Privacy Policy

This Privacy Policy describes how Advient ("Advient," "we," "our," or "us") collects, uses, shares, and protects information when you use our AI-powered ad creative generation application (the "Service"). Advient is available as a Shopify app and integrates with third-party platforms including Google and Meta (Facebook/Instagram) to help individual marketers and creators build and publish ad creatives.

By installing or using the Service, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not install or use Advient.

1. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification, and the revised effective date will be updated above. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

2. Who We Are and How to Contact Us

Advient is the data controller for personal information processed through the Service. For any privacy-related questions, requests, or concerns, please contact us at:

• Privacy enquiries: contact@advient.io
• Website: www.advient.io

We will respond to all privacy-related requests within 30 days.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account or use the Service, you may provide:

• Name, email address, and account credentials
• Brand and business details, including your store name, logo, and product descriptions
• Creative briefs, campaign goals, target audiences, and ad copy inputs you enter into the Service
• Uploaded images and media assets used to generate ad creatives
• Billing and payment information (handled by a PCI-compliant third-party payment processor — we do not store raw card data)
• Communications you send to our support team

3.2 Information Collected via the E-commerce Platform

When you install Advient through an app store, we access data from your connected store that is necessary to provide the Service. This may include:

• Store account details such as store name and email address
• Product catalogue information including titles, descriptions, images, and pricing, used to generate relevant ad creatives
• Store branding and theme information

We access only the minimum data scopes required to deliver the Service's core functionality. We apply data minimisation principles throughout. We do not access end-customer personal data (such as buyer names, addresses, or payment details) unless explicitly required for a specific feature, which will be disclosed separately.

3.3 Information Collected via Connected Advertising Platforms

If you choose to connect third-party advertising accounts to the Service (for example, to publish creatives or retrieve performance data), we may access data from those platforms including:

• Account authentication credentials and profile information
• Advertising account metadata such as campaign structure and ad format specifications
• Aggregated performance data such as impressions, clicks, and spend, used to display reporting within the Service

We access data from connected advertising platforms only to the extent necessary to provide the specific features you have enabled. We do not use this data for any purpose beyond operating and improving the Service on your behalf. Full details of our obligations to specific platform providers are set out in Section 7.

3.4 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device and browser data (IP address, browser type, operating system)
• Usage and log data (pages visited, features used, generation history, session duration, clicks, error logs)
• Cookies and similar tracking technologies (see Section 9)

4. How We Use Your Information

We process your information only where we have a valid legal basis. We use it for the following purposes:

4.1 To Provide and Operate the Service

• Authenticate your account and maintain security
• Generate AI-powered ad creatives based on your inputs and connected store data
• Publish creatives to connected advertising accounts as directed by you
• Process payments and manage your subscription
• Respond to support requests and troubleshoot issues
• Send transactional and administrative communications

4.2 To Improve the Service

• Analyse how users interact with the Service to improve features and user experience
• Conduct internal research and testing of new functionality
• Generate aggregated, anonymised insights about usage patterns

We do not use your specific brand assets, creative inputs, store data, or connected advertising account data to train AI models shared with other users, without your explicit prior consent.

4.3 To Personalise Your Experience

• Remember your brand kits, saved creatives, and campaign preferences
• Surface relevant creative suggestions based on your products and past activity

4.4 For Marketing (Where You Have Opted In)

• Send product updates, newsletters, tips, and promotional content where you have opted in
• You may unsubscribe from marketing emails at any time (see Section 5)

4.5 For Legal and Security Purposes

• Comply with applicable laws and regulatory obligations
• Respond to lawful requests from governmental or regulatory authorities
• Detect, investigate, and prevent fraud, abuse, or unauthorised access
• Protect the rights, safety, and property of Advient, our users, and the public

5. Your Choices and Rights

You have the following choices and rights regarding your personal information:

• Account data: You can view and update your account details at any time within the app settings.
• Deletion: You may request deletion of your account and associated data by contacting contact@advient.io. We will complete deletion within 30 days, or inform you if we are legally required to retain certain data.
• Data subject requests via the e-commerce platform: Advient responds to mandatory compliance webhooks from our platform partner. When a customer data request, customer redaction, or store redaction is received, we will process it within 30 days.
• Marketing opt-out: You can unsubscribe from marketing emails using the unsubscribe link in any email we send. This will not affect account-related communications.
• Connected account access: You can disconnect any third-party advertising account at any time from within the Service. Disconnecting will stop further data access from that platform.
• Cookie preferences: You can manage cookies through your browser settings or our cookie preference centre (see Section 9).
• Data portability: You may request a copy of your personal data in a structured, machine-readable format.

6. How We Share Your Information

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes. We may disclose your information only in the following limited circumstances:

6.1 Service Providers

We share data with trusted third-party providers who help us operate the Service, including cloud infrastructure, payment processing, analytics, and customer support tools. All providers are bound by confidentiality agreements and may only process data for the purposes we specify.

6.2 Connected Advertising Platforms

When you authorise the Service to publish creatives on your behalf, we transmit the necessary data to your connected advertising platforms as directed by you. Such transmissions are subject to those platforms' own terms and privacy policies in addition to this policy.

6.3 E-commerce Platform Partners

As an app distributed through a third-party app store, certain information about your use of Advient may be accessible to the platform provider in accordance with their partner programme agreement and privacy policy.

