Privacy Policy

01Who we are and scope

Adgent is an AI marketing-intelligence service for performance marketers. It reads the advertising and analytics accounts you connect, tells you what is working and what is not, answers your questions, and — when you approve it — applies changes back to those accounts.

This policy covers the Adgent website and the Adgent application. It applies to two broad groups of information: (1) information about you as a user or prospective user of Adgent, and (2) the data we access from the platforms you connect on your behalf. It does not govern the platforms themselves — your use of Meta, Google and related services remains subject to their own terms and privacy policies.

02Information we collect

Information you give us

• Account & contact details — your name, work email, company, role, and similar details you provide when you request a demo, sign up, or contact us.
• Communications — messages you send us, including support requests and the questions you ask the Adgent assistant.
• Billing details — where you hold a paid plan, billing contact information and payment status (card processing is handled by our payment provider; we do not store full card numbers).

Information we collect automatically

• Usage & device data — log data such as IP address, browser type, pages viewed, and actions taken, used to operate, secure, and improve the service.
• Cookies & similar technologies — necessary cookies support sign-in, security, and remembering your cookie choice. On our website, Google Analytics and Google Tag Manager stay off unless you enable the optional analytics or advertising categories. If you enable the advertising category, Google Tag Manager also loads Microsoft Clarity, which records how our website pages are used (clicks, scrolling, heatmaps and session recordings) so we can improve the website. You can change or withdraw your consent at any time through Cookie settings in the footer.

Connection credentials

When you connect a platform, we receive and store authorization tokens (for example, OAuth access and refresh tokens) that let Adgent access that account on your behalf. We never ask for, collect, or store your platform passwords.

03Connected platform data

With your authorization, Adgent accesses data from the platforms you connect. The data we read depends on which platforms you connect and the permissions you grant, and may include:

• Advertising platforms (Meta, Google) — account, campaign, ad set, and ad structure; budgets, bids, and settings; performance and delivery metrics (such as spend, impressions, clicks, conversions, ROAS, CPA, CPM, placements, and audiences). Where you grant execution access, we can apply changes you approve, such as adjusting budgets, pausing or editing campaigns, or building new campaigns.
• Google Analytics 4 — aggregated traffic, engagement, and conversion reporting, used to give your advertising data on-site context.
• Google Search Console — search performance reporting such as queries, clicks, and impressions for properties you authorize.
• Google Merchant Center — product catalogue entries, item issues, account status, and Shopping performance for the account you select, used to diagnose Shopping campaigns against your product feed. Adgent only reads this account; it never creates, changes, or deletes anything in it.
• Google Drive and Google Sheets — the content and metadata of files that you select or create for use with Adgent, used to import or export reports and provide business context. Adgent cannot browse or access other files in your Drive through this permission.

We request only the access needed to provide the features you use. We do not request access to data we do not need, and we do not "future-proof" by requesting access to data for features that do not yet exist.

04How we use information

We use information solely to provide, secure, and improve the user-facing features of Adgent. Specifically, we use it to:

• Analyze your connected accounts and produce briefs, health scores, anomaly alerts, and reports;
• Answer your questions about your accounts and generate the reports and audits you request;
• Prepare recommended changes and, on your explicit approval, apply them to your connected accounts;
• Provide support, communicate with you about the service, and manage billing;
• Maintain the security, integrity, and reliability of the service, and detect and prevent fraud or abuse;
• Comply with legal obligations.

Our use of data accessed through platform APIs is limited to the practices described in this policy. Before accessing a type of Google user data not previously disclosed, or using Connected Platform Data for a new or different purpose, we will update this policy, notify affected users, and obtain consent where the connected-platform rules or applicable law require it.

05Limited use & AI commitments

We hold ourselves to strict limits on what we do with the data we access on your behalf. We do not:

• Sell or transfer your data to third parties such as advertising platforms, data brokers, or information resellers;
• Use your data for serving advertising, including retargeting, personalized, or interest-based advertising;
• Use your data to determine credit-worthiness or for lending purposes;
• Allow humans to read your data, except with your affirmative consent (for example, for support you request), where necessary for security or to investigate abuse, to comply with law, or where the data has been aggregated/de-identified and is used for internal operations;
• Use your Connected Platform Data to train generalized or non-personalized artificial-intelligence or machine-learning models.

Adgent uses AI to analyze and reason over your data in order to deliver the service back to you. At the model provider, your data is processed transiently: it is used to generate your briefs, answers, and reports and is not retained once the request completes. On our own infrastructure we keep a session record — the question asked, the answer returned, and the tool calls behind it — for up to 30 days, so that we can diagnose faults and investigate abuse. That record is deleted on that schedule, or sooner if you submit a verified deletion request. Your data is not used to train foundation models or models for the benefit of any other customer.

