Privacy Policy
Last updated: May 11, 2026
AdStar.Ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AdStar.Ai platform (the "Service").
1. Information We Collect
Account Information: The information we collect when you create or sign in to your account depends on the method you choose:
- Google or Microsoft: we receive your name, email address, and profile picture from the authentication provider. We do not receive or store your provider password.
- Email and password: you provide an email address and password. Passwords are stored only as one-way cryptographic hashes; we cannot retrieve your plaintext password.
- Passkey (WebAuthn): your device generates a public/private key pair. The private key stays on your device and is never sent to us. We store the public key, a credential identifier, and basic device metadata required to verify your sign-in.
User Content: We store content you provide through the Service, including brand information, product details, uploaded images, logos, and advertising creative configurations. This content is stored in your user profile and is necessary for delivering the Service.
Automatically Collected Data: We may collect technical information such as IP address, browser type, device information, and usage patterns to improve the Service and ensure security.
Website Analysis Data: When you provide URLs for brand or product analysis, our system visits those publicly accessible web pages using an automated browser to extract visual and textual information. This data is processed by AI to populate your brand and product profiles.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Authenticate your identity and manage your account.
- Generate advertising creatives based on your inputs.
- Process transactions and manage credits.
- Communicate with you about updates, features, and support.
- Detect and prevent fraud, abuse, or security incidents.
- Comply with legal obligations.
Demo Gallery: With your explicit consent, we may publish selected advertising creatives generated for you in the AdStar.Ai demo gallery. Providing this consent is optional and does not affect your access to the Service. You may withdraw your consent and request removal of the content from the demo gallery at any time by contacting us at support@adstar.ai.
3. Third-Party Services
We use the following categories of third-party services to operate the platform:
- Authentication: Google and Microsoft OAuth for secure sign-in.
- AI Processing: Third-party AI providers, such as OpenAI, for content analysis and generation. Your input data may be sent to these providers for processing in accordance with their respective data usage policies.
- Cloud Infrastructure: Third-party cloud providers for hosting, database, and file storage.
- Payments: Third-party payment processors, such as Lemon Squeezy, for processing subscription and credit pack purchases. We do not receive or store your full payment card details.
- Product Analytics: PostHog for understanding how users interact with the platform. After you sign in, we send PostHog your user identifier, email address, and name, together with event data describing actions you take in the product (for example, sign-up, sign-in, brand and product analysis, creative generation, and billing events). PostHog data is used solely for our own product analysis and is not used for advertising or sold to third parties.
We ensure that third-party service providers maintain appropriate security standards. However, their handling of your data is subject to their own privacy policies.
4. Data Storage and Security
Your data is stored on Microsoft Azure infrastructure with industry-standard security measures, including encryption at rest and in transit, access controls, and regular security assessments. While we strive to protect your data, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your account information and content uploaded by you for as long as your account is active or as needed to provide the Service. Generated content is retained for at least 30 days after generation, but its storage and availability are not guaranteed after that period. You should download and save any generated content you wish to retain.
If you delete your account, your account and associated content will become inaccessible and cannot be restored. You are responsible for downloading and saving any content you wish to retain before deleting your account. We may retain limited information where required by law or for legitimate business purposes, such as resolving disputes or enforcing agreements.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your personal data.
- Object to or restrict certain processing activities.
- Request portability of your data in a machine-readable format.
- Withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at support@adstar.ai. We will respond within 30 days.
7. Cookies and Tracking
The Service uses the following cookies and similar technologies:
- Essential cookies required for authentication and session management.
- Product analytics cookies set by PostHog to maintain an anonymous identifier and group related events into a session. After you sign in, this identifier is associated with your account so we can analyze user-level activity.
We do not use third-party advertising trackers or sell your data to advertisers. Analytics data is used solely for our internal product analysis and improvement, not for advertising.
You can disable PostHog at the browser level by enabling Do Not Track (which PostHog honors) or by using a content blocker that blocks us.i.posthog.com. To request that we stop processing your analytics data, contact us at support@adstar.ai.
8. Children's Privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will take steps to delete that information promptly.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the platform. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at support@adstar.ai.