This Privacy Policy explains how OpenAdLibrary ("we", "us") collects, uses, and protects information when you use our ad-transparency and competitive-intelligence platform (the "Service"). We aim to collect only what we need to run the Service.

1. Information we collect

Account information: your name, email address, and authentication credentials when you register.
Billing information: for Premium plans, payment details are collected and processed by our payment processor; we do not store full card numbers.
Usage data: searches, filters, saved items, and feature interactions, used to operate and improve the Service.
Technical data: IP address, browser type, device information, and log data for security and diagnostics.
Cookies & local storage: used to keep you signed in and remember preferences.

2. Public advertising data

The Service indexes publicly available advertising: creatives, placements, redirect chains, and landing pages. This is captured from public sources without clicking live ads and is not personal data about you. Where a public ad incidentally contains personal information of a third party, we process it for the legitimate interest of ad transparency and competitive research. See our capture & click policy.

3. How we use information

To provide, maintain, and secure the Service and your account.
To process payments and manage subscriptions.
To personalise features such as saved searches, boards, and watchlists.
To communicate with you about your account, updates, and support requests.
To detect, prevent, and address fraud, abuse, and security incidents.
To comply with legal obligations.

4. How we share information

We do not sell your personal information. We share it only with: service providers who help us operate the Service (e.g. hosting, payment processing, error monitoring) under appropriate confidentiality obligations; and authorities where required by law or to protect our rights and users.

5. Data retention

We retain account and usage data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, or security obligations. You can request deletion of your account at any time.

6. Security

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and per-key isolation for API access. Sensitive integration credentials are encrypted at rest (AES-256-GCM) and never logged. No system is perfectly secure, but we work to protect your information.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us and we will respond as required by applicable law.

8. International transfers

We may process and store data in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards as required by applicable data-protection law.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email. The "last updated" date above reflects the latest revision.

10. Contact

Questions about privacy or your data? Get in touch. See also our Terms of Service.