Privacy Policy

Ad Lab operates the Service available at adlab-ai.lovable.app. For any privacy question or request, contact us at westerbydigital@gmail.com.

• Account data: name, email address, password hash (or Google sign-in identifier), company name, role and team membership.
• Billing data: subscription status, plan, trial dates and payment identifiers. Card details are handled directly by Stripe; we never store full card numbers.
• Connected platform data: when you connect Meta Ads, we process ad accounts, campaigns, ad sets, ads, creatives, Pages, Instagram accounts, lead forms and performance metrics. When you connect Slack, we process the workspace and channel needed to send alerts.
• Content you create: ad copy, headlines, descriptions, uploaded images and videos, naming conventions, comments and settings.
• Technical data: IP address, browser and device type, log data, timestamps and error reports.
• Usage data: pages visited, features used and interaction events used to improve the Service.

• Providing, operating and securing the Service — performance of a contract.
• Generating AI recommendations, creative scores, copy and ad names — performance of a contract.
• Publishing ads to your Meta Ads Manager on your instruction — performance of a contract.
• Billing, fraud prevention and accounting — legal obligation and legitimate interest.
• Product analytics, troubleshooting and improvement — legitimate interest.
• Service and marketing emails — legitimate interest or consent, with opt-out at any time.

We do not sell personal data, and we do not use your advertising data to train third-party foundation models beyond what is required to return a response to your own request.

Ad Lab uses AI models (for example Anthropic Claude, or another provider whose API key you supply) to generate ad names, copy, scoring and recommendations. Relevant ad content, performance metrics and creative assets are sent to the model provider solely to produce that output. If you supply your own API key, processing is governed by your agreement with that provider.

We share data only with sub-processors that help us run the Service:

• Cloud hosting, database, authentication and file storage providers.
• Meta Platforms, Inc. — when you connect Meta Ads and publish ads.
• Slack Technologies — when you enable Slack alerts.
• AI model providers — for generated recommendations and copy.
• Stripe — for subscription payments.
• Email delivery providers — for transactional messages.

We may also disclose data where required by law, or in connection with a merger or acquisition, in which case you will be notified.

Some providers process data outside the EU/EEA. Where that happens, transfers rely on the EU Standard Contractual Clauses or an adequacy decision, together with appropriate technical and organisational safeguards.

Account and company data is kept while your account is active and for up to 90 days after deletion, unless a longer period is required by law (for example accounting records, kept up to 5 years). Cached Meta data and logs are typically retained for up to 12 months. You can request earlier deletion at any time.

Data is encrypted in transit (TLS) and at rest. Every company workspace is logically isolated with row-level security so one company can never read another company's data. Access tokens and API keys are stored encrypted, and internal access is limited to personnel who need it. No system is perfectly secure, but we notify affected users and relevant authorities of a qualifying breach without undue delay.

We use strictly necessary cookies and local storage for authentication, session management and security. We may use limited analytics cookies to understand product usage. You can block cookies in your browser, but the Service may not function correctly without the necessary ones.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. You can exercise these rights by emailing westerbydigital@gmail.com. You may also disconnect Meta or Slack at any time from Settings → Connections, which revokes our access tokens. EU users can lodge a complaint with their local data protection authority.

The Service is intended for business use and is not directed at children under 16. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be announced in the Service or by email, and the "last updated" date above will change.

Questions about this policy or our data practices? Email westerbydigital@gmail.com.

You can request deletion of your personal data or your entire company workspace at any time by emailing westerbydigital@gmail.com. We will process verifiable deletion requests within 30 days unless a longer retention period is required by law.

What happens when you request deletion:

• Your account profile, company membership records and non-essential usage data are removed or anonymised.
• Advertising content, campaigns and assets you created inside the Service are deleted from our active systems.
• Disconnecting Meta or Slack in Settings immediately revokes our access tokens, but does not by itself delete cached data already stored in the Service.
• Some information may be kept in encrypted backups, accounting records or audit logs for the periods required by law (for example up to 5 years for accounting data).

If you are the owner of a company workspace, deletion of your account may also result in deletion of the company workspace and its members’ access. Please contact us first if you wish to transfer ownership rather than delete the workspace.