Adjectory Privacy Policy

The following is stored in our database and file storage, hosted on Google Cloud / Firebase in the United States:

• Account information: your email address, display name, company name if you give one, and sign-in identifiers. If you sign in with Google, we receive your name, email and profile picture from Google and nothing else.
• What you submit: product links, the photos you upload, product details, extra notes, and the format and style options you choose.
• What we generate: scripts, captions, compliance notes, images, video, voice and music for each ad, plus the intermediate files used to build it.
• Billing records: your credit balance and a ledger of credits added and spent, your plan, and the payment and invoice records Stripe sends us. We never receive or store full card numbers.
• Share links: if you create one, a random token that lets anyone with the link view that ad until you turn it off.
• Usage counters and logs: how many research requests you've made each day, and technical logs of job progress and errors, which can include product names and script lines.

Adjectory is built on third-party AI models. When you generate an ad or use research and autofill, the parts of your submission needed for that step are sent to the providers in Section 4, and only then. There is no background analysis of your account.

• We use these providers through their business APIs to deliver the service, not to train models on your data. Where a provider offers a setting to opt out of training, we turn it on. Their handling of requests is otherwise governed by their own terms.
• When you paste a link, we fetch that public page the way a browser would. When you use research, the AI searches and reads public web pages about your product. We show you the sources it used.
• Don't upload photos of people, or any personal or confidential information you wouldn't want processed this way. Adjectory is designed for product photos and product facts.

• To provide the service: making your ads, showing you your history, charging and refunding credits, sending you service messages.
• To keep the service working and safe: debugging failed jobs, preventing abuse of free credits and payments, enforcing our Terms.
• To improve Adjectory, using aggregate patterns such as which formats are used and where jobs fail.

We do not sell your data. We do not use advertising or cross-site tracking. We won't feature your products or ads in our own marketing unless you say yes. People at Capralis look at your ads or inputs only when you ask for support, when a job fails and needs debugging, to investigate abuse or security issues, or when the law requires it.

We'll update this list before we add a provider that handles your data.

Adjectory uses one first-party cookie to keep you signed in, and your browser stores sign-in state for Firebase Authentication. Stripe sets its own cookies on its checkout and billing pages. We don't use advertising cookies.

• We keep your inputs and ads for as long as your account exists, so you can download them again or make more from them.
• To delete a specific ad, its files, or your whole account, write to privacy@adjectory.ai from your account email. We'll delete within 30 days. Provider-side copies are handled under each provider's retention policy, which is typically short.
• We keep billing and tax records for as long as the law requires, even after account deletion.
• Technical logs expire on a rolling basis, typically within 30 days.

All data in transit is encrypted (TLS), and data at rest is encrypted by Google Cloud. Access is enforced on the server: your jobs, files and billing records are readable only by your account, and credit balances can only be changed by our servers. Files are served through expiring signed links. API keys and secrets are held in Google Secret Manager, not in code.

No system is perfectly secure. If we learn of a breach affecting your data, we'll notify you without undue delay. To report a vulnerability, write to security@adjectory.ai.

Wherever you live, you can ask us for a copy of your data, to correct it, or to delete it, by writing to privacy@adjectory.ai. If you are in the EEA, the UK or a US state with a privacy law, you have the rights that law gives you, including access, deletion, correction, portability and objection, and we won't treat you differently for using them. We don't sell or “share” personal information as those terms are defined in California law.

Adjectory is operated from the United States, and your data is processed there.

Adjectory is a business tool for adults. It is not directed at anyone under 18, and we don't knowingly collect data from children.

We'll post changes here and update the date above. Material changes will be announced in the app or by email at least 14 days before taking effect.