Privacy Policy

Our privacy policy and how we use your data

Last updated: August 31, 2026

This Privacy Policy explains how AdGreetz, Inc. ("AdGreetz", "we", "us") collects, uses, and shares information when you use Adchef AI, our platform for generating advertising creative from your brand assets (the "Service"), and when you visit our websites. Where you upload content containing personal information about other people (for example, photos or likenesses used for persona features), you are the controller of that data and we process it on your behalf to provide the Service.

1. Information We Collect

  • Account data. Name, email address, password credentials (stored by our authentication provider), company and team information, and role/permission settings.
  • Billing data. Subscription plan, credit balances, and transaction history. Payment card details are collected and processed directly by Stripe; we do not store full card numbers.
  • Uploaded brand assets. Content you submit to the Service — logos, product images, photos, video, audio, brand guidelines, and likenesses — which may include personal information of people appearing in it.
  • Generated content. The images, videos, and other creative the Service produces for you, along with the prompts and settings used to produce it.
  • Usage and telemetry data. Log data, device and browser information, IP address, feature usage, credit consumption, and diagnostic events, used to operate, secure, and improve the Service.
  • Cookies and similar technologies. Essential cookies for authentication and session management, and — where enabled — analytics cookies. See our Cookie Policy for details.

2. How We Use Information

We use the information we collect to provide and operate the Service (including generating the creative you request); to manage accounts, subscriptions, and credits; to provide support; to monitor, secure, and improve the Service; to communicate with you about the Service; and to comply with legal obligations. We do not use your uploaded brand assets or generated content to train our own models without your agreement.

3. Service Providers and Processors

We share information with service providers that process it on our behalf under contractual safeguards, including:

  • Supabase — database, authentication, and file storage.
  • Stripe — payment processing and billing.
  • Vercel — application hosting and content delivery.
  • AI model providers — content you submit for generation (assets, prompts, and related context) is transmitted to and processed by third-party AI model providers in order to produce your requested output. These providers process the content as our processors for generation purposes, subject to their own service terms.

We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case this policy will continue to apply to the transferred data unless you are notified otherwise).

4. No Sale of Personal Data

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).

5. Data Retention

We retain account data for as long as your account is active and as needed afterward to comply with legal, tax, and accounting obligations. Uploaded assets and generated content are retained while your account is active so you can continue to use them, and are deleted or de-identified within a reasonable period after account deletion, except where retention is required by law or needed to resolve disputes. Usage logs are retained for a limited period for security and audit purposes.

6. Your Rights (GDPR and CCPA)

Depending on your location, you may have rights to access, correct, delete, or export your personal information; to restrict or object to certain processing; to withdraw consent where processing is based on consent; and to not be discriminated against for exercising these rights. If you are in the European Economic Area or United Kingdom, our processing is based on contract performance, legitimate interests, consent, or legal obligation, as applicable, and you may lodge a complaint with your supervisory authority.

To exercise any of these rights, contact us at legal@adgreetz.com. We will verify your request and respond within the timeframe required by applicable law. If you appear in content uploaded by one of our customers, we may direct your request to that customer, who controls that content.

7. Data Processing Agreement

For customers that require one, a Data Processing Agreement (DPA) covering our processing of personal data on your behalf — including our use of subprocessors — is available on request at legal@adgreetz.com.

8. International Transfers

We are based in the United States and process data there and in other countries where our service providers operate. Where required by law, transfers are protected by appropriate safeguards such as standard contractual clauses.

9. Security

We use administrative, technical, and organizational measures appropriate to the risk — including encryption in transit, role-based access controls, and tenant isolation — to protect your information. No system is perfectly secure; please use a strong, unique password and notify us of any suspected unauthorized access.

10. Children

The Service is a business tool and is not directed to individuals under 18. We do not knowingly collect personal information from them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or in-product notice before they take effect, and the "Last updated" date above will be revised.

12. Contact

Privacy questions and requests: legal@adgreetz.com.