Privacy Policy

AdWasteFix ("AdWasteFix", "we", "us", or "our") operates the website at https://adwastefix.com and the AdWasteFix SaaS platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By accessing or using the Service you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To generate ad waste audit reports based on your submitted URLs.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (account confirmation, billing receipts, support replies).
• To detect fraud, abuse, and security incidents.
• To comply with legal obligations.
• To send product updates and marketing communications — you can opt out at any time.

We do not sell your personal data to third parties. We do not use your audit data to train AI models or share it with advertisers.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: to provide the Service you signed up for.
• Legitimate interests: fraud prevention, security, product analytics.
• Consent: marketing emails and non-essential cookies (you may withdraw consent at any time).
• Legal obligation: compliance with applicable laws.

4. Data Sharing & Disclosure

We share data only with:

• Supabase — database and authentication infrastructure (EU/US data centers).
• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• OpenAI / Anthropic — AI analysis providers receive anonymised page-content snippets to generate fix recommendations. They do not receive your name, email, or billing data.
• Resend — transactional email delivery.
• Vercel — hosting and CDN infrastructure.
• Cloudflare — bot protection and DDoS mitigation.

We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of AdWasteFix, our users, or the public.

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity with prior notice.

5. Cookies & Tracking Technologies

We use the following categories of cookies:

• Strictly necessary: session authentication, security tokens. These cannot be disabled without breaking core functionality.
• Analytics: Google Analytics 4 (GA4) and Google Tag Manager to understand how users interact with our Service. These are only set with your consent.
• Affiliate tracking: a short-lived cookie to attribute referrals. Expires after signup.

You can manage cookie preferences via the consent banner shown on your first visit, or by configuring your browser to block cookies. Blocking strictly-necessary cookies will impair Service functionality.

6. Data Retention

• Account data is retained for as long as your account is active, plus 90 days after deletion to allow for disputes.
• Audit reports are retained until you delete them or close your account.
• Billing records are retained for 7 years to meet tax and accounting requirements.
• Server logs are retained for 30 days.

7. Your Rights

Depending on your location you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing activities.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent for consent-based processing at any time.
• Lodge a complaint with your local data protection authority (e.g. ICO in the UK, a supervisory authority in the EU).

To exercise any of these rights, email us at privacy@adwastefix.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Data Transfers

Your data may be processed in the United States, the European Union, or other countries where our service providers operate. Where we transfer data outside the EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions as the legal transfer mechanism.

10. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security in our database, regular security audits, and strict access controls. No system is 100% secure; in the event of a data breach we will notify affected users as required by law.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or via a prominent notice in the Service at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact: