AdRun Sign in

Privacy Policy

Effective date: July 7, 2026

1. Introduction

AdRun ("we", "us", or "our") provides an AI-assisted platform for creating and managing Meta (Facebook) advertising campaigns. This Privacy Policy explains what information we collect, how we use it, and your choices when you use our website and services (the "Service").

2. Information we collect

We may collect the following categories of information:

  • Account information: name, email address, password (stored in hashed form), profile details, and organization membership when you register or are invited to a team.
  • Meta / Facebook platform data: when you connect your Meta account, we receive and store an access token (encrypted), your Meta Business ID and name, ad account IDs, names, and currencies, Facebook Page IDs and names, and advertising data needed to create campaigns, ad sets, creatives, and ads. With your authorization we may also read ad performance insights.
  • Ad run data: website URLs you submit, target language, generated strategy briefs, ad concepts, copy, creative assets, and publish settings associated with your ad runs.
  • Billing information: subscription and payment details processed by our payment provider (Stripe via Autumn). We do not store full payment card numbers on our servers.
  • Technical data: IP address, browser type, device information, and usage logs generated when you access the Service.

3. How we use your information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Authenticate you and manage your account and organization
  • Connect to Meta on your behalf to list ad accounts, create and publish ads, and retrieve performance data for iteration
  • Analyze landing pages and generate ad concepts, copy, and creatives using AI services
  • Process payments and manage subscriptions
  • Send transactional emails (e.g. password reset, invitations)
  • Comply with legal obligations and enforce our terms

4. Meta / Facebook platform data

When you authorize AdRun to access your Meta account, we request permissions including ads management, ads read, business management, pages show list, and pages read engagement. We use this data solely to provide the advertising features you request — such as listing your ad accounts and pages, creating ad sets and ads, uploading creatives, and checking campaign performance.

We do not sell Meta platform data. We do not use Meta platform data for purposes unrelated to the Service (such as building unrelated user profiles or serving third-party advertising). You can disconnect your Meta account at any time in Settings → Integrations, which stops further access using your stored token.

Meta's own data practices are described in the Meta Privacy Policy.

5. Third-party service providers

We share information with trusted providers who help us operate the Service, including:

  • Meta (Facebook): advertising platform integration
  • Convex: database and backend infrastructure
  • AI providers (e.g. OpenAI, OpenRouter): landing page analysis, concept generation, and copy writing
  • Autumn / Stripe: billing and subscription management
  • Resend: transactional email delivery
  • Cloudflare: hosting and content delivery

These providers process data on our behalf under contractual obligations and only as needed to deliver the Service.

6. Data retention

We retain your account data and ad run data for as long as your account is active or as needed to provide the Service. Meta access tokens are retained while your Meta integration remains connected. You may disconnect Meta at any time. Upon account deletion or a verified deletion request, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law.

7. Your rights and choices

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data in your account settings
  • Request deletion of your data
  • Withdraw consent for Meta integration by disconnecting in Settings
  • Object to or restrict certain processing

To exercise these rights, contact us at contact@generativestudio.dev. We will respond within a reasonable timeframe.

8. Security

We use industry-standard measures to protect your data, including encryption of Meta access tokens at rest, HTTPS in transit, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Children's privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

Your data may be processed in countries other than your own, including the United States, where our service providers operate. We take steps to ensure appropriate safeguards are in place for such transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

contact@generativestudio.dev