Privacy Policy

This is a placeholder privacy policy for Admilio Studio Ltd. (“Admilio,” “we,” or “us”). Final policy language is being prepared with counsel and will replace this page before public app submission.

What we collect

When you create an Admilio account or connect a third-party platform, we collect the information needed to operate the service: your email address and authentication details, the access tokens you grant for Shopify and Meta, the brand and product data we fetch from those platforms on your behalf, and the ad creatives, briefs, and performance metrics produced through the product. We also collect basic product analytics (pages visited, features used) to improve the service.

How we use it

We use your data to deliver the product you signed up for: researching your brand, generating ad creative, publishing to your Meta account at your direction, and reading performance back into the system so future creative gets smarter.

Our team may access your account to support you, troubleshoot issues, review the quality of what we produce, and tune the results we deliver for you. Access is limited to team members who need it and is logged.

We may also use de-identified, aggregated information across our customer base to improve the service — for example, to learn which briefs convert better in aggregate, or to improve the underlying models. Aggregated information is structured so it cannot reasonably be tied back to any individual customer, brand, or end consumer.

We do not sell your data. Outside of de-identified, aggregated use, we do not use one customer’s identifiable content to train models that primarily serve another customer.

How we store it

Customer data is stored in Supabase (Postgres) hosted in AWS us-east-1. Access tokens for Shopify and Meta are encrypted at rest with AES-256 before being written to the database. Row-level security policies isolate each customer’s data from every other customer’s data.

Third-party processors

Admilio uses the following sub-processors to deliver the service: Supabase (database and authentication), Vercel (hosting), Inngest (background jobs), Anthropic (Claude models for research and brief generation), fal.ai and OpenAI (image generation), Firecrawl (brand website scraping), Stripe (billing), Sentry (error tracking), and PostHog (product analytics). Each receives only the data needed to perform its function on our behalf.

Your data rights

You can request a copy of your data, correct it, or delete it at any time. To request deletion of all data tied to your Admilio account, email privacy@admilio.ai. Requests are processed within 30 days.

If you connected Admilio through Meta and want to revoke that connection and have the associated data deleted, you can use the Meta data deletion flow which routes to our deletion request page. If your store has been connected via Shopify and you uninstall the app, Shopify will send us a redaction request and we will remove the associated data within 30 days.

Cookies

We use essential cookies to keep you signed in. We use analytics cookies (PostHog) to understand how customers use the product. We do not use advertising or third-party tracking cookies on the application itself.

Children

Admilio is a business tool not intended for individuals under 16. We do not knowingly collect personal information from minors.

Changes to this policy

We will post updates to this page and update the “last updated” date. Material changes will be communicated to active customers by email.

Contact

Privacy questions: privacy@admilio.ai
Admilio Studio Ltd.