Privacy Policy

Last updated: May 1, 2026

AdLens (“we”, “our”, or “us”) operates the AdLens platform accessible at getadlens.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using AdLens you agree to the practices described here.

Questions? Email us at support@getadlens.com.

1. Information We Collect

Account & Authentication Data

When you create an account we collect your name, email address, and profile picture via Clerk, our authentication provider. We use this to identify your account and send transactional emails (receipt, password reset, weekly reports if enabled).

Meta Ads Data

When you connect a Meta Ads account you grant AdLens read and write access to your Meta advertising data. We access and process:

• Ad account IDs and names
• Campaign, ad set, and ad names, statuses, and budgets
• Performance metrics: spend, impressions, clicks, CTR, CPC, reach, and conversions
• Meta user ID (used to de-duplicate accounts across reconnections)
• OAuth access tokens (stored encrypted in our database, used to call the Meta Graph API on your behalf)

We do not store historical performance data. Metrics are fetched fresh from the Meta API on each request and are not persisted in our database.

Payment Information

Payments are processed by Stripe. We never see or store your card number, CVV, or full billing address. We do retain the Stripe Customer ID and subscription status (plan, billing period, payment status) in order to gate access to the service.

Usage Data

We collect server logs including IP address, browser user agent, pages visited, and API request timestamps. This data is used solely for debugging, security monitoring, and service reliability. We do not use it for behavioral advertising.

2. How We Use Your Information

Providing the Service

We use your account and Meta Ads data to display campaign analytics, generate AI-powered insights, detect performance anomalies, and -if you enable it -execute automated Autopilot actions on your campaigns.

AI Processing with Claude

AdLens uses Claude, an AI assistant developed by Anthropic, to generate campaign summaries, performance recommendations, and weekly report narratives. To do this, we send aggregated campaign metrics (spend, impressions, clicks, CTR, and anomaly descriptions) to Anthropic’s API. We do not send your name, email, payment details, or raw ad creative to Anthropic. Anthropic’s data handling is governed by their Privacy Policy.

Weekly Email Reports

If you enable weekly reports, we send a performance summary email to the address you specify. Emails are delivered via Resend. You can disable reports or change the recipient address at any time in Settings.

Billing & Fraud Prevention

Subscription status data is used to determine which features you can access. Payment events from Stripe are processed to keep your subscription status current.

3. Third-Party Services

AdLens relies on the following sub-processors to deliver the service:

• Clerk -authentication and user identity
• Supabase -database hosting (EU and US regions)
• Stripe -payment processing
• Anthropic (Claude) -AI-generated insights and summaries
• Resend -transactional and report email delivery
• Meta / Facebook -ad account data via the Graph API
• Vercel -application hosting and edge infrastructure

Each sub-processor is bound by their own data processing agreements and privacy policies. We do not sell your personal data to any third party.

4. Data Retention

• Account data is retained for as long as your account is active. If you request deletion, we remove your account data within 30 days, subject to the exceptions below.
• Subscription and billing records are retained for 7 years after the end of the subscription to satisfy tax and accounting obligations.
• Meta OAuth tokens are deleted immediately when you disconnect an account or request deletion.
• Autopilot logs are retained for 90 days and then automatically purged.
• Server logs are retained for 30 days.

5. Your Rights Under GDPR (EU/EEA Residents)

If you are in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) gives you the following rights:

• Right of access -request a copy of the personal data we hold about you.
• Right to rectification -ask us to correct inaccurate data.
• Right to erasure (“right to be forgotten”) -request deletion of your personal data.
• Right to restriction -ask us to restrict processing in certain circumstances.
• Right to data portability -receive your data in a structured, machine-readable format.
• Right to object -object to processing based on legitimate interests.
• Right to withdraw consent -where processing is based on consent, withdraw it at any time.

Lawful basis for processing: We process your data on the basis of (a) contractual necessity -to deliver the service you subscribed to; (b) legitimate interests -security monitoring and service improvement; and (c) legal obligation -retaining billing records.

To exercise any of these rights, email support@getadlens.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

6. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA provides you with the following rights:

• Right to know -request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete -request deletion of personal information we have collected, subject to certain exceptions.
• Right to correct -request correction of inaccurate personal information.
• Right to opt out of sale or sharing -we do not sell or share your personal information with third parties for cross-context behavioral advertising.
• Right to limit use of sensitive personal information -we do not use sensitive personal information beyond what is necessary to provide the service.
• Right to non-discrimination -we will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email support@getadlens.com with the subject line “CCPA Request”. We will verify your identity and respond within 45 days.

7. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive fields, and access controls limited to personnel who need the data to operate the service. OAuth tokens are stored in an isolated database accessible only via server-side code using a service-role key. No client-side code has direct database access.

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password for your AdLens account and to revoke Meta API access promptly if you suspect any compromise.

8. Cookies & Local Storage

We use a small number of first-party cookies strictly necessary to operate the service:

• Authentication session cookie -set by Clerk to maintain your logged-in state.
• Active client cookie -stores which Meta Ads account is currently selected.
• OAuth CSRF cookie -a short-lived cookie used during the Meta OAuth flow to prevent cross-site request forgery. Deleted immediately after the flow completes.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

9. Children’s Privacy

AdLens is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we will notify you by email or by displaying a notice in the AdLens dashboard before the changes take effect.

11. Contact Us

For privacy-related questions, data access requests, or deletion requests, contact us at: