Effective: March 22, 2026 · Last updated: March 25, 2026
We collect: (1) account information such as your email address via Clerk authentication; (2) product page content — title, description, and images — from URLs you submit for analysis; (3) ad scripts and copy you paste into the platform; and (4) usage data such as features used and analyses run, to improve the product. We do not collect any data from Meta's platforms except what you explicitly authorize through our OAuth flow.
If you choose to connect your Meta ad account, AdLoop accesses your ad performance data via the Meta Marketing API — specifically impressions, clicks, spend, CTR, and CPA for ads in your account. We store: your encrypted Meta access token, your primary ad account ID, and aggregated performance metrics by ad angle type. We request only the ads_read and business_management permissions. We never access your personal Facebook profile, friends, or any data beyond ad performance metrics. You can disconnect your Meta account at any time from your AdLoop settings — this immediately deletes all stored connection data.
We use your data to deliver AdLoop analysis, generate creative testing recommendations, show you benchmark comparisons against anonymized DTC industry data, and display your own ad performance history (when connected). We may use aggregated, anonymized data to improve AdLoop's recommendations over time — no individual brand's data is identifiable in these aggregates.
We do not sell, share, or transfer your personal data to any third parties other than: Meta (for ad account connections you authorize), OpenAI (for AI analysis), and our infrastructure providers (Clerk, Vercel, Neon) under strict data processing agreements.
We use trusted processors to operate the service: Clerk for authentication, Neon (Postgres) for database infrastructure, OpenAI for AI analysis, PostHog for product analytics, Resend for transactional email, and Stripe for billing. Each processor is used only for the specific purpose listed and under appropriate data processing agreements.
Analysis records and account data are retained until you delete your account. Meta access tokens are stored until you disconnect your account or revoke access. Aggregated benchmark data (stripped of individual brand identity) may be retained indefinitely to improve category benchmarks.
We use Clerk for authentication (cookies set by Clerk per their privacy policy). We use PostHog for product analytics (anonymized by default, no advertising cookies). No other third-party tracking or advertising cookies are used.
You can request access to, correction of, or deletion of your personal data at any time by emailing privacy@useadloop.ai. You can also disconnect your Meta ad account from the AdLoop app at any time. Subject to applicable law, you may also request a portable export of your data.
We apply reasonable technical and organizational safeguards — including TLS encryption in transit, encrypted storage at rest, and access controls — to protect your data. Meta access tokens are encrypted at rest and never logged. No system is fully risk-free, so we continuously review and improve protections.
If we make material changes to this policy, we will notify you via email or a prominent notice in the app. Continued use of AdLoop after changes constitutes acceptance of the updated policy.
For privacy requests, questions, or data deletion requests, contact us at privacy@useadloop.ai.
AdLoop Inc. · San Francisco, CA