Privacy Policy

1. Information We Collect

Account Information

When you create an account we collect your name and email address, and we maintain your subscription plan, usage and quota information, authentication and session information, and any customer support communications you send us.

Competitor Research Data

When you research a brand, we collect the Facebook Page URLs or competitor brands you choose to analyze and retrieve their publicly available ads from the Meta Ad Library, which is public transparency data. This research does not access any private or non-public account information.

Authentication and Connection Data

If you connect your own Meta ad account through Facebook Login for Business, we collect and store the authentication data needed to provide the service, including an OAuth access token (and refresh token, if provided), the granted scopes, and the connection status. Access tokens are encrypted at rest. We never receive or store your Facebook password.

Connected Ad Account Data

For an account you connect, we collect account metadata such as the Meta ad account ID, account name, and account status, and (when you launch a campaign) the identifiers of campaigns, ad sets, creatives, and ads we create on your behalf.

Campaign, Creative, and Performance Data

Using the ads_read and ads_management permissions you grant, and only within the account you connect, we process:

• campaign structure and settings, including names, objectives, statuses, and daily budgets;
• campaign performance metrics such as spend, impressions, and clicks; and
• for the “clone and launch” feature, the ad creative (image, copy, and destination link) that you choose to launch.

We create, update, pause, and resume campaigns and budgets only in response to your explicit, confirmed instructions, and new campaigns are always created paused so nothing spends until you choose to run it.

Tool Usage and Diagnostic Data

When you use adWhispr through our dashboard, our API, or an AI client such as Claude or ChatGPT, we collect technical and usage data needed to run and secure the service, including the tool invoked, the parameters needed to fulfill your request, timestamps, request and response status, error messages, quota usage, and logs used for security, debugging, reliability, and billing. We do not collect your full conversations with AI clients except for content you send to adWhispr as part of a request (for example, a message in our chat feature or a tool parameter).

2. How We Use Information

We use information to:

• create, authenticate, and manage your account;
• analyze public Meta Ad Library data and generate competitor insights, briefs, and ad clones;
• connect to the Meta ad account you authorize and to AI clients you use;
• read and report on your campaign structure and performance;
• create, update, pause, and resume your campaigns when you request or confirm it;
• maintain your plan, usage limits, and billing state;
• provide support, secure the service, prevent abuse, and troubleshoot issues;
• understand how the service is used, including reviewing interactions with our in-app agent, so we can improve and develop our features; and
• comply with legal obligations and enforce our terms.

3. How We Share Information

We do not sell your personal information. We share information only as needed to operate adWhispr.

Meta (Advertising Platform)

We exchange data with Meta to retrieve campaign and performance data and to create or update campaigns, ad sets, creatives, and budgets in the account you connect. Meta's own privacy policy and terms apply to its processing of data.

AI Clients

When you use adWhispr through an AI client (such as Claude or ChatGPT) via our MCP server, we return tool results to that client so it can display them in your conversation. Your use of any AI client is also governed by that client's own privacy policy. Your Meta access tokens are never returned to the AI client or model.

Service Providers

We use service providers to operate adWhispr, including cloud hosting and compute (Vercel), database and storage (Neon), AI processing (Anthropic, OpenAI, and Google for image generation), authentication (Clerk), payments (Stripe), email delivery, and product analytics. These providers process information only as needed to provide services to us.

Legal, Safety, and Compliance

We may disclose information if we believe it is necessary to comply with law, enforce our agreements, protect the rights, property, or safety of adWhispr and our users, or detect and prevent fraud, abuse, or security incidents.

4. Data Retention

We retain information only as long as reasonably necessary to provide the service and meet legal, security, and billing obligations:

• Account information: retained while your account is active and for a reasonable period afterward.
• OAuth tokens and connected account data: retained until you disconnect the account, revoke access, delete your account, or the token expires, and deleted immediately on disconnect.
• Campaign and performance data: retained while your account is active to power reporting and recommendations.
• Tool logs and diagnostics: retained for security, reliability, debugging, and abuse prevention.
• Billing and legal records: retained as required by law.

Backups may retain deleted data for a limited period before automatic deletion.

5. Your Controls and Choices

You can:

• disconnect a connected Meta ad account at any time from Settings → Connected Ad Accounts, which immediately revokes our access and deletes the stored token;
• revoke adWhispr's access from Meta's side under your Facebook settings (Settings → Security → Business Integrations);
• request access to, correction of, deletion of, or export of your information; and
• delete your account and associated data.

To make a privacy request, contact us at privacy@adwhispr.com. We may need to verify your identity before fulfilling certain requests.

6. Security

We use administrative, technical, and organizational safeguards to protect information, including HTTPS/TLS encryption in transit, encryption at rest for access tokens (AES-256-GCM), OAuth-based authorization, access controls and least-privilege permissions, and logging and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Advertising Platform Credentials

adWhispr does not collect or store your Meta password. When you connect a Meta ad account, authorization is handled through Facebook Login for Business using OAuth. You can revoke access through adWhispr or through your Meta account settings at any time.

8. International Processing

adWhispr is operated by Haute Salute LLC in the United States. We and our service providers may process and store information in the United States and other locations where they operate. If you use adWhispr from outside the United States, your information may be processed in countries with different data protection laws.

9. Children's Privacy

adWhispr is not intended for children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us at privacy@adwhispr.com.

10. Third-Party Services

adWhispr integrates with third-party services, including Meta (Facebook and Instagram) and AI clients such as Claude and ChatGPT. Your use of those services is governed by their own privacy policies and terms, and we are not responsible for their practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by updating the “Last updated” date. Your continued use of adWhispr after an update means you accept the updated policy.

12. Contact Us

For questions or privacy requests, contact:
Haute Salute LLC, d/b/a adWhispr
Email: privacy@adwhispr.com