Privacy and payment data

Your account email and organization, campaign settings, information about your ads (creative metadata), the evidence from ad and landing-page approval checks, records of webhook deliveries, payment requests (funding intents), ledger entries, and the provider IDs we need for support and reconciliation.

• When you connect an AI app such as Claude, ChatGPT, or Cursor, the app registers itself with us: its name, its redirect addresses, and, for some apps, a client secret that we keep only as a hash.
• We keep a hash of the network address that registered the app, only to limit registrations per hour.
• You sign in with a one-time code sent to your email, which we store only as a hash and which expires after 15 minutes.
• When you click Allow we issue the app its own API key, named after the app. The one-time authorization code behind it is also stored only as a hash and expires after 10 minutes.
• What the app then does through its tools (for example creating an ad or reading performance) is stored like the same action in the dashboard.
• For each call our logs record the tool name, the API path used (which can include IDs such as a campaign ID), its status, and its timing. They do not record your API key or the content you sent.

An app keeps access until you revoke its key under API keys in your dashboard, which takes effect at once. Account records, campaign settings, and ledger entries are kept while your account is open. Ledger and payment records are kept for accounting even after an account is closed.

To close your account or ask for your data, email support@adprimezero.com from the email on the account.

We do not store raw card numbers, bank account numbers, card security codes, or payment passwords. We use a hosted checkout page so that sensitive payment details are entered with the payment provider, not with us.

Our structured logs include limited IDs, statuses, timings, and provider event names. They must not include access tokens (bearer tokens), raw payment credentials, secrets, or the full content of private requests.

Our internal admin screens show payment and ledger records in redacted form, so support staff, and people reviewing our business for investment (due diligence), can check our controls without broad access to secrets or the database.

If you join the Adprime healthcare and health-surveys newsletter, we store that email, the page you used, and optional ad click fields so Adprime can send health notes and survey invites for managed lead-generation campaigns. That list is not an Adprime Zero ad account. Reply to a newsletter email to be removed.

Privacy questions and data requests: support@adprimezero.com. Security reports: security@adprimezero.com. Both reach a person.