Privacy Policy
This Privacy Policy outlines how adCasa collects, uses, and protects your personal information when you use our AI-powered digital marketing tools and services, including adGPT.
Effective Date: January 28, 2026
adCasa LTD ("adCasa," "we," "our," "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our services, including our website, adGPT, applications, and any related services (collectively, the "Services"). This policy also outlines your rights under the GDPR, CCPA, and other applicable data privacy laws.
1. Introduction
2. Data Controller and Data Processor
Email: legal@adcasa.io
Service Address: adCasa LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
We may also act as a Data Processor for certain services when processing personal data on behalf of third-party businesses, in which case data processing agreements will govern such activities.
3. Types of Data We Collect
3.1 Account Information:
- Name, email address, phone number, billing information, and payment card details.
- Username and password when you register an account with us.
- Transaction history and details of services purchased.
3.2 User Content:
- Data you input into our Services, such as campaigns, digital marketing preferences, feedback, and file uploads.
3.3 Behavioral and Technical Data:
- Information on how you use and interact with our website and services, such as usage patterns, page views, and clickstream data.
- IP address, browser type, operating system, device information, and information collected via cookies and similar technologies.
3.4 Location Data:
- If you use location-based services, we may collect your device's geographic location.
3.5 Communication Data:
- Records of communications between you and adCasa, including email correspondence, chat conversations, and customer support requests.
3.6 Social Media Information:
- If you interact with us via social media platforms, we collect publicly available information you provide.
3.7 Data from Connected Services (Google Data):
- If you connect third-party accounts such as Google Analytics or Google Ads to adGPT, we collect specific data required to provide the analysis features. This includes campaign performance metrics (clicks, impressions, CPC), keyword statistics, ad group structures, and ad creative content. We do not collect or process data unrelated to the specific marketing analysis functions requested by you.
3.8 AI Model Improvement & Restrictions:
- General Data: We may collect and use aggregated or anonymized data from general user inputs (e.g., UI interactions, prompt structures, and feedback) for the purpose of improving and refining our models.
- Google Restricted Scope Data (PROHIBITED FOR TRAINING): Notwithstanding the above, we do not use data obtained via Google Restricted Scopes (e.g., Gmail, Drive, Google Ads) for the training of generalized AI/ML models. All AI analysis on this data is performed in real-time and is user-specific.
4. How We Collect Your Data
- Directly from you: When you register for our services, interact with customer support, or communicate with us.
- Automatically: Via cookies, tracking technologies, and interaction logs when you use our services.
- From third parties: Data from partners, affiliates, and connected services (e.g., Google Analytics, Google Ads).
- Aggregated Data: Data from our AI models to improve service performance (subject to Section 3.8 limitations).
5. Purposes for Processing Personal Data
- Providing and Maintaining Services: Deliver requested features, content, and functionalities, and process transactions.
- Improvement and Development: Analyze how you use our services for future product improvements.
- Communications: Notify you about updates, new features, and services.
- Marketing and Promotions: Send promotional materials with your consent.
- Fraud Prevention and Security: Ensure system integrity and protect against misuse.
- Compliance: Fulfill legal and regulatory requirements.
- Model Improvement: Use aggregated or anonymized data to train and refine our AI models (subject to Restricted Scope limitations).
6. Legal Basis for Processing
- Consent: When you provide explicit consent (e.g., for marketing communications).
- Contractual Necessity: To fulfill contracts (e.g., service delivery).
- Legitimate Interests: To improve our services and protect our business.
- Legal Obligation: To comply with legal obligations (e.g., tax reporting).
7. Data Sharing and Transfers
- Service Providers: For services such as hosting (e.g., AWS, Google Cloud), payment processing, and customer support tools.
- Business Transfers: In the event of mergers or acquisitions, your data may be transferred (subject to Google Policy restrictions).
- Legal Obligations: We may disclose data to comply with legal requirements.
- Affiliates: For internal business purposes.
Google Data Sharing Limitation: Notwithstanding the above, data obtained via Google Restricted Scopes is never sold to third parties, nor is it transferred to third parties for advertising, retargeting, or external marketing purposes. It is shared only with necessary service providers (sub-processors) strictly to support the application's functionality.
When transferring data outside the EEA, Switzerland, or the UK, we ensure appropriate safeguards, such as Standard Contractual Clauses or equivalent.
8. Data Retention & Deletion
- Legal and regulatory requirements (e.g., billing records retention for tax purposes).
- Operational needs (e.g., security logs or account activity).
Deletion Request: You may request the immediate deletion of your data (including Google User Data) at any time by emailing legal@adcasa.io or by deleting your account via your user settings. Once the retention period has ended or a request is verified, we securely delete or anonymize your data.
9. Your Rights
- Access: Request access to the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data (right to be forgotten).
- Restriction of Processing: Limit data processing in certain situations.
- Data Portability: Request your data in a machine-readable format.
- Objection: Object to processing (e.g., marketing).
- Withdraw Consent: Withdraw consent at any time for processing based on consent.
- Post-mortem Instructions: Instruct us on how to handle your personal data after your death.
To exercise your rights, please contact legal@adcasa.io.
10. Automated Decision-Making and Profiling
11. Cookies and Similar Technologies
- Improve Website Functionality: Provide a seamless user experience.
- Analyze Behavior: Track interactions and website usage.
- Personalize Advertising: Serve tailored ads based on your preferences (excluding any data obtained via Google Workspace or Restricted Scopes).
For more details, please refer to our Cookie Policy.
12. Security Measures
- Encryption: Safeguarding data in transit (TLS/SSL) and at rest.
- Access Control: Limiting access to authorized personnel only.
- Security Audits: Regular reviews of systems to identify vulnerabilities.
However, please note that no transmission method over the internet is entirely secure.
13. Children's Privacy
14. Data Breach Notification
15. Third-Party Links and External Services
16. International Data Transfers
17. Privacy by Design and Data Protection Impact Assessments
18. Changes to This Privacy Policy
19. Contact Us
- Email: legal@adcasa.io
- Service Address: adCasa LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
20. Google Limited Use Disclosure (Restricted Scopes)
- No Model Training: We do not use data retrieved from Google Restricted Scopes (Google Ads, Google Analytics) to train generalized AI models. All AI analysis is performed in real-time, is user-specific, and is ephemeral or stored only for that specific user's account history.
- No Third-Party Transfer: We do not transfer Google user data to third parties, except: (a) to provide or improve the user-facing features that are prominent in the app's user interface, (b) to comply with applicable laws, or (c) as part of a merger, acquisition, or sale of assets.
- No Advertising: We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- No Human Access: We do not allow humans to read your Google user data unless: (a) we have obtained your affirmative agreement for specific messages (e.g., for support), (b) it is necessary for security purposes (such as investigating a bug or abuse), (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations and the data (including derivations) have been aggregated and anonymized.
Questions? Contact us at legal@adcasa.io