Privacy Policy

Last updated: [Effective date]

This Privacy Policy explains how ADVAT MARKETING & TECHNOLOGIES LIMITED ("Advax AI", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use our advertising campaign management platform.

1. What data we collect

When you create an account and use Advax AI, we collect the following types of information:

• Account information: Your name, email address, business name, phone number, and billing details.
• Ad account credentials: OAuth access tokens and permissions that you grant us to connect your Meta, Google, TikTok, and X (Twitter) ad accounts. We do not store your platform login passwords.
• Campaign data: Ad creatives (images, videos, copy), campaign settings, audience targeting parameters, budgets, and performance metrics retrieved from your connected ad accounts.
• Payment information: Transaction records processed through our payment provider, Korapay. We do not store your card details directly.
• Usage data: Log data, IP address, browser type, and pages visited on our platform, collected to maintain service security and improve functionality.

2. How we use data from connected platforms

When you connect your Meta, Google, TikTok, or X ad accounts via OAuth, we access data solely for the purpose of:

• Creating, editing, and managing your advertising campaigns on your behalf
• Retrieving performance metrics and spend data to display in your unified dashboard
• Generating AI-assisted ad copy and creative suggestions based on your campaign context

We do not use your platform data for any unrelated purpose. We do not share your campaign data, audience insights, or ad performance metrics with third parties for advertising, marketing, or any other purpose. Your data belongs to you.

3. How we store and secure OAuth tokens

Your OAuth access tokens are stored using industry-standard encryption at rest and transmitted over TLS/SSL in transit. Access tokens are stored in a secure database with restricted access limited to authenticated backend services that require them to perform campaign operations on your behalf.

Tokens are automatically revoked when you disconnect an ad account from Advax AI or delete your Advax AI account. We do not retain expired or revoked tokens beyond what is necessary for audit logging.

4. Third-party services

We use the following third-party services to operate Advax AI:

• Korapay — for processing subscription payments and wallet deposits. Korapay's privacy policy governs the data you provide during checkout.
• Meta, Google, TikTok, X APIs — for campaign management and data retrieval. Your use of these platforms is also subject to their respective privacy policies and terms.
• Cloud hosting and analytics providers — for infrastructure, logging, and error monitoring. All providers are bound by data processing agreements.

5. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information in your account
• Delete your account and all associated data — see our Data Deletion Instructions
• Withdraw consent for data processing by disconnecting ad accounts or deleting your account
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at Support@advaxai.com. We will respond within 30 days.

6. Cookies and tracking

Advax AI uses essential cookies to maintain your session and ensure platform security. We do not use third-party advertising cookies or tracking pixels for retargeting. Any analytics cookies used are limited to understanding platform usage patterns and do not identify you personally across other websites.

You can manage cookie preferences through your browser settings.

7. Data retention

We retain your personal data and campaign information for as long as your account is active. If you delete your account, we remove your data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention or financial record-keeping.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through a notice on the platform before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

9. Contact us

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at:

ADVAT MARKETING & TECHNOLOGIES LIMITED
Email: Support@advaxai.com
Address: [Company address]