Privacy Policy

1. Who we are

AdReady.AI (the "Service", adready.ai) is provided by Maksym Grabov, an individual ("we"). This Policy explains what data we collect, how we use it, who we share it with and how to delete it.

2. What data we collect

• Account data: your email address.

• Project data: website URL, business type and description, region, budget, goals, offer, keywords, brand settings.

• Content you create: messages to the assistant, uploaded reports (CSV), notes.

• Data about your website: publicly available content of the pages you ask us to check.

• Google Ads data — only if you connect your account (section 5).

• Technical data: server logs, product usage events (for example, that a setup step was completed), session cookies.

3. How we use data

To provide the Service: check pages, give recommendations, suggest keywords, build campaign structure and ad copy, analyse reports, answer questions, and provide sign-in and security. Usage events help us see where people get stuck and improve the Service.

4. AI processing

To produce recommendations and answers, your project text, page content and requests are sent to the AI models of our providers (section 6). If you connect Google Ads, search terms and their metrics are sent there too — to analyse the report and suggest keywords.

We do not use your data, including Google Ads data, to train AI models.

5. Google Ads data

Connecting a Google Ads account is optional: without it the Service works with reports you upload as files.

What access we request. The Google Ads API has a single scope — https://www.googleapis.com/auth/adwords. Google offers no read-only mode, so formally this scope also allows changes. We only read: the Service code contains no call that changes anything in your account, and an automated test enforces this on every code change.

What we read: the list of accounts you can access; the search terms report for the last 30 days — the search terms, campaign and ad group names, impressions, clicks, cost, conversions and conversion value; Keyword Planner keyword ideas for your pages.

Why: to show which searches spend budget without results, and to suggest keywords from searches that already brought you clicks. The data is used only for these features, which you see in the interface.

How we store it. The account access key (refresh token) is stored encrypted (AES-256-GCM); the short-lived access token is not stored at all. Report analysis results are saved in your project. Search terms used for keyword suggestions are not stored separately.

Who we share it with: only the providers in section 6, and only to run these features. We do not sell Google Ads data, do not use or transfer it for serving ads, for credit-worthiness or lending purposes, or to train AI models. We do not read your account data manually — except when you ask us to, when needed for security (such as investigating abuse), or when required by law.

How to disconnect: the «Disconnect» button in the Google Ads block of your project — we revoke access at Google and delete the key. You can also revoke access yourself at https://myaccount.google.com/permissions.

AdReady.AI's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

6. Who we share data with (subprocessors)

To run the Service we use third-party providers, to whom the necessary data is sent:

• Supabase — data storage and sign-in.

• Vercel — application hosting.

• Anthropic (Claude) — AI text processing.

• Voyage AI — text embeddings for searching our knowledge base.

• Jina AI — fetching the text of public pages you ask us to check (the page URL is sent).

• Google: PageSpeed Insights — speed and quality of pages you specify; Google Search autocomplete — query variants for keyword suggestions (the words we look up are sent); Google Ads API — if you connect your account.

We do not sell your personal data.

7. Retention and security

We keep data while your account exists and while it is needed to run the Service, after which we delete or anonymise it.

We apply reasonable technical and organisational safeguards, but no service can guarantee absolute security.

8. Your rights

Depending on your jurisdiction (including GDPR and CCPA) you may have the right to access, correct, delete and export your data, and to restrict or object to processing.

To exercise these rights, or to delete your account together with all project data, write to max@grabov.com. You can also delete projects yourself in the interface.

9. Cookies

We use only necessary cookies — for sign-in and to keep your session. Without them the Service cannot recognise you. We set no advertising or third-party analytics cookies.

10. International data transfers

Our providers may process data outside your country. We take reasonable steps to ensure such transfers comply with applicable law.

11. Children

The Service is not intended for persons under 18 (or the age of majority in your jurisdiction). We do not knowingly collect children’s data.

12. Changes to this Policy

We may update this Policy. Changes are posted on this page with a new date. If we start using Google Ads data in a new way, we will ask for your consent first.

13. Contact

Privacy questions and data requests: max@grabov.com.