Privacy Policy

1. What we collect

Account data. Email address, full name (optional), encrypted password, and a profile created on signup.

Payment data. When you purchase a subscription or credits, our payment provider Stripe processes your card details. We do not see or store your card number, CVV, or expiry. We retain the provider's transaction reference and the payment status so we can credit your account and provide receipts on request.

Content you submit. Product descriptions, scripts, prompts, uploaded images and videos, and any other inputs you provide to generate ads.

Generated output. Videos, image ads, scripts, and other artefacts the Service produces for you.

Operational data. Logs of API calls, credit transactions, error logs, and basic device/browser information used to operate, secure, and debug the Service.

2. How we use it

We do not sell your personal data, and we do not use your private inputs or outputs to train our own foundation models.

• To provide the Service: authentication, generation, account management.
• To process payments and maintain billing records.
• To improve and secure the Service, including troubleshooting, fraud detection, and abuse prevention.
• To communicate with you about your account, transactions, and important changes to the Service or these terms.
• To comply with legal obligations.

3. Third-party processors

We rely on the following providers to operate the Service. Each receives only the data necessary for its function and is bound by its own privacy and security commitments:

• Supabase — managed Postgres database and authentication.
• Vercel — application hosting and edge delivery.
• Stripe — payment processing, card data handling, and subscription billing.
• Third-party AI service providers — generation, editing, and research models we license to power the Service.
• ScrapeGraphAI and Firecrawl — public-URL content extraction when you ask the Service to scrape a product page.

4. Cookies and local storage

We use a small number of strictly necessary cookies and browser local storage entries to keep you signed in and to remember UI preferences. We do not use third-party advertising or tracking cookies.

5. Data retention

We retain your account data while your account is active, and for up to six months after account deletion to comply with legal, accounting, and fraud-prevention obligations. Generated content and credit-transaction records may be retained longer where required by law.

6. Your rights

You have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your account and associated data, subject to the retention period above;
• export your generated content;
• object to or restrict certain processing.

7. Security

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, restricted internal access, and audit logging. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

8. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

9. International data transfers

Our infrastructure providers operate globally, so your data may be processed outside your country of residence (typically in the United States or the European Union). Where such transfers occur, we rely on the providers' standard contractual safeguards.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated in-app or by email.

11. Contact

Privacy and data-protection questions: support@winningadz.app or +20 115 165 5911. Winning Adz LLC, 1209 Mountain Road Place NE, Ste N, Albuquerque, NM 87110, United States.