Privacy Policy
Last updated 7 October 2026
This policy explains what personal data AdVault collects when you use advault-ai.com, why, who processes it with us and how you can exercise your rights.
1. Who is responsible
The controller of your personal data is Riccardo Ganiere, an individual based in Marbella, Spain, who operates AdVault. For any privacy question or request, write to privacy@advault-ai.com.
2. What we collect
- Account data: your email address, the name you enter at signup, and sign-in sessions. Passwords are handled by our authentication provider and are never visible to us.
- How you found us: when you create an account we store the campaign parameters (UTM tags), the referring website and the page you signed up from.
- Trial and subscription: your trial dates, plan and subscription status. If you subscribe, our payment provider stores your payment details; we only keep its customer and subscription identifiers.
- What you create in AdVault: URLs you scan and their results, ads and media you save, advertisers you follow, reports, and the text you send to the AI features.
- Usage and security data: usage counters for your account, and the technical data our hosting provider processes to deliver the site and protect it from abuse, such as IP address and browser type.
- Analytics: only if you accept analytics cookies, Google Analytics collects how you use the public site (see section 6).
The free checkers analyse the URL you type in your browser and do not require an account.
3. Why we use it and on what legal basis
- To provide the service you signed up for (performance of a contract): your account, scans, saved ads, reports, AI features, trial and subscription.
- To keep AdVault secure and working (legitimate interest): rate limiting, abuse prevention and error investigation.
- To understand which channels bring new users (legitimate interest): the signup source described above, used only in aggregate.
- To measure how the public site is used (consent): Google Analytics, only after you accept.
- To meet legal obligations: keeping billing records when the law requires it.
4. Who processes data with us
We use these providers, each only for the purpose listed:
- Cloudflare: hosting, content delivery, security, browser-based scans and the AI models behind scan advice and creative generation.
- Supabase: database, sign-in and file storage for your account.
- Stripe: payment processing for subscriptions.
- Google: Google Analytics, only with your consent.
- Meta: the Meta Ad Library API receives the advertiser names and keywords you search for in ADVClip.
- An ad-preview provider: receives public ad identifiers so AdVault can show previews of ads you look at.
Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards recognised under the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses. We do not sell your personal data.
5. How long we keep it
We keep your account data and what you create in AdVault for as long as your account exists. When you ask us to delete your account, we delete or anonymise this data, except records we must keep by law, such as billing records, which are kept only for the period the law requires.
7. Your rights
You can ask to access, correct, delete or export your personal data, to restrict or object to its use, and you can withdraw consent at any time without affecting earlier processing. Write to privacy@advault-ai.com and we will answer within one month.
If you believe your data is handled unlawfully, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in your own country.
8. Children
AdVault is a professional tool and is not intended for anyone under 16.
9. Changes
If we change this policy, we will update the date at the top of this page. If a change affects how we use data you have already given us, we will tell account holders by email before it applies.