Privacy Policy

Account information. When you register we collect your email address and/or phone number, your name, and an encrypted (hashed) password. Phone sign-in uses a one-time passcode.

Biometric / passkey data. If you enable biometric login we store a WebAuthn public key and credential identifier. We never receive or store your fingerprint, face data, or device PIN — those never leave your device.

Content you upload. Videos, music, images, film and other media you upload or import, plus the ad copy, creatives, campaigns, budgets and audience targeting you create.

Tracking configuration. Pixel IDs and API keys you add for conversion tracking. API keys are stored securely and displayed only in masked form.

Payment information. Subscription and wallet payments are processed by Stripe. We do not store your full card details; we retain transaction records (amount, status, plan).

Usage data. Campaign performance metrics and basic technical logs.

To provide and operate the Service; authenticate you (email, phone OTP, biometrics); generate AI ad copy, creatives and trend insights; manage campaigns and media; process payments; provide analytics; and to secure and improve the Service.

We share data with service providers only as needed to run the Service: Stripe (payments), Twilio (SMS one-time codes, when enabled), Emergent AI providers (to generate ad copy, images and trends from your prompts), and cloud object storage (to host uploaded media). When you connect advertising platforms (e.g., Meta, TikTok, Google/YouTube) or install tracking pixels, data is shared with those platforms under their own privacy policies.

We retain your data while your account is active. You may delete campaigns, media and tracking sources at any time. To delete your account and associated data, contact us at the address below.

Passwords are hashed with bcrypt; sessions use HttpOnly cookies; API keys are stored masked. No method of transmission or storage is 100% secure, but we apply industry-standard safeguards.

Depending on your jurisdiction (including GDPR and CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.

The Service is not directed to individuals under 18 and we do not knowingly collect their data.

We may update this Policy; material changes will be reflected by the "Last updated" date above.

Questions? Email privacy@flameup.studio.