Privacy Policy

Last Updated: April 2026

1. Introduction

AdPeak (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, products, services, or applications (collectively, the “Services”).

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Register for an account
  • Subscribe to our Services
  • Request customer support
  • Participate in surveys or promotions
  • Communicate with us

This information may include:

  • Name
  • Email address
  • Phone number
  • Company name
  • Billing information
  • Account credentials

2.2 Google Ads Account Data

When you connect your Google Ads account to our Services, we collect information from your Google Ads account, including but not limited to:

  • Campaign data
  • Ad performance metrics
  • Budget information
  • Keywords and targeting settings
  • Conversion data
  • Historical campaign information

2.3 Google Merchant Center Account Data

When you connect your Google Merchant Center account to our Services, we collect information from your Google Merchant Center account, including but not limited to:

  • Product catalogue data
  • Data sources data

2.4 Usage and Analytics Data

When you access our Services, we automatically collect certain information about your device and usage patterns, including:

  • IP address
  • Browser type and version
  • Device type and model
  • Operating system
  • Access times and dates
  • Pages viewed and time spent on pages
  • Features used and actions taken
  • Referring websites
  • Clickstream data
  • Error logs and performance data

2.5 AI Training and Optimization Data

To provide our AI-powered optimization services, we process:

  • Advertising performance patterns
  • Campaign optimization history
  • User interaction with optimization suggestions
  • Aggregated benchmark data from similar campaigns (anonymized)

This data helps our AI systems learn and improve the quality of optimization recommendations.

2.6 Conversation and Assistant Data

When you interact with our AI assistant, agent features, or MCP-connected tools, we collect:

  • Messages sent to and received from the AI assistant
  • Agent interaction logs, including tool invocations and their results
  • Plan-and-apply approval records (your decisions to approve, reject, or modify proposed actions)
  • Conversation metadata such as timestamps, session identifiers, and feature context

This data is used to provide and improve our AI-powered features and to maintain audit records of actions taken on your behalf.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Services
  • Process transactions and send related information
  • Analyze and optimize your ad campaigns using AI technology
  • Power the AI assistant, agent features, and MCP-connected tools
  • Respond to your comments, questions, and requests
  • Send you technical notices, updates, security alerts, and support messages
  • Monitor and analyze trends, usage, and activities in connection with our Services
  • Detect, prevent, and address technical issues and security risks
  • Develop new products, services, features, and functionality
  • Personalize your experience and recommendations
  • Train and improve our machine learning models (using anonymized data)
  • Comply with legal obligations

If you are located in the European Union or United Kingdom, we process your personal information based on one or more of the following legal grounds:

  • Performance of a contract: Processing necessary for the performance of our contract with you
  • Legitimate interests: Processing necessary for our legitimate interests, such as improving our Services, provided those interests aren’t overridden by your rights
  • Consent: Processing based on your specific consent
  • Legal obligation: Processing necessary to comply with legal obligations

You can withdraw consent at any time by contacting us, though this won’t affect the lawfulness of processing based on consent before withdrawal.

5. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

Specifically:

  • Account data is retained while your account remains active
  • Google Ads data is retained for up to 24 months after collection to enable historical analysis
  • Conversation and assistant data is retained while your account remains active plus 90 days after account closure or deletion
  • Audit logs, including plan-and-apply approval records and action records, are retained for a minimum of 24 months for legal compliance and dispute resolution purposes
  • When you delete your account, we will delete or anonymize your personal information within 30 days, except for information that we are required to retain for legal or business purposes (including audit logs as described above)

6. Sharing Your Information

We may share your information in the following circumstances:

6.1 Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf, including:

  • Cloud hosting and infrastructure providers
  • Payment processors
  • Analytics providers
  • Customer support services
  • Marketing and communication platforms

These service providers are contractually bound to use your information only as directed by us and in accordance with this Privacy Policy.

6.2 AI Model Providers

To power the AI assistant, agent features, and optimization capabilities within our Services, certain categories of your data may be processed by third-party AI model providers. The data shared with these providers may include:

  • Product catalogue data and performance metrics from your connected Google Ads and Merchant Center accounts
  • Conversation content (messages you send to the AI assistant and responses generated)
  • Tool invocation data and context necessary to fulfill your requests

We select AI model providers that offer appropriate data processing agreements and do not use your data to train their general-purpose models. The specific providers we use are listed on our sub-processor list, which we maintain as a living document. We commit to providing at least 30 days’ notice before adding any new AI model sub-processor to that list.

AI model providers fall into the following categories:

  • Large language model providers — powering the AI assistant, agent reasoning, and natural language analysis

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose your information to:

  • Enforce our Terms of Service
  • Protect and defend our rights or property
  • Prevent or investigate possible wrongdoing in connection with the Services
  • Protect the personal safety of users of the Services or the public

We may share your information with third parties when we have your explicit consent to do so.

7. Sub-Processors

We maintain a list of sub-processors (third-party service providers that process your data on our behalf) at /sub-processors. This list includes AI model providers, cloud infrastructure providers, and other services integral to delivering our platform.

We will update the sub-processor list when we engage new sub-processors and will provide at least 30 days’ advance notice before any new sub-processor begins processing your data. If you have concerns about a new sub-processor, you may contact us at privacy@adpeak.ai to discuss your options.

8. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include:

  • Encryption of personal data in transit and at rest
  • Regular security assessments of our systems
  • Access controls and authentication requirements
  • Regular staff training on data protection
  • Incident response procedures

However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee the absolute security of your data. We recommend that you also take steps to protect your data, such as using strong passwords and keeping your devices secure.

9. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information:

9.1 For EU/UK Residents (GDPR)

Under the General Data Protection Regulation (GDPR) and UK GDPR, you have the right to:

  • Access: Request copies of your personal data
  • Rectification: Request correction of inaccurate or incomplete personal data
  • Erasure: Request deletion of your personal data in certain circumstances
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing based on legitimate interests
  • Data Portability: Request to receive your personal data in a machine-readable format to transfer to another controller
  • Automated Decision-Making: Request human intervention for decisions based solely on automated processing that significantly affect you

9.2 For California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to:

  • Know/Access: Know what personal information is collected, used, shared, or sold
  • Deletion: Request deletion of your personal information
  • Opt-out: Opt-out of the sale or sharing of your personal information
  • Non-Discrimination: Not face discrimination for exercising your rights
  • Correction: Request correction of inaccurate personal information
  • Limit Use: Limit the use and disclosure of sensitive personal information

9.3 For Other Jurisdictions

Many other jurisdictions provide similar rights. We will honor requests from all users to exercise their data protection rights in accordance with applicable laws.

9.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@adpeak.ai. We may need to verify your identity before responding to your request. We will respond to all legitimate requests within the timeframes required by applicable law (typically within 30 days for GDPR requests and 45 days for CCPA requests).

10. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

For transfers from the EEA, UK, or Switzerland to countries not deemed adequate by the European Commission, we implement appropriate safeguards such as:

  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules for transfers to entities within our corporate group
  • Derogations such as explicit consent or contractual necessity

When your data is processed by AI model providers (see Section 6.2), it may be transferred to jurisdictions where those providers operate. We ensure that appropriate transfer mechanisms are in place for all such transfers.

11. Cookies and Tracking Technologies

11.1 Types of Cookies We Use

We use cookies and similar tracking technologies to track activity on our Services and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. We use the following types of cookies:

  • Essential cookies: Necessary for the functioning of our website
  • Preference cookies: Remember your preferences and settings
  • Analytics cookies: Help us understand how visitors interact with our website
  • Marketing cookies: Used to track visitors across websites for advertising purposes

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services. You can learn more about cookies and how to manage them at www.allaboutcookies.org.

For EU/UK users, we obtain consent for non-essential cookies in accordance with the ePrivacy Directive.

12. Children’s Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly take steps to delete that information.

Our Services may contain links to third-party websites or services that are not operated by us. Additionally, our Services may use third-party services that collect information about you. These third parties have their own privacy policies, and we have no responsibility or liability for their content, activities, or privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

14. AI and Automated Processing

14.1 AI Processing

AdPeak uses artificial intelligence and machine learning technologies to provide our Services. This includes:

  • Analyzing your Google Ads campaign data to generate optimization recommendations
  • Predicting performance outcomes for different advertising strategies
  • Automatically adjusting campaign parameters based on performance data
  • Learning from patterns across anonymized datasets to improve our algorithms
  • Powering the AI assistant for conversational support and analysis
  • Executing agent-driven workflows that take actions on your behalf (with your approval)

14.2 MCP and Agent Data Processing

Our Services include agent and tool-use capabilities that may be accessed through MCP (Model Context Protocol) clients such as Claude Desktop or other compatible applications. When you use these features:

  • You initiate the connection. MCP sessions are started by you from your MCP client application. AdPeak exposes tools that your MCP client can invoke on your behalf.
  • Conversation content and tool invocation data are processed by your MCP client’s AI provider. When you connect an MCP client to AdPeak, the conversation content (including any data returned by AdPeak tools) is sent to and processed by the AI model provider powering your MCP client. This processing is governed by your agreement with that AI provider, not by AdPeak.
  • AdPeak processes tool requests. When your MCP client invokes an AdPeak tool, we process the request parameters and return results. This may include querying your Google Ads data, Merchant Center data, or executing actions you have approved.
  • We log tool invocations. For security and audit purposes, we record which tools were invoked, the parameters provided, and the results returned. These logs are retained in accordance with our audit log retention policy (see Section 5).

You are responsible for reviewing and accepting the privacy practices of any MCP client and its underlying AI provider before connecting it to your AdPeak account.

14.3 Automated Decision-Making

Some of our Services involve automated decision-making, including decisions that may significantly affect your advertising campaigns. These include:

  • Bid adjustments
  • Budget allocations
  • Targeting recommendations
  • Ad creative optimization

You can always opt out of automated processes by contacting us to request human review or to disable certain optimization features.

15. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the “Last Updated” date at the top of this Privacy Policy
  • Sending an email to users where appropriate

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@adpeak.ai Address: AdPeak, MSparc, Menai Science Park, Gaerwen, Anglesey, LL60 6AG, UK Data Protection Officer: dpo@adpeak.ai

For EU/UK Data Subjects

If you have concerns about our processing of your personal data, you have the right to lodge a complaint with a supervisory authority in the country where you reside. For UK residents, this is the Information Commissioner’s Office (ICO). For EU residents, you can find your national data protection authority on the European Data Protection Board website.