Privacy Policy

1. What we collect

• Account data: your name, email address and authentication identifiers.
• Workspace data: organizations, brands, campaigns, content, media and schedules.
• Connected account data: the profile identifiers and access tokens the social platform issues when you authorise a connection.
• Operational data: audit logs, publishing attempts and AI usage counters.

2. How we use it

To operate the service: generating content, storing your library, scheduling and publishing posts on your instruction, enforcing plan limits, and investigating errors and abuse. We do not sell your data or use your content to train third-party models beyond what is required to fulfil a generation request you initiated.

3. Social account credentials

Access and refresh tokens are encrypted with AES-256-GCM before they are stored, are never sent to your browser, and are only decrypted on our servers to perform an action you scheduled. Disconnecting an account deletes its stored credentials.

4. Data isolation

Every record belongs to an organization. Database row-level security scopes reads and writes to organizations you are a member of, so another customer cannot reach your data even with a valid session.

5. Sub-processors

• Cloud hosting and managed database, for application and data storage.
• AI model providers, to fulfil generation requests you initiate.
• The social platforms you choose to connect.

6. Retention and deletion

Deleted content is soft-deleted first so it can be recovered, then removed. You can request full deletion of your organization and its data at any time by emailing support@adpilot.com; we complete verified requests within 30 days.

7. Your rights

Depending on your location you may request access, correction, export or erasure of your personal data. Contact support@adpilot.com and we will verify and act on the request.

8. Contact

Privacy questions: support@adpilot.com. Security reports: security@adpilot.com.