This Privacy Policy explains how AdTag (“AdTag,” “we,” “us”) handles personal information when you visit adtag.app or use the AdTag application (together, the “Service”). It applies to website visitors and to people who create or use an AdTag account.

AdTag is operated by AdTag Inc. For privacy questions, contact privacy@adtag.app.

We handle data in two capacities:

• For account and website information, AdTag is the data controller.
• For the advertising data, metrics, and creative assets a customer uploads or connects (“Customer Data”), AdTag acts as a data processor, processing it only on the customer’s instructions to provide the Service.

If your information appears inside Customer Data, the agency or business that controls that workspace is responsible for it — please direct requests to them.

• Account information — name, email, job title, organization, and authentication details when you register or are invited.
• Customer Data — ad metadata, creative tags, performance metrics (e.g., spend, impressions, leads, bookings, revenue), and creative descriptions you upload or connect through integrations.
• Usage data — log and device information such as IP address, browser type, pages viewed, actions taken, and timestamps.
• Cookies — strictly necessary cookies to keep you signed in and operate the Service (see Section 9).

• Provide, operate, and secure the Service and generate evidence-based recommendations.
• Authenticate users, prevent abuse, and maintain workspace isolation.
• Provide support, send service communications, and improve features.
• Comply with legal obligations and enforce our terms.

We do not sell personal information, and we do not use Customer Data to advertise to you.

AdTag can improve recommendations using patterns learned across customers, but only where a customer opts in. Pooled learning uses de-identified, thresholded, derived features — never raw ads, identifiable metrics, or creative assets, which stay within their workspace.

• Service providers (subprocessors) — including our hosting and compute provider (Vercel) and managed database provider (Supabase), bound by data-protection terms and acting on our instructions.
• Legal and safety — where required by law or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to this policy.

We keep account and usage information for as long as your account is active and as needed for legitimate business or legal purposes. Customer Data is retained under the customer’s instructions and deleted or returned within a reasonable period after account termination, except where retention is legally required.

We use workspace isolation, role-based access controls, encryption in transit, and least-privilege access. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our controls. See our security overview.

We use strictly necessary cookies for sessions and security. If we add optional analytics in the future, we will update this policy and, where required, request your consent.

We may process information in countries other than yours, including Canada and the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict use of your personal information, and to withdraw consent. To exercise these, email privacy@adtag.app. These rights are described in laws such as the EU/UK GDPR, California’s CCPA/CPRA, and Canada’s PIPEDA. If your data sits inside a customer’s workspace, we will refer your request to that customer.

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16.

We may update this policy from time to time. We will post the new version here and update the “last updated” date; for material changes we will provide additional notice where required.

Questions or requests: privacy@adtag.app.