Privacy Policy

Adpilotic is run by [Company legal name], [registered address]. This policy explains what personal information we collect through our website and app, how we use it, and the choices you have.

We handle personal information in two roles:

• For our own customers (people who sign up and their teams), we decide how information is used. We are the "controller".
• For our customers' leads and customers (for example someone who fills in a business's ad form or chats with it on WhatsApp), the business decides how the information is used and we process it on the business's behalf. If you are one of those people, please also read the business's own privacy notice and contact the business first.

• Account details: your name, email address and password (stored only as a secure hash), or your basic Google profile if you sign in with Google.
• Business details: your business name, website, products, prices, goals and other information you add or that our AI reads from your website with your permission.
• Data from connected platforms: when you connect Meta, Google, TikTok or a WhatsApp provider, we receive the data needed for the features you use, such as your ad accounts, Pages, campaigns, ads, performance reports, pixels and conversion events, and lead form submissions.
• Leads and messages: contact details and answers from your leads, WhatsApp conversations with them, lead scores and the sales outcomes you record.
• Billing details: your plan, invoices and payment status. Card and bank details are handled by Paystack or Stripe; we do not store full card numbers.
• Usage and device information: pages and features used, IP address, browser type and security logs.
• Messages to us: anything you send when you contact support.

• To provide Adpilotic: build your business profile, recommend and create campaigns, publish the campaigns you approve, and report results.
• To follow up and qualify your leads, including on WhatsApp, and alert your team about serious buyers, as you set up.
• To run the AI features you start, and to show their credit cost before they run.
• To take payments, send receipts and manage your plan.
• To keep the service secure, prevent abuse and fraud, and fix problems.
• To send you service messages and, if you agree, product news (you can unsubscribe at any time).
• To meet legal obligations, such as tax record keeping.

We do not sell personal information. We do not use one customer's data to target ads for another customer.

AI features send the information needed for a task (for example your business details and campaign results) to our AI model provider, which returns a draft or an analysis. Under our agreements, AI providers may not use this information to train their models [confirm for each provider].

Text from outside sources, such as web pages and messages from leads, is treated as information, never as instructions to the AI. AI output can be wrong, so you review it before anything is published.

We connect to Meta, Google and TikTok only through their official sign-in and APIs, and only with the permissions you give. We use the data we receive from them only to provide the features you ask for, such as creating and managing your campaigns, measuring results and receiving your leads. We don't sell it, we don't use it to build advertising profiles for other purposes, and we don't share it except with the service providers who help us run Adpilotic.

You can remove our access at any time from Adpilotic or from the platform's own settings. See how to delete your data.

Google user data

Adpilotic's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we use Google user data (such as your Google Ads accounts, campaigns and reports, and your Google Analytics, Tag Manager and Merchant Center data) only to provide and improve the features you use in Adpilotic. We don't transfer it to others except as needed to provide those features, for security, or to comply with the law. We don't use it for advertising unrelated to your own campaigns, and our staff don't read it unless you ask us to, it is needed for security, or the law requires it.

Meta and TikTok data

We handle data from Meta and TikTok in line with the Meta Platform Terms and TikTok's developer terms, and delete it when you disconnect or ask us to, unless the law requires us to keep it.

When you switch on WhatsApp follow-up, Adpilotic sends and receives messages for your business through the WhatsApp provider you connect, such as Meta's WhatsApp Business Platform. Messages are stored so your team can see the conversation, and the AI reads replies to qualify leads. Businesses must have permission to message their leads; we honor opt-outs such as "STOP" and respect quiet hours you set.

Where data protection laws require a legal reason, such as the Nigeria Data Protection Act 2023 or the GDPR, we rely on: our contract with you (to provide the service); our legitimate interests (to keep it secure and improve it); your consent (for example for marketing emails, which you can withdraw); and legal obligations (for example tax records). [Confirm for each country where you sell]

We share information only with:

• Service providers ("sub-processors") who help us run Adpilotic, listed below, under contracts that protect your data.
• Advertising platforms and WhatsApp providers, when you instruct us to, for example to publish a campaign or send a message.
• Professional advisers, and authorities when the law requires it.
• A buyer or successor if our business is sold or merged, with the same protections.

Sub-processors

[Confirm this list, add each company's name and data location, and keep it up to date]

Our service providers may process information outside your country. When they do, we use safeguards required by law, such as standard contractual clauses. [Confirm the safeguards you use]

• Essential: a secure sign-in cookie keeps you signed in, and security checks protect accounts. The service doesn't work without them.
• Preferences: your browser remembers small settings, such as the last business you opened.
• Bot protection: on sign-up we may use Cloudflare Turnstile, which can set its own cookies to tell people from bots.
• Analytics: [say whether you use website analytics, which tool, and how visitors can opt out]

If you add Adpilotic's tracking code or pixels to your own website, you are responsible for telling your visitors and asking for consent where the law requires it.

• Account and business data: while your account is open, then deleted within [30] days of closing it.
• Leads and messages: until you or your lead deletes them, or your account closes.
• Data from connected platforms: until you disconnect the platform or close your account.
• Security logs: up to [90] days.
• Billing records: as long as tax and accounting laws require, typically [6–7] years.
• Backups: deleted data leaves our backups within [35] days.

We encrypt data in transit, encrypt platform access tokens and other secrets at rest, keep each business's data separate, limit staff access, and record important actions in an activity log. No system is perfectly secure, so we will tell you promptly if a breach affects your data, as the law requires.

Depending on where you live, you can ask to see, correct, export or delete your personal information, object to or limit some uses, and withdraw consent. Email privacy@adpilotic.com and we will reply within [30] days. You can also complain to your data protection authority, such as the Nigeria Data Protection Commission.

If you are a lead or customer of a business that uses Adpilotic, please contact that business first. You can stop WhatsApp messages at any time by replying STOP.

You can ask us to delete your account and data at any time. Step-by-step instructions, including how to remove Adpilotic's access from Facebook, Google and TikTok, are on our data deletion page.

Adpilotic is for businesses and is not meant for anyone under 18. We do not knowingly collect information about children.

We will update this page when our practices change, and tell you by email or in the app before important changes take effect.

Questions or requests about privacy: privacy@adpilotic.com, or write to [Company legal name], [registered address]. Data protection officer: [name and contact, if you have one].