Privacy policy of adCasa LTD

Effective Date: September 12, 2024

adCasa LTD ("adCasa," "we," "our," "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our services, including our website, adGPT, applications, and any related services (collectively, the "Services"). This policy also outlines your rights under the GDPR, CCPA, and other applicable data privacy laws.

1. Introduction

adCasa respects your privacy and is committed to protecting your personal data. This Privacy Policy provides an overview of how adCasa handles your personal data, ensuring transparency and accountability in accordance with the GDPR, the California Consumer Privacy Act (CCPA), and other relevant legal frameworks.

2. Data Controller and Data Processor

For users in the European Economic Area (EEA), Switzerland, or the UK, the data controller is adCasa LTD, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Email: legal@adcasa.io

Service Address: adCasa LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

We may also act as a Data Processor for certain services when processing personal data on behalf of third-party businesses, in which case data processing agreements will govern such activities.

3. Types of Data We Collect

3.1 Account Information:

  • Name, email address, phone number, billing information, and payment card details.
  • Username and password when you register an account with us.
  • Transaction history and details of services purchased.

3.2 User Content:

  • Data you input into our Services, such as campaigns, digital marketing preferences, feedback, and file uploads.

3.3 Behavioral and Technical Data:

  • Information on how you use and interact with our website and services, such as usage patterns, page views, and clickstream data.
  • IP address, browser type, operating system, device information, and information collected via cookies and similar technologies.

3.4 Location Data:

  • If you use location-based services, we may collect your device's geographic location.

3.5 Communication Data:

  • Records of communications between you and adCasa, including email correspondence, chat conversations, and customer support requests.

3.6 Social Media Information:

  • If you interact with us via social media platforms, we collect publicly available information you provide.

3.7 Data from Connected Services:

  • If you connect third-party accounts such as Google Analytics or Google Ads to adGPT, we may collect advertising and performance data, subject to third-party terms.

3.8 Training Data for Model Improvement:

  • We may collect and use aggregated or anonymized data from user inputs (e.g., campaign details, prompts, and outputs) for the purpose of improving and refining our models, including adGPT.

4. How We Collect Your Data

We collect your personal data through various methods:

  • Directly from you: When you register for our services, interact with customer support, or communicate with us.
  • Automatically: Via cookies, tracking technologies, and interaction logs when you use our services.
  • From third parties: Data from partners, affiliates, and connected services (e.g., Google Analytics, Google Ads).
  • Aggregated Data: Data from our AI models to improve service performance (see section on Model Improvement).

5. Purposes for Processing Personal Data

We process your personal data for the following purposes:

  • Providing and Maintaining Services: Deliver requested features, content, and functionalities, and process transactions.
  • Improvement and Development: Analyze how you use our services for future product improvements.
  • Communications: Notify you about updates, new features, and services.
  • Marketing and Promotions: Send promotional materials with your consent.
  • Fraud Prevention and Security: Ensure system integrity and protect against misuse.
  • Compliance: Fulfill legal and regulatory requirements.
  • Model Improvement: Use aggregated or anonymized data to train and refine our AI models.

6. Legal Basis for Processing

We process your data under these legal bases:

  • Consent: When you provide explicit consent (e.g., for marketing communications).
  • Contractual Necessity: To fulfill contracts (e.g., service delivery).
  • Legitimate Interests: To improve our services and protect our business.
  • Legal Obligation: To comply with legal obligations (e.g., tax reporting).

7. Data Sharing and Transfers

We may share your personal data with:

  • Service Providers: For services such as hosting, payment processing, and marketing.
  • Business Transfers: In the event of mergers or acquisitions, your data may be transferred.
  • Legal Obligations: We may disclose data to comply with legal requirements.
  • Affiliates: For internal business purposes.
  • Third-Party Platforms: If you connect adGPT with third-party services, data may be shared per their terms.

When transferring data outside the EEA, Switzerland, or the UK, we ensure appropriate safeguards, such as Standard Contractual Clauses or equivalent.

8. Data Retention

We retain personal data for as long as necessary for the purposes outlined in this policy or as required by law. Retention periods may vary, depending on:

  • Legal and regulatory requirements (e.g., billing records retention for tax purposes).
  • Operational needs (e.g., security logs or account activity).

Once the retention period has ended, we securely delete or anonymize your data.

9. Your Rights

You have the following rights regarding your personal data:

  • Access: Request access to the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data (right to be forgotten).
  • Restriction of Processing: Limit data processing in certain situations.
  • Data Portability: Request your data in a machine-readable format.
  • Objection: Object to processing (e.g., marketing).
  • Withdraw Consent: Withdraw consent at any time for processing based on consent.
  • Post-mortem Instructions: Instruct us on how to handle your personal data after your death.

To exercise your rights, please contact legal@adcasa.io.

10. Automated Decision-Making and Profiling

We may use automated decision-making (including profiling) to personalize content, services, or advertising. You can object to such processes and request human intervention by contacting us.

11. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Improve Website Functionality: Provide a seamless user experience.
  • Analyze Behavior: Track interactions and website usage.
  • Personalize Advertising: Serve tailored ads based on your preferences.

For more details, please refer to our Cookie Policy.

12. Security Measures

We implement stringent security measures to protect your data, including:

  • Encryption: Safeguarding data in transit and at rest.
  • Access Control: Limiting access to authorized personnel only.
  • Security Audits: Regular reviews of systems to identify vulnerabilities.

However, please note that no transmission method over the internet is entirely secure.

13. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect data from children without verifiable parental consent. If we become aware of such data, it will be promptly deleted.

14. Data Breach Notification

In case of a data breach, we will notify you and relevant authorities within 72 hours, if the breach may impact your rights or freedoms.

15. Third-Party Links and External Services

Our website and services may link to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the respective privacy policies of third-party platforms before interacting with them.

16. International Data Transfers

In certain cases, we may transfer your data to providers or affiliates outside the EEA. We ensure that these transfers are compliant with GDPR through Standard Contractual Clauses or similar protections.

17. Privacy by Design and Data Protection Impact Assessments

We integrate privacy by design principles into our product development processes. For high-risk data processing activities, we conduct Data Protection Impact Assessments (DPIAs).

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When changes are made, we will notify you through our website and update the "Effective Date." Continued use of our services constitutes acceptance of the revised policy.

19. Contact Us

For any questions or concerns about this Privacy Policy, please contact us:

  • Email: legal@adcasa.io
  • Service Address: adCasa LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.