Privacy policy

Last updated 18 October 2026

Draft for review: this text describes how the product actually handles data. Have it checked by a solicitor and add your registered company details and ICO registration number before launch.

Who we are

AdForge is operated by Prime Automate Systems ("we"). We are the controller of the personal data described below. Contact: hello@adforge.ai.

What we collect and why

• Account: email, name, password (stored hashed by our authentication provider). To run your account.
• Business and campaign content: brand profiles, offers, copy, images and videos you create or upload, and the results of your campaigns. To provide the service.
• Ad account access: when you connect Meta or TikTok we store an access token (encrypted) and the IDs of the ad account and Page you choose. To create campaigns and read results for you.
• Billing: handled by Stripe. We receive your plan and payment status, never your card number.
• Usage: a record of credit use (what you ran and when) so we can show your history and refund failures.
• Testimonials you enter: you confirm you have the customer's permission to use their words and name.

Legal bases: performing our contract with you; our legitimate interest in keeping the service secure and preventing abuse; and legal obligations (tax records).

Who processes data for us

We use these service providers (processors) only to deliver the product:

• Supabase: database, authentication and file storage
• Vercel: hosting
• Anthropic: writes your ad copy and campaign advice from the details you give us
• FAL.ai: generates ad images from your prompts
• ElevenLabs: turns your video script into a voiceover
• HeyGen: renders avatar videos from your script and voiceover
• Resend: sends our emails
• Stripe: payments
• Meta and TikTok: receive the campaigns, images and videos you choose to launch, under their own privacy terms

Some of these providers are outside the UK. Where personal data is transferred we rely on the UK's approved transfer mechanisms (such as the UK addendum to standard contractual clauses or an adequacy decision).

How long we keep it

While your account is open. When you delete your account we erase your content and account straight away; we keep invoices and payment records for as long as UK tax law requires (currently 6 years). Backups are overwritten on their normal cycle.

Your rights

You can access, correct, export and delete your data. In Settings, "Download my data" gives you a copy and "Delete my account" erases it. You can also object to or restrict processing, and withdraw consent where we rely on it, by emailing hello@adforge.ai. You may complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use only the cookies needed to keep you signed in and to protect connecting your ad accounts. We do not use advertising or analytics cookies.