Privacy Policy

1. Introduction

Welcome to AdFlow — the AI-powered advertising campaign platform. Operated through (app.adfluxa.ai), we are committed to protecting your privacy and personal data in accordance with the Saudi Arabian Personal Data Protection Law (PDPL). This policy explains how we collect, use, protect, and share your information when you use our services.

2. Information We Collect

2.1 Account Information

• Full name, email address, and phone number
• Business name, industry type, and city
• Business logo, website URL, and WhatsApp number
• Commercial Registration and VAT number (optional)

2.2 Campaign Data

• Ad content (headlines, text, images, call-to-action buttons)
• Targeting settings (age range, location, interests)
• Budgets, campaign schedules, and performance metrics
• AI-generated designs and reference images

2.3 Payment & Wallet Data

• Transaction history (top-ups, debits, refunds)
• Wallet balance and AI design credits balance
• We do NOT store card details — payments are processed through a licensed payment gateway

2.4 Technical Usage Data

• IP address, browser type, and operating system
• Login records and session timestamps
• Audit logs for security purposes

3. How We Use Your Information

• Providing platform services: campaign creation, design generation, ad publishing
• Processing payments, managing wallet and design credits
• Generating ad copy and designs using artificial intelligence
• Publishing campaigns on social media platforms on your behalf
• Sending campaign performance notifications via WhatsApp or email
• Improving our services and developing new features
• Complying with legal and regulatory requirements

4. Third-Party Services

We share only necessary data with the following parties to operate the platform:

• Meta (Facebook / Instagram): Campaign data and targeting for ad publishing. Subject to Meta's privacy policy.
• Anthropic (Claude AI): Campaign content only for generating ad copy — no personal data is shared.
• fal.ai: Product images and prompts for AI-powered ad design generation.
• Payment Gateway (Paylink): Transaction data only for processing top-ups. Licensed by the Saudi Central Bank (SAMA).
• WhatsApp (Evolution API): Phone number and notification content for sending campaign updates.

5. AI & Automated Decisions

• We use AI to generate ad copy, design images, and suggest target audiences
• All generated content is presented for your review and editing before publishing
• We make no automatic financial decisions — wallet deduction occurs only after you approve publishing
• You can always modify or reject any AI-generated content

6. Data Security

• All communications encrypted via HTTPS/TLS protocol
• API keys and passwords encrypted and stored securely
• HMAC-SHA256 verification for payment webhooks
• Rate limiting to prevent abuse
• Full audit trail for all financial and sensitive operations
• Input sanitization to prevent injection attacks
• Permission verification on every operation — users cannot access other users' data

7. Data Retention

• We retain your data while your account is active
• Financial records are kept for 5 years per regulatory requirements
• Audit logs are retained for 1 year
• Upon account deletion, personal data is removed within 30 days, except where legally required

8. Your Rights

Under the Saudi Personal Data Protection Law (PDPL), you have the following rights:

• Access and view your personal data
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw your consent for data processing at any time
• Export your data in a portable format
• File a complaint with the relevant data protection authority

9. Cookies

• We use session cookies only to maintain your login state
• We save campaign drafts in localStorage to prevent losing your work
• We do not use third-party advertising or analytics tracking cookies

10. Policy Updates

We may update this policy from time to time. We will notify you of any material changes via email or in-app notification at least 14 days before they take effect.

11. Contact Us

For any questions or requests related to privacy and data protection: