Privacy Policy

1. Introduction

AdsRemix is owned and operated by Spare Matter Corp ("Company," "we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AdsRemix platform — an AI-powered ad remixer and creator for Facebook and Google Ads.

By using our Service, you consent to the practices described in this policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account information (name, email address, password hash)
• Business information you enter into ad generation forms (company name, website, product descriptions, target audience)
• Ad content and creative materials you upload or create on the platform
• Competitor pages and advertiser names you add to the tracking library
• Your Google Gemini API key, if you choose to provide one for bring-your-own-key (BYOK) usage
• Communication preferences and account settings

2.2 Information We Collect Automatically

• Usage data (features accessed, number of generations, time spent, interaction patterns)
• Usage quota and tier tracking (daily generation counts, library entries, scrape activity)
• Device and browser information (IP address, browser type, operating system, screen resolution)
• Authentication session tokens (managed via Firebase Authentication)
• Performance analytics and error logs to monitor platform health
• Cookies and similar session-management technologies

2.3 Information from Third-Party Services

• Facebook / Meta: When you connect a Facebook account, we receive OAuth access tokens, your name, profile picture, and the list of ad accounts you choose to grant us access to. We also retrieve publicly available ad data from the Facebook Ad Library on your behalf.
• Google: When you sign in with Google, we receive your name, email, and profile picture from Google Sign-In. If you use our Gemini-powered AI features, your input prompts are sent to Google's Gemini API (or to Google's API using your own key, if provided).
• AI-Generated Outputs: Responses from AI models (e.g., generated headlines, descriptions, images) are stored temporarily to display results and may be retained to support features like history and competitor snapshots.

2.4 Competitor Tracking Data

When you use the competitor tracking library, our automated system periodically scrapes publicly available ad data from Facebook Ad Library pages for the advertisers you have chosen to track. This scraped data — including ad creative text, active/inactive status, and timestamps — is stored in your account and associated tracking library.

3. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and manage your account
• Provide AI-powered ad generation, remixing, and competitor tracking features
• Route your prompts to the appropriate AI model (using platform keys or your own BYOK key)
• Enforce tier-based usage limits and track quota consumption
• Run automated nightly scrapes for competitor libraries you have enabled
• Store and display your generation history, saved ads, and competitor snapshots
• Communicate with you about your account, usage, and service updates
• Analyze aggregated, anonymized usage patterns to improve the platform and AI features
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We work with trusted third-party providers who help operate the platform:

• Google (Firebase & Gemini): Authentication, Firestore database, cloud hosting, and AI generation
• Meta / Facebook: Ad Library access and optional Marketing API integration
• Analytics and monitoring services used to detect errors and measure performance

4.2 Platform Integrations

When you authorize a connection to Facebook or Google, we share necessary authorization tokens and data with those platforms to perform the actions you request (e.g., retrieving your ad accounts, publishing ads). This sharing is governed by those platforms' privacy policies.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in good-faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of Spare Matter Corp, prevent or investigate possible wrongdoing, or protect the personal safety of users or the public.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of Spare Matter Corp's assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this policy.

5. User-Provided API Keys

If you provide a Google Gemini API key for BYOK usage, that key is stored in your account profile and transmitted server-side using encrypted connections. Your API key is used solely to make requests to Google's Gemini API on your behalf during your active sessions. We do not share your API key with third parties other than Google as the intended recipient. You can remove your API key from the platform at any time through your account settings.

6. Data Security

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted using TLS/HTTPS
• Data at rest in Firebase Firestore is encrypted by Google Cloud
• Firebase Authentication manages password hashing and session security
• Access to production data is restricted to authorized personnel only
• Firestore security rules enforce per-user data access controls

Despite these measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and to report any suspected security issues to security@adsremix.com.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

Request a copy of the personal data we hold about you in a portable format.

7.2 Correction and Updates

Update or correct inaccurate information through your account settings or by contacting us.

7.3 Deletion

Request deletion of your account and personal data. We will delete or anonymize your information within 30 days, except where longer retention is required by law or for legitimate business purposes such as fraud prevention.

7.4 Opt-Out of Marketing

Unsubscribe from marketing emails at any time via the unsubscribe link in those emails or by contacting us. Transactional communications related to your account cannot be opted out of while your account is active.

7.5 Revoke Third-Party Access

Disconnect your Facebook or Google accounts from AdsRemix at any time through your account settings. You may also revoke permissions directly on those platforms.

7.6 Data Processing Limitations

Object to or request restriction of certain types of processing, subject to applicable law.

8. Cookies and Tracking

We use cookies and similar browser storage technologies to:

• Maintain your authenticated session (Firebase Authentication session cookies)
• Remember your preferences and settings
• Analyze platform performance and usage patterns
• Prevent fraud and ensure security

We do not use third-party advertising cookies. You can control cookie behavior through your browser settings. Disabling session cookies will prevent you from logging in to the platform.

9. International Data Transfers

Spare Matter Corp is based in the United States. Your information may be processed and stored in the US and other countries where our service providers (including Google Cloud / Firebase) operate. When we transfer data from the EU, EEA, or UK, we rely on appropriate legal mechanisms including Standard Contractual Clauses and adequacy decisions where applicable.

10. Data Retention

We retain your information for as long as necessary to:

• Provide and support your account and the Service
• Comply with applicable legal obligations
• Resolve disputes and enforce agreements
• Maintain aggregated, anonymized analytics

Competitor tracking snapshots and generation history are retained for the duration of your account. When you delete your account, we will delete or anonymize your personal information within 30 days, except where longer retention is legally required.

11. Children's Privacy

AdsRemix is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at privacy@adsremix.com.

12. Changes to This Privacy Policy

Spare Matter Corp may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the platform. Your continued use of AdsRemix after changes become effective constitutes your acceptance of the updated policy. The "Last updated" date at the top of this policy reflects when the most recent changes were made.

13. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us:

14. Regional Privacy Rights

14.1 European Union and EEA (GDPR)

If you are located in the EU or EEA, you have rights under the General Data Protection Regulation including access, rectification, erasure, restriction, portability, and objection. You also have the right to lodge a complaint with your local data protection supervisory authority. Our legal basis for processing your data is primarily contract performance (providing the Service) and legitimate interests (security and platform improvement).

14.2 United Kingdom

UK residents have equivalent rights under the UK GDPR and Data Protection Act 2018. You may contact the Information Commissioner's Office (ICO) with concerns.

14.3 California (CCPA / CPRA)

California residents have rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information is collected, the right to delete, the right to correct, and the right to opt-out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us at privacy@adsremix.com.

14.4 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. Contact us for information about your specific regional rights.