AdRadar / Privacy policy
Privacy policy
What we collect about you, why, who processes it, how long we keep it and how to exercise your rights. Written to be read, not skimmed.
- Who we are
- What we collect about you
- Why we use it
- Data about the companies you follow
- Who we share it with
- How long we keep it
- Your rights
- Cookies and analytics
- Security
- International transfers
- Children
- Changes
- Contact
This policy explains what AdRadar collects about you when you use the website at adradar.digital, the application at app.adradar.digital, the API and the MCP server, and what we do with it. Short version: we keep what we need to run your account and bill you, we do not sell it, and you can ask us to delete it.
Who we are
AdRadar is operated by Alex Bobko (“AdRadar”, “we”). We are the controller of the personal data described here. Contact: [email protected].
What we collect about you
Account and organization
Your name and email address, your sign-in method (email and password, or a social sign-in such as Google) and the organization you belong to and your role in it. Sign-in is handled by Clerk; we never see your password.
What you put into the product
The projects, your own domain, the competitors you follow, the pages and queries you ask us to watch, alert settings, the names you give API keys, and the integrations you connect (Slack, Telegram, email, webhooks). Integration secrets are stored encrypted.
Billing
Payments are taken by Stripe. We store your Stripe customer and subscription identifiers, your plan and the dates of your billing period. We do not store card numbers.
Usage and technical data
Server logs with your IP address, browser or client, the pages and API routes you call and when, and error reports. For the API and the MCP server we record which key or which signed-in person made a request and when it was last used. We also use Google Tag Manager and Google Analytics on the website and in the application (see Cookies and analytics).
Messages you send us
Email you send to our contact address, including takedown and correction requests, and the address you send it from.
Why we use it
- To provide the service: run your account and organization, follow the competitors you chose, send the alerts and reports you asked for, answer your assistant’s requests over MCP, and bill you (performance of our contract with you).
- To keep the service working and safe: rate limits, abuse prevention, debugging, backups (our legitimate interest in running a reliable service).
- To understand how the website and the application are used, with analytics (your consent where the law requires it, otherwise our legitimate interest).
- To write to you about your account, your plan and material changes to the service or to this policy (contract and legitimate interest). We do not send marketing email without your consent.
- To comply with law and to handle takedown requests and disputes.
Data about the companies you follow
AdRadar collects information about the companies you follow from public sources: the ad libraries of Meta, Google, LinkedIn and TikTok, public review sites and Reddit, the companies’ own websites and sitemaps, and search results. This is information those companies and platforms publish. It can include the names of people who wrote public reviews or appear in ads. We show it for analysis and comparison, with a link to the original, and we do not use it to build profiles of individuals. AI models process ad text, transcripts and reviews to produce labels, digests and reports; see subprocessors for which ones.
If you represent an advertiser or a person named in that data and want something removed or corrected, see takedown and corrections. We act within 72 hours.
Who we share it with
We share personal data only with the providers that help us run the service, each for a stated purpose and under a contract: authentication, hosting, payments, email delivery, data providers, AI models and analytics. The current list is on the subprocessors page. We also disclose data when the law requires it, and to a successor if AdRadar is sold or merged, in which case this policy continues to apply.
We do not sell personal data and we do not share it with advertisers.
Members of your organization see the organization’s data according to their role. An AI assistant you connect to the MCP server reads your organization’s data on your behalf; what that assistant does with it is governed by the assistant’s own terms.
How long we keep it
- Account and organization data: as long as the account exists. When you delete your account, or ask us to, its data is removed from the live database at once and from backups within 14 days, which is how long backups are kept.
- Billing records: as long as tax and accounting law requires.
- Server logs and error reports: a short rolling period for troubleshooting, then deleted.
- The public data about companies you followed stays in our catalog after you leave, because other customers may follow the same companies. It is not linked to you.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict or object to how we use it, and take your data with you. Where we rely on consent you can withdraw it at any time. Write to [email protected] from the address on your account; we answer within 30 days. If you are in the EU or UK you can also complain to your data protection authority.
Most of this you can do yourself: your profile and sign-in methods in the account menu, members and keys in Settings, your plan and invoices in the billing portal.
Cookies and analytics
The application sets the cookies Clerk needs to keep you signed in. The website and the application load Google Tag Manager, which loads Google Analytics: it sets cookies and sends Google the pages you open, your approximate location and a device identifier so that we can see how the product is used. Where the law requires consent, these tools run only after you give it. You can block them in your browser or with an extension; the product works without them.
Security
Traffic is encrypted in transit (HTTPS). API keys are stored as hashes and shown once. Integration secrets are encrypted at rest. Access to the servers is by key only. Daily backups are kept for 14 days. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the authorities as the law requires.
International transfers
Our servers are in Germany. Some providers are in the United States; where personal data goes there, it is covered by the provider’s standard contractual clauses or an equivalent safeguard. The subprocessors page names the location of each.
Children
AdRadar is a business tool and is not meant for anyone under 16. We do not knowingly collect data from children.
Changes
When we change this policy we update the date at the top. For a material change we also tell you by email or in the application before it takes effect.