Privacy Policy

Last updated: May 6, 2026

Adlas ("we", "us") provides a marketing analytics SaaS that helps freelancers and agencies see ad performance from multiple platforms in one dashboard. This policy explains what we collect, why, and your rights.

1. Data we collect

When you sign up:

• Email and password (managed by Supabase Auth)
• Optional display name

When you connect Meta:

• Your Meta user ID and name (from the /me endpoint)
• The list of ad accounts you have access to (id, name, currency, status, parent business)
• Read-only ad insights: campaigns, ad sets, ads, creatives, spend, impressions, clicks, conversions, demographic breakdowns (age/gender), video metrics
• An encrypted long-lived access token (AES-256-GCM) used to fetch the data above

While you use the product:

• Anonymous usage analytics via Mixpanel (page views, clicks)
• Standard server logs (IP, user agent, timestamps)

We never request, store, or post on your social profiles. We never modify, create, or pause campaigns. Adlas is read-only.

2. Why we collect it

• To authenticate you (email/password)
• To fetch and display your ad performance (Meta data)
• To improve the product (analytics)
• To prevent abuse (logs)

3. Where it lives

• Account data and Meta data: Supabase Postgres
• Access tokens: encrypted at rest with AES-256-GCM
• Analytics: Mixpanel
• Hosting: Vercel

4. Sharing

We do not sell your data. We use the following sub-processors:

• Supabase (database and authentication)
• Vercel (hosting)
• Mixpanel (analytics)
• Meta Platforms (the source of your ad data)

Each is bound by their own DPA and privacy terms.

5. Retention

• Access tokens are deleted immediately when you disconnect Meta from Adlas.
• Other data is retained for the lifetime of your account.
• After you delete your account or request deletion, all personal data is erased within 30 days. Aggregated, anonymized statistics may be retained.

6. Your rights

You can:

• Access the data we hold on you
• Correct inaccurate data
• Delete your account and all associated data
• Revoke the Meta connection at any time from Settings → Integrations

Email privacy@getadlas.com to exercise any right. We respond within 30 days.

7. Children

Adlas is not directed at users under 18. We do not knowingly collect data from minors.

8. Changes

We will post material changes on this page and notify you by email when relevant.

9. Contact

Data Controller: Adlas
Email: privacy@getadlas.com