1. Introduction
AdBudgetBuddy ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ad budget management platform ("Service").
This policy applies to all users of our Service, including users in the European Union (EU) and European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including:
- Account Information: Name, email address, company name, and other information you provide when creating an account
- Organization Data: Information about your organization, team members, and organizational structure
- Budget Data: Ad budget allocations, spending data, advertiser information, and channel configurations you enter into the Service
- Payment Information: Billing details processed through our payment provider (Stripe); we do not store full credit card numbers
- Communications: Information you provide when contacting our support team or providing feedback
2.2 Information Collected Automatically
When you use our Service, we automatically collect:
- Usage Data: Information about how you interact with the Service, including pages viewed, features used, and actions taken
- Device Information: Browser type, operating system, device identifiers, and IP address
- Log Data: Server logs including access times, error logs, and referring URLs
- Cookies and Similar Technologies: See our Cookies section below
2.3 Information from Third Parties
We may receive information from third-party services you connect to the Service, such as advertising platforms (Google Ads, Meta, etc.), but only with your explicit authorization.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send technical notices, updates, and security alerts
- Respond to your comments, questions, and support requests
- Monitor and analyze trends, usage, and activities in connection with the Service
- Detect, investigate, and prevent fraudulent or unauthorized activity
- Personalize and improve your experience
- Send promotional communications (with your consent, where required)
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
For users in the EU/EEA, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide the Service you have requested
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, provided these interests do not override your rights
- Consent: Processing based on your explicit consent, which you may withdraw at any time
- Legal Obligation: Processing necessary to comply with applicable laws and regulations
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: We share data with third-party vendors who perform services on our behalf, such as payment processing (Stripe), authentication (Clerk), hosting, and analytics
- Within Your Organization: If you are part of an organization account, your information may be accessible to other authorized members of your organization
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred
- With Your Consent: We may share information with third parties when you have given us your explicit consent
6. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. When you close your account, we will delete or anonymize your information within 90 days, unless:
- We are required to retain it for legal, tax, or audit purposes
- Retention is necessary to resolve disputes or enforce our agreements
- You have requested a longer retention period for data export purposes
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
7.1 Rights for All Users
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate personal information
- Deletion: Request deletion of your personal information
- Data Portability: Receive your data in a structured, machine-readable format
7.2 Additional Rights for EU/EEA Users (GDPR)
- Right to Object: Object to processing of your personal data for direct marketing or based on legitimate interests
- Right to Restrict Processing: Request restriction of processing in certain circumstances
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with your local data protection authority
To exercise any of these rights, please contact us at privacy@adbudgetbuddy.com. We will respond to your request within 30 days.
8. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer personal data from the EU/EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Transfers to countries with an adequacy decision from the European Commission
- Other legally approved transfer mechanisms
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Multi-tenant data isolation with row-level security
- Regular security assessments and penetration testing
- Access controls and authentication requirements
- Employee training on data protection practices
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and track information about your use of the Service. Types of cookies we use:
- Essential Cookies: Required for the Service to function properly (e.g., authentication, security)
- Analytics Cookies: Help us understand how users interact with the Service
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.
11. Third-Party Services
Our Service integrates with the following third-party services:
- Clerk: Authentication and user management
- Stripe: Payment processing
- Advertising Platforms: Integration with ad platforms you connect (Google Ads, Meta, etc.)
These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third parties.
12. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date. For significant changes, we may also send you an email notification.
Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
For EU/EEA residents, you also have the right to lodge a complaint with your local supervisory authority.