Privacy Policy

Last updated: March 10, 2026

This Privacy Policy describes how Fact Properties LLC d/b/a AdPlus ("AdPlus," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you access or use our website at getadplus.com, our web application, and any related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Account Information. When you register for an account, we collect your name, email address, organization name, and password. If registration is gated, we collect this information through our early-access request form.

OAuth Credentials. When you connect advertising platform accounts (such as Google Ads, Meta Ads, Amazon Ads, LinkedIn Ads, Microsoft Advertising, Reddit Ads, TikTok Ads, or Pinterest Ads), we receive OAuth access tokens and, where applicable, refresh tokens from those platforms. These tokens allow us to manage advertising campaigns on your behalf.

Campaign Data. We collect and store campaign plans, budgets, targeting parameters, ad creatives, performance metrics, and related configuration data that you create or that is retrieved from connected advertising platforms.

AI Conversation Data. When you interact with our AI-powered campaign planning, creative generation, or audit features, we collect the messages you send and the responses generated. These conversations are stored to maintain session continuity and improve your experience.

Usage Data. We automatically collect information about how you access and use the Service, including your IP address, browser type, operating system, pages visited, and timestamps.

Notification Preferences. We store your preferences for in-app and email notifications, including which event types you wish to receive alerts for.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Create, manage, and optimize advertising campaigns on connected platforms on your behalf;
• Generate AI-driven campaign plans, ad creatives, and performance audits;
• Collect and display advertising performance metrics from connected platforms;
• Authenticate your identity and maintain account security;
• Send transactional notifications (e.g., campaign status updates, token expiration warnings, budget alerts) via in-app messages and email;
• Respond to your requests, questions, and feedback; and
• Comply with legal obligations.

3. AI and Third-Party Model Providers

Our AI features are powered by third-party large language model providers, which may include Anthropic (Claude), OpenAI (GPT), and Google (Gemini). When you use AI-powered features, portions of your campaign data and conversation messages are transmitted to these providers for processing.

We select providers that offer commercial data protection commitments. We do not permit these providers to use your data to train their models. However, we encourage you to review each provider's data processing terms for full details.

4. Third-Party Advertising Platforms

When you connect an advertising platform account, we interact with that platform's API on your behalf using your OAuth credentials. Data transmitted to and received from these platforms is governed by their respective privacy policies and terms of service. We act as your authorized agent and only access data necessary to provide the Service.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption at rest: All OAuth access tokens and refresh tokens are encrypted using Fernet symmetric encryption before storage.
• Encryption in transit: All communications between your browser and our servers are encrypted via TLS.
• Authentication: Access to the Service is protected by JWT-based authentication.
• Access controls: All data is scoped to your user account. Multi-tenant isolation ensures you cannot access another user's data.
• Infrastructure security: Our services are deployed on private infrastructure with restricted access controls.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your account information and campaign data for as long as your account is active or as needed to provide the Service. OAuth tokens are retained until you disconnect the associated platform or your account is deleted. AI conversation histories are retained for the lifetime of the associated campaign. You may request deletion of your account and associated data by contacting us.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With advertising platforms: As necessary to create, manage, and monitor campaigns on your behalf through their APIs.
• With AI providers: As necessary to power AI-driven features (campaign planning, creative generation, audits).
• With email service providers: We use SendGrid to deliver transactional email notifications. Only your email address and notification content are shared.
• For legal compliance: When required by law, subpoena, court order, or governmental regulation.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion of your personal information;
• Disconnect any connected advertising platform at any time, which immediately revokes our access;
• Adjust your notification preferences at any time through your account settings; and
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at privacy@getadplus.com.

9. How to Request Data Deletion

We respect your right to have your personal data deleted. If you would like us to delete your account and all associated personal information from our systems, we are happy to assist you through a straightforward process.

To submit a data deletion request, please send an email to privacy@getadplus.com with the subject line "Data Deletion Request" and include the following information in the body of your email:

• Your full name as it appears on your AdPlus account;
• The email address associated with your AdPlus account; and
• A brief statement confirming that you wish to have your personal data deleted (e.g., "I hereby request the deletion of my account and all personal data associated with it").

What happens next. Upon receipt of your request, we will verify your identity by confirming the email address on file. Once verified, we will proceed to permanently delete the following data from our systems within 30 calendar days:

• Your account information (name, email, organization, credentials);
• All OAuth connection tokens for linked advertising platforms;
• All campaign data, including plans, configurations, creatives, and performance metrics;
• All AI conversation histories and chat sessions;
• All notification preferences and usage records; and
• Any media assets (images, videos) stored on your behalf.

Please note that deletion is permanent and irreversible. Once your data has been deleted, it cannot be recovered. If you have active campaigns running on connected advertising platforms, we strongly recommend pausing or archiving them directly on those platforms before submitting your deletion request, as we will no longer be able to manage them on your behalf after your account is removed.

We will send you a confirmation email once the deletion process has been completed. If you have any questions or concerns about the deletion process, please do not hesitate to reach out to us at privacy@getadplus.com — we are here to help.

10. Cookies and Tracking

We use essential cookies and local storage to maintain your authenticated session and preferences. We do not use third-party advertising trackers on the Service. Analytics, if any, are limited to first-party usage data.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.

12. International Data Transfers

Your information may be processed and stored in the United States. If you are accessing the Service from outside the United States, you consent to the transfer and processing of your information in the United States, where data protection laws may differ from those in your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Fact Properties LLC d/b/a AdPlus
26 Beacon St, #43A
Burlington, MA 01803
Email: privacy@getadplus.com