Privacy Policy

Last updated 2026-09-01

TODO_LEGAL_ENTITY_NAME (TODO_ADDRESS_LINE_1, TODO_ADDRESS_LINE_2, TODO_CITY, TODO_STATE TODO_PINCODE, India) operates AdMeDaddy. This policy explains what personal data we collect, why, and what you can do about it. We act as the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. What we collect

Account data: phone number, email address, name, and the workspace and brand details you enter.
Content data: product descriptions, competitor ad text, brand writing samples, and the copy, kits and scores generated for you.
Billing data: subscription status, plan, invoice records and payment identifiers received from Dodo Payments. We never receive or store full card numbers, UPI PINs or bank credentials.
Usage data: product events (for example, kit created, score viewed), device and browser information, and approximate location derived from IP address.
Rate-limiting data: for the free demo and free tools we store a one-way hash of your IP address and a daily counter. We do not store raw IP addresses for this purpose.

2. Why we use it

To provide the Service, generate output, and enforce plan limits.
To bill you and issue invoices through our Merchant of Record.
To send transactional and lifecycle email (trial reminders, payment issues, product updates you can opt out of).
To detect abuse, prevent fraud, and keep the Service secure.
To improve the product in aggregate. We do not use your content to train foundation models.

3. Legal basis

We process your data on the basis of the consent you give when you create an account and submit content, and for the legitimate uses permitted under section 7 of the DPDP Act, including providing a service you have requested and complying with legal obligations.

4. Who we share it with

We use a small number of processors, each bound by contract:

Supabase: database, authentication and file storage.
Vercel: application hosting and delivery.
OpenRouter and the model providers it routes to, for generating your output. Prompts are sent for inference; we request no-training routing where the provider supports it.
Dodo Payments: payment processing and invoicing as Merchant of Record.
Resend: transactional email delivery.
PostHog: product analytics. Sentry: error monitoring.
An SMS provider for delivering phone OTPs.

We do not sell personal data, and we do not share it with advertising networks.

5. Cross-border transfers

Some processors store or process data outside India. Where that happens, we rely on contractual safeguards and transfer only what is necessary to run the Service.

6. How long we keep it

Account and content data: while your account is active, and for 30 days after deletion so you can recover it.
Billing records: as long as Indian tax law requires (currently 8 years).
Free-tool IP hashes and counters: 90 days.
Error and analytics data: up to 12 months.

7. Your rights

Under the DPDP Act you may:

Access a summary of the personal data we hold about you.
Ask us to correct or complete inaccurate data.
Ask us to erase your data. The Settings page has a self-service account deletion.
Withdraw consent, including opting out of non-essential email.
Nominate someone to exercise these rights if you die or become incapacitated.
Raise a grievance with our Grievance Officer, and escalate to the Data Protection Board of India.

Contact grievance@admedaddy.com to exercise any of these. We respond within 15 days.

8. Security

Data is encrypted in transit and at rest. Access to your workspace data is enforced at the database level with row-level security, so one workspace cannot read another’s content. Administrative access is limited and logged. If a breach affects your data we will notify you and the Data Protection Board as required.

9. Children

The Service is not for anyone under 18. We do not knowingly process children’s data.

10. Cookies

We use strictly necessary cookies for authentication, and first-party analytics cookies to understand product usage. We do not run third-party advertising trackers.

11. Contact

Grievance Officer: TODO_GRIEVANCE_OFFICER_NAME, grievance@admedaddy.com. General queries: support@admedaddy.com.