Privacy
Last updated 7 October 2026
This says what [company legal name] collects when you use AdPilot, why, and what you can ask us to do about it. It is written to be read rather than to be survived.
Who this is
AdPilot is operated by [company legal name], [registered address]. Anything in here, including a request to see or delete your data, reaches a person at [contact email].
What we collect
Your account: email address, a name if you give one, and a profile picture if you sign in with Google. Your work: projects, conversations, campaign drafts, and any file you upload. Nothing else is asked for, and there is no tracking pixel anywhere on this site.
Sales requests
If you ask us to contact you about a service, such as the server-side tracking setup, we keep what the form carried (your name, company, email address, phone if you gave one, your store's website and platform, a spend range and your message) and when you agreed to be contacted. We use it only to answer that request. It is not tied to an account and is not deleted with one; write to us at [contact email] and we delete every request sent from your address.
Your Google Ads account
You connect it through Google's own consent screen, and the same goes for Google Tag Manager if you ask us to set up conversion tracking. We never see or store your Google password. The access we are granted is held encrypted, and you can disconnect it at any time from your account settings, which revokes it at Google and deletes our copy of it immediately. Disconnecting keeps the history we built for those ad accounts (weekly summaries, alerts, client reports, recommendations and measurement records), so reconnecting the same Google account brings it back; to delete that history, delete the project that holds the accounts or your whole account, as described under Keeping and deleting.
Google user data
AdPilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: what we read from your Google Ads and Tag Manager accounts is used only to provide the features you use here, it is passed to Anthropic only to produce the answer you asked for, it is never sold, never used for advertising, and never used to train or improve generalized AI models. No person at AdPilot reads it unless you ask us to, it is needed for security, or the law requires it.
Your campaign data
Reports are read from Google at the moment you ask for one. We do not keep a mirror copy of your campaigns. What we do store is what you built here: drafts, the validation run against them, and the record of what was deployed and when.
Models
Answering you means sending the conversation, and any file attached to it, to Anthropic. Anthropic is our sub-processor: it processes them under its commercial terms only to produce the reply, and under those terms it does not train its models on what we send. We also keep a log of each request to the AI model and its answer, so we can fix errors, keep track of what each request costs and measure whether the answers are getting better. Before a request is logged we mask the personal details we can recognise in it, such as email addresses, phone numbers, identity numbers, bank account and card numbers, and ad click identifiers. This log is never used to train AI models, ours or anyone else's. Only our own staff can read it, it is never sold or shared with another customer, it is deleted with the project it belongs to, and once our retention policy is in force it is kept for at most 12 months.
Cookies
Only the ones the site needs to work, all first-party: your session, readable only by the server; a short-lived one that protects a Google sign-in from being forged; and three that remember your choices, the language, the project you had open and whether the sidebar is collapsed. There is no advertising cookie, no third-party analytics and nothing optional to consent to, which is why this site does not ask.
We write to you about your account: a link to reset your password, a link to confirm deleting an account that has no password, and a note once an account is deleted. If you turn them on for an ad account, we also send the weekly summary, a daily mail when something critical needs you, and a monthly client report. A project's owner gets one warning per billing period when a plan limit is close. When you create an account we send one welcome email, and the owner of a project on a trial gets a reminder three days before it ends and on its last day; both can be turned off from your account page or from the link in the email itself. Every recurring mail carries an unsubscribe link that never expires and needs no login. If you ask the free conversion checker to mail you its full report, we use that address to send the report and nothing else. Invitations to a project are links the person inviting you sends themselves; we do not mail them.
Who else touches it
Google, to read and write the ad accounts you connect. Anthropic, as our sub-processor, to produce the answers. Our hosting provider, to run the servers. Paddle.com, our reseller and merchant of record, takes payments and keeps the billing records that go with them. Resend sends our email. Nobody else, and no data broker ever.
Keeping and deleting
Delete your account yourself from your account settings, or ask at [contact email] and we will. It deletes your profile, your sign-in methods, the projects you own on your own and everything in them, and hands the Google access you gave us back to Google. The same screen downloads a copy of your data first, and a project's owner can delete a single project from its settings. Payment records outlive the account without your name on them, because accounting rules require it and revenue that disappears cannot be reconciled. Deleting here does not touch anything already live in your own Google Ads account, which is yours and stays yours.
Changes
If this changes in a way that matters, the date at the top moves and we write to you. Silence is not how we would tell you something important.