Privacy Policy
Last updated: [date]. This policy explains what [Company legal name] ("Digaddy") collects and why.
What we collect
- Account details: name, email address, and the organizations and roles you belong to.
- Business information you enter: business name, description, contact details, website, social handles and approved facts.
- Files you upload: logos, product shots and reference photos.
- The ads we create for you, their review scores, and your ratings and downloads.
- Billing records from Stripe (we never see or store full card numbers).
- Technical data: IP address, browser, and error reports, used for security and to fix problems.
How we use it
To create and deliver your ads, run your account and billing, keep the service secure, and improve ad quality. To make an ad, your business information and files are sent to the AI providers listed below, which process them on our behalf. The engine may also look up your business's public website to check facts.
Who processes it
- Clerk: sign-in and team accounts
- Stripe: payments and invoices
- Supabase: database and file storage
- Vercel: website hosting
- Railway: ad engine hosting
- Anthropic: AI planning, research and quality review of ads
- OpenAI: AI image generation
- Google: backup AI image generation
- Resend: account emails
- Sentry: error tracking
[Confirm each provider's data retention and training settings, and where data is stored.]
Support access
Digaddy staff can view an organization's account to help with support requests. Every such session is time-limited and recorded in an audit log.
Retention
We keep your data while your account is active and for [period] afterwards, unless the law requires longer (for example invoices). You can ask us to delete your account and data at [privacy email].
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to some processing. Contact [privacy email]. [Add GDPR/CCPA specifics as applicable.]
Cookies
We use only the cookies needed for sign-in, your selected organization and security. [Update if analytics are added.]
Contact
[Company legal name], [address], [privacy email].