Privacy Policy

Advertix (“Advertix”, “we”, “us”, or “our”) is an AI-powered ad management platform operated by AB Qayyum. We help businesses plan, generate, launch, and optimize advertising campaigns across multiple platforms including Meta (Facebook, Instagram), Google, TikTok, and LinkedIn.

This Privacy Policy describes how we collect, use, store, and protect your information when you use the Advertix service at advertix.io (the “Service”).

2.1 Account information

When you create an Advertix account, we collect your email address, name, and profile picture (if provided) through our authentication provider Clerk. We do not store passwords directly — Clerk handles authentication and password storage.

2.2 Workspace information

We collect the workspace name, industry, team size, and other settings you provide during onboarding and in account settings.

2.3 Ad platform integrations

When you connect an ad account from Meta, Google, TikTok, or LinkedIn, you authorize Advertix to access your data on those platforms via their official OAuth flows. We receive and store:

• An encrypted access token (and refresh token where applicable), encrypted using AES-256-CBC before storage
• Ad account identifiers, names, currency, and timezone metadata
• Campaign, ad set, creative, and ad data (names, budgets, statuses, targeting, schedules)
• Performance metrics (impressions, clicks, spend, conversions, revenue) at daily granularity

We use these tokens only to perform the actions you explicitly request through the Advertix interface — reading your campaigns, creating ads on your behalf, and pulling performance data. We do not share these tokens with any third party.

2.4 Usage data

We collect basic usage information such as pages visited, features used, and timestamps. This is used to improve the Service and diagnose issues.

2.5 Cookies

We use cookies only for session management (provided by Clerk) and functional preferences. We do not use third-party advertising or tracking cookies on the Advertix platform itself.

• To provide, maintain, and improve the Advertix Service
• To execute campaign management actions you explicitly request (e.g. publishing an ad, pausing a campaign, syncing metrics)
• To generate AI-assisted campaign strategies, creative copy, and audience suggestions via the Anthropic Claude API
• To send transactional emails (account notifications, alerts)
• To respond to your support requests
• To detect, investigate, and prevent abuse or fraud
• To comply with legal obligations

The Advertix Service uses these third-party processors:

• Clerk — authentication and user management
• Vercel — web frontend hosting
• Railway — backend API hosting
• Supabase / PostgreSQL — database
• Anthropic (Claude) — AI text generation when you use AI-assisted features. We send only the prompt content you provide; we do not send personal identifiers to Anthropic.
• Meta, Google, TikTok, LinkedIn — ad platforms you connect via OAuth. Data flow is governed by each platform’s respective privacy policy.

We do not sell or rent your personal information. We share data only:

• With the third-party processors listed in Section 4, solely to operate the Service
• With ad platforms (Meta, Google, TikTok, LinkedIn) when you explicitly request an action that interacts with them
• To comply with valid legal requests or court orders
• In the event of a merger, acquisition, or asset sale, in which case affected users will be notified

We protect your data with the following measures:

• Ad platform access tokens are encrypted at rest using AES-256-CBC with a SHA-256-derived 32-byte key. Tokens are never logged.
• All data in transit is encrypted via HTTPS / TLS 1.2+.
• Database is hosted in a secure managed environment with role-based access controls.
• Authentication is delegated to Clerk, which provides industry-standard security including SOC 2 Type II compliance and MFA support.

No system is perfectly secure. While we make commercially reasonable efforts, we cannot guarantee absolute security.

We retain your account data, workspace, and ad platform integration data for as long as your Advertix account is active. When you delete your account, we delete your data within 30 days, except where retention is required by law.

You can revoke any ad platform integration at any time from Settings → Integrations. Doing so deletes the stored access token; previously synced campaign metadata may be retained for reporting unless you also delete the workspace.

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar protections, you have the following rights with respect to your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to limit how we use your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on your consent

To exercise any of these rights, email us at support@advertix.io. We will respond within 30 days.

The Advertix Service is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it.

Advertix is operated from Pakistan. Your data may be processed in the United States, the European Union, and other regions where our third-party processors are located. We rely on standard contractual clauses and equivalent safeguards to protect data transferred internationally.

We may update this Privacy Policy from time to time. When we do, we will update the “Effective date” at the top and, for material changes, notify you by email or by a prominent notice on the Service before the change takes effect.

For privacy questions or to exercise any of your rights:

Email: support@advertix.io

Operator: Advertix (operated by AB Qayyum)

Jurisdiction: Pakistan