The AI provider that processes your data is configured not to train on it: we route only to inference endpoints that publish a no-training and zero-data-retention commitment, prompt logging is disabled on our account, training-permitted endpoints are excluded at the account level, and every request carries an explicit no-training flag. Your data is never used to create, train, or improve any generalized or foundational AI/ML model — by us or by our providers.

OAuth access and refresh tokens are never included in AI prompts or sent to AI model providers. Each customer's Connected Platform Data is maintained separately and is not used to provide or improve the service for another customer or advertiser.

06Legal bases

Where the GDPR or similar laws apply, we process personal data on the following bases: performance of a contract (to provide the service you sign up for); legitimate interests (to secure, maintain, and improve the service, where not overridden by your rights); consent (for example, when you authorize a platform connection or opt in to non-essential cookies); and legal obligation (to comply with applicable law). You may withdraw consent at any time.

07How we share information

We do not sell your data. We share it only as needed to run the service:

• Service providers (sub-processors) — trusted vendors that help us host, operate, secure, and support Adgent, including cloud infrastructure providers and the AI model provider that processes data to generate your results. They may only process data on our instructions and to provide their service to us, and are contractually required to protect it and delete it when no longer needed.
• The platforms you connect — when you approve a change, we send the corresponding instruction to that platform's API to carry it out.
• Legal & safety — where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Adgent, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to the protections of this policy and with notice to affected users. Data received from Google APIs will not be transferred as part of a business transfer without your explicit prior consent.

08Data retention

We keep information only as long as needed to provide the service and for legitimate legal, security, and operational purposes. Disconnecting or revoking a platform connection stops new access but does not, by itself, delete data already stored by Adgent. Connected Platform Data is deleted when it is no longer necessary to provide the service, when you submit a verified deletion request, or when permanent account deletion completes — subject to limited retention required by law. AI session records kept for fault diagnosis and abuse investigation are deleted within 30 days. You can request deletion at any time as described below.

09Your rights & data deletion

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. We give every user an easily accessible way to exercise these rights:

• Disconnect at any time — disconnecting a platform in Adgent stops further use of that connection and new scheduled collection. To revoke the OAuth grant itself, remove Adgent from the platform's app or permission settings.
• Request correction or deletion — follow our data-deletion instructions or email osman@adgent.app, and we will action your request without undue delay.
• Delete company data or your account — the in-product company-deletion control closes access to that company immediately and marks its connections disconnected. Deletion of the stored data is then automated: a scheduled job picks up verified deletion requests every hour and removes them from our active systems, with no manual step. You can also request removal of stored company data or your Adgent login account through our data-deletion instructions. Limited records may be retained where required by law.

We will not charge you to exercise these rights, and we will not discriminate against you for doing so. If you are in the EEA or UK and have an unresolved concern, you may contact your local data protection authority.

10Security

We take reasonable and appropriate measures to protect data against unauthorized access, use, alteration, loss, or disclosure. These include encryption of data in transit and at rest, access controls and least-privilege practices, protection of access tokens and application secrets, and monitoring. We provide a clearly marked way to report security concerns, and we begin remediation and notify affected parties as required by law if an incident occurs. No method of transmission or storage is completely secure, but we work to protect your data and continually improve our safeguards.

11International transfers

We may process and store information in countries other than your own, including where our service providers operate. Where personal data is transferred across borders, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.

12Children

Adgent is a business tool intended for use by adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13Platform-specific disclosures

Google

Adgent requests only these Google OAuth scopes: Google Ads (https://www.googleapis.com/auth/adwords), Google Analytics (https://www.googleapis.com/auth/analytics.readonly), Google Merchant Center (https://www.googleapis.com/auth/content), Google Search Console (https://www.googleapis.com/auth/webmasters.readonly), Google Drive (https://www.googleapis.com/auth/drive.file), and the sign-in scopes openid and https://www.googleapis.com/auth/userinfo.email. The Analytics and Search Console scopes are read-only. The Drive scope limits access to files you select or create for use with Adgent. Google publishes no read-only variant of the Google Ads or Merchant Center scopes: Adgent gates every Google Ads write behind your explicit approval, and never writes to Merchant Center. The sign-in scopes are used only to read the stable account identifier that tells us which Google account granted a connection, so it can be matched and revoked cleanly; we do not store the email address they return.

Adgent's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not use it to train generalized AI/ML models.

Meta

Data accessed through Meta's APIs is processed in accordance with this policy and with applicable Meta terms and developer policies. You can ask us to delete data accessed via Meta at any time using our data-deletion instructions, and you may revoke Adgent's access from your Meta account settings.

14Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and notify registered users by email to the address associated with their account, through a conspicuous in-product notice, or both. For material changes, we will provide notice before the change takes effect and state its effective date.

Unless applicable law or a connected platform's policy requires consent, this notice does not require you to re-accept the policy. If a change would allow us to access a type of Google user data that was not previously disclosed, use Connected Platform Data in a new way or for a different purpose, or otherwise requires consent under applicable law, we will obtain your consent before applying that change. Non-material changes may take effect when posted.