross-context behavioral advertising, you can opt out via our cookie controls, and we honor the Global Privacy Control (GPC) browser signal. You can also unsubscribe from marketing emails at any time.
13. Automated processing & AI
The Service generates content using AI models operated by Google and fal.ai. We do not make decisions that produce legal or similarly significant effects about you solely by automated means. Your Inputs are used to generate your Outputs and to operate the Service; where content may be used to improve models, we will tell you and offer a choice as required by law.
14. Children
The Service is not directed to children under 16 (or the applicable age in your country) and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
15. Marketing & preferences
With your consent where required, we may send you product news and offers. You can opt out at any time using the unsubscribe link. We will still send necessary service and transactional messages.
16. Third-party links
The Service may link to third-party sites and services we do not control. Their privacy practices are governed by their own policies.
17. Changes to this Policy
We may update this Policy and will post the new "Last updated" date and version. For material changes we will provide notice by email or in-app.
18. Contact us
Privacy: privacy@adfinery.com · Mailing address: [Registered business address] · Data Protection Officer / EU-UK representative: [if appointed].
This document is provided for transparency and general information and is not legal advice. Because Adfinery processes payments, personal images, and data of users in the EU and California, we recommend you review it with a qualified attorney before relying on it.