6.4 Legal and Safety Disclosures

We may disclose information where required by law, court order, or to protect the rights, property, or safety of Advient, our users, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in data controller.

6.6 Aggregated / Anonymised Data

We may share aggregated or anonymised data that cannot identify you individually with third parties for business and research purposes.

7. Third-Party Platform Compliance Disclosures

7.1 E-commerce Platform (Shopify)

Advient is distributed as an app on the Shopify App Store and operates in compliance with the Shopify Partner Program Agreement and Shopify API License and Terms of Use. We subscribe to and respond to all mandatory compliance webhooks. Merchant data and customer data accessed via the Shopify API will not be used to develop or train AI or machine learning systems without explicit written consent, in line with Shopify's platform requirements.

7.2 Search and Display Advertising Platform (Google)

Advient's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we access only the minimum OAuth scopes required to deliver Service functionality; we do not use data obtained from Google APIs to serve ads, for retargeting, or for interest-based advertising; we do not sell or transfer such data to third parties; and we do not allow human access to Google user data except with your consent, for security purposes, or as required by law.

7.3 Social Advertising Platform (Meta)

Our use of data obtained through Meta's platform APIs complies with the Meta Platform Terms and Meta Developer Data Use Policy. We obtain valid user consent before accessing your advertising account data, use that data only as described in this policy and as directed by you, do not sell it or use it for purposes outside those described here, and will delete it promptly upon your request or upon termination of the Service relationship. Our privacy policy is publicly accessible and not geo-blocked, in accordance with Meta's platform requirements.

8. AI-Generated Creatives and Your Content

When you use Advient to generate ad creatives, your inputs — including brand descriptions, uploaded assets, creative briefs, and product data — are processed by our AI system to produce outputs. The following principles apply:

• You retain ownership of the creative outputs generated through your use of the Service, subject to our Terms of Service.
• We do not use your specific creative inputs, brand assets, store data, or connected advertising account data to train shared AI models accessible to other users, without your explicit prior consent.
• Aggregated and anonymised usage patterns, such as which creative formats are most used, may be used to improve the Service without identifying you.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. We use the following categories of cookies:

• Essential cookies — Required for core Service functionality, such as maintaining your login session. These cannot be disabled.
• Analytics cookies — Help us understand how users interact with the Service so we can improve it (e.g., page views, feature usage). You may opt out via browser settings.
• Personalisation cookies — Remember your preferences, brand kits, and recent activity.

You can control or disable non-essential cookies through your browser settings. Disabling certain cookies may affect the performance or availability of some features. We currently do not respond to browser Do Not Track signals. Where required by law (e.g., for users in the EEA or UK), we will obtain your consent before placing non-essential cookies.

10. Security

We implement reasonable and appropriate technical, administrative, and physical safeguards to protect your personal information, including encrypted data transmission, encryption at rest, access controls, and regular security reviews. While we take all reasonable precautions, no system is completely secure. If you discover a potential security vulnerability, please contact us at contact@advient.io.

11. Data Retention

We retain your personal information only for as long as necessary to provide the Service and fulfil the purposes described in this policy:

• Account data is retained for as long as your account is active and for a reasonable period thereafter.
• Creative assets and generation history are retained for the duration of your subscription and deleted within 90 days of account closure.
• Store data from the e-commerce platform is retained only for as long as your app is installed; upon uninstall, we process any applicable redaction requests within 30 days.
• Data from connected advertising platforms is retained only as long as necessary to provide the requested feature and deleted promptly upon disconnection or written request.
• Financial records are retained for up to 7 years as required by applicable law.

You may request early deletion at any time by contacting contact@advient.io.

12. Third-Party Links and Integrations

The Service integrates with and may contain links to third-party platforms, including Google Ads, Meta Ads Manager, and Shopify. We are not responsible for the privacy practices of these external platforms. We encourage you to review their respective privacy policies:

• Google Privacy Policy
• Meta Privacy Policy
• Shopify Privacy Policy

13. Children

Advient is not directed at or intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us at contact@advient.io and we will delete it promptly.

14. Your EEA and UK Privacy Rights (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR and applicable UK data protection law:

• Right of access — Request confirmation of whether we process your data and obtain a copy.
• Right to rectification — Request correction of inaccurate or incomplete data.
• Right to erasure — Request deletion of your personal data in certain circumstances.
• Right to restrict processing — Request that we limit how we use your data.
• Right to data portability — Receive your data in a structured, commonly used, machine-readable format.
• Right to object — Object to processing based on our legitimate interests at any time.
• Rights regarding automated decisions — The right not to be subject to solely automated decision-making that significantly affects you.
• Right to withdraw consent — Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@advient.io. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (for example, the ICO in the UK or your national DPA in the EEA).

15. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including:

• The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• The right to delete your personal information.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioural advertising).
• The right to limit use of sensitive personal information.
• The right not to receive discriminatory treatment for exercising your privacy rights.

To submit a CCPA/CPRA request, contact us at contact@advient.io with "California Privacy Request" in the subject line. We will verify your identity and respond within 45 days.

16. International Data Transfers

Advient operates globally. Your personal information may be transferred to and processed in countries outside your country of residence, including the United States and other jurisdictions that may not provide the same level of data protection as your home country. Where such transfers occur, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or other mechanisms recognised under applicable law to ensure your data receives adequate protection.