מדיניות פרטיות

Privacy Policy (English Summary)

Last updated: November 2, 2026

Creative generation and campaign projects

Creative tools process the brief, instructions and selected files to produce and review copy and images. In the current owner-only OpenAI pilot, OpenAI processes briefs and limited business context for strategy and copy, and instructions and selected reference images for generation, editing and quality review. Meta project context may contain summarized performance and scan findings, without access tokens. Other image-generation tools may use Google Gemini; the result identifies its provider and model. Google Ads analysis continues to use Anthropic as described below. The OpenAI pilot does not automatically receive Google Ads or TikTok reports.

OpenAI requests use store:false, which is not a zero-retention guarantee. Abuse-monitoring logs, caching, safety and legal exceptions may apply under OpenAI API data controls. ADSI does not submit content for model training. Saved project briefs, strategies, copy and review acknowledgements, and images saved to the library, remain in ADSI so work can be resumed, subject to the account deletion and backup provisions in this policy. Generating content or saving a project does not authorize campaign publication.

We also record per-user AI usage and estimated costs, coarse product page visits and estimated active time while the app is in the foreground with recent user activity. This does not record typed content or screen recordings. An owner-only console shows these operational metrics, user plans and any manually recorded payments for support, service operation and improvement. Active-time measurement begins when this feature is deployed; it does not reconstruct earlier usage.

For product improvement, daily aggregates also include tool operations, response times, success or failure categories, interview step openings and completions, and export requests. These measurement events exclude answer content, error messages, browsing URLs and screen recordings.

ADSI is a campaign management and analytics tool for Meta advertising platforms. We collect: account details (email, name, hashed password), an encrypted Meta access token authorized by the user, advertising data read from the user's own ad accounts (campaigns, performance metrics, catalogs, product sets, pixels, pages), and an optional business profile provided by the user. Data is used solely to operate the service for that user, including AI powered analysis of Meta data processed via Anthropic. Meta campaigns are created only on the user's explicit instruction and always in paused status. We do not sell personal data. Providers include Meta, Google, Anthropic and Railway, for the purposes described in this policy. Cloudflare participates in site delivery; its R2 storage is used for backups when configured. Users may disconnect Meta at any time, which deletes the stored token, and may request full account deletion as described on our data deletion page. Deletion requests are honored within 30 days. Any public authority request for personal data is reviewed for legality, answered with the minimum necessary information only, and documented. Meta platform data is handled per the Meta Platform Terms.

Eddie uses Anthropic’s commercial API. Not saving permanent chat conversations on the ADSI server does not mean the provider retains no data. Anthropic’s retention policy describes ordinary deletion of API inputs and outputs within 30 days, with exceptions such as policy enforcement and legal requirements. We do not represent this connection as zero-retention. ADSI does not submit Google data for feedback or model training.

Operational backups can contain information present in the database when they were created, including encrypted connection credentials and private proposals. Disconnecting or deleting an account removes information from the active database; it does not immediately erase existing backups. Backups rotate separately according to backup settings and successful cleanup. Contact us about information remaining in a backup.

Google Ads owner pilot

The Google Ads connection is currently an owner-only pilot for reporting, analysis, opt-in monitoring and individually approved campaign creation and editing. We store access and refresh tokens encrypted with AES-256-GCM. We read accessible account identifiers and metadata (name, currency and time zone), and, for an explicitly selected account and requested report, Search, Shopping and Performance Max campaign names, identifiers, status, type, costs, impressions, clicks, conversions and conversion value. Product reports also include product identifiers, titles and reporting attributes such as feed label and language. Campaign tools also read budget and bidding settings, linked Merchant Center identifiers and existing image/video assets. The connection does not read Gmail messages or Google Drive files.

On-demand campaign and product reports are processed in request memory. For a selected account, users can save a business profile and targets and request an initial scan. Background monitoring requires a completed profile, successful initial scan and explicit activation; it runs on the server every 6 or 24 hours without requiring an open browser. Other portfolio accounts are not automatically scanned. Selected workspace scans store the latest snapshot of daily campaign performance and suggestions. That snapshot expires after 30 days and is removed by the next monitoring-service cleanup. The business profile, targets and monitoring preferences remain in the account. Sending a message to Eddie shares that message and limited selected-account context (business profile, targets, aggregated campaign performance and suggestions) with Anthropic for analysis. Credentials and full product reports are not sent. ADSI does not persist these chat transcripts as server-side conversations; token usage and estimated costs are recorded. Analysis and background monitoring do not change campaigns; explicit user approval is required for campaign actions. Refresh tokens renew access for the features the user selected. Encrypted credentials remain until disconnection or account deletion.

Disconnecting Google Ads deletes stored credentials, stops monitoring and removes the retained performance snapshot and finding decisions from ADSI's active database. The business profile and goals remain, but reconnecting never automatically restarts monitoring. ADSI also attempts to revoke the grant at Google; local disconnection completes even if Google does not confirm revocation. Users can review or remove access in their Google Account connections. Disconnection does not delete the ADSI account; follow our data deletion instructions to request account deletion.

Campaign changes require Google validation, a review of the exact proposed changes and separate explicit user confirmation for each action in the selected account. New campaigns are created paused. Activation requires another approval. Eddie can prepare a draft, but cannot approve or execute it. Drafting shares the user's request and limited campaign, currency, location, language, asset and Merchant Center context with Anthropic, without credentials. Action details, approvals and execution receipts are retained for audit and duplicate prevention. Ordinary action records are removed by cleanup once 30 days have passed since their last update. Cleanup runs when the action service starts, history is opened or a proposal is prepared, so deletion is not guaranteed exactly on day 30. Executing or uncertain actions remain until reviewed; the retention period then runs from their last update. Disconnection invalidates unsent proposals but preserves action history; it does not reverse changes already made in Google. Account deletion also deletes these records.

ADSI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements. Google data supports the disclosed user-facing features; it is not sold, used for our targeted advertising, or used to train models. The requested Google Ads https://www.googleapis.com/auth/adwords scope can permit account management according to the user's Google permissions. Analysis and background monitoring remain read-only; only explicitly confirmed campaign operations can make changes. Any new data use will be disclosed and the required consent obtained before it begins.

Google content management also reads selected-campaign ad groups, ad copy and pinning, keywords and asset groups. Eddie drafting may share a bounded selection of these details and the saved business profile with Anthropic. Image files are not sent to Eddie or Anthropic. Requesting image-upload validation sends the selected file to Google for validation and stores it in the private action proposal under the action-retention periods above. Uploading the image to the Google library and linking it to a campaign each require separate explicit approval. An approved upload remains managed in the Google Ads account; deleting ADSI does not delete that Google copy.