Privacy policy

Last updated 23 August 2026

This policy explains what data adlx collects, why, how it is stored, who it is shared with, and how to delete it. It covers data you give us directly and data we obtain from advertising platforms on your instruction.

adlx (operated by O2 AI LLC, California, USA) values your privacy and is committed to protecting your information. This policy applies to the adlx product only.

1. What adlx does

adlx is a reporting tool. It reads advertising performance data from ad accounts you connect and presents it in one place. adlx is read-only: it does not create, modify, pause or delete campaigns, ad sets, ads, budgets or audiences, and it does not place orders or spend money on your behalf.

2. Data we collect

2.1 Account data you give us

• Your email address and, optionally, your name.
• A hash of your password. We never store the password itself.
• Your organisation's name.
• Session records: when you signed in, and the browser and IP address used, so you can review and revoke your own sessions.

2.2 Data obtained from advertising platforms

When you connect a Meta or Google Ads account, you authorise adlx through that platform's own sign-in screen. We then read, on a recurring basis:

• Campaign structure — your ad accounts, campaigns, ad sets or ad groups, ads, and their settings.
• Performance statistics — impressions, clicks, spend, conversions and similar figures, aggregated by day and by campaign.
• Connection details — who authorised the connection and what permissions were granted, so we can show you which accounts are connected and tell you when re-authorisation is needed.
• Access credentials — the tokens the platform issues to let us read the above, stored encrypted.

We do not collect personal data about the people your ads reach. adlx reads aggregate statistics only — not customer lists, matched audiences, or the identity or contact details of anyone who saw or clicked an ad.

2.3 Cookies

adlx sets one cookie, and only after you sign in. It holds a random session identifier — not your password, your email, or any advertising data — and it is what keeps you signed in between pages. Signing out deletes it.

We use no analytics cookies, no advertising cookies, and no third-party trackers. There is nothing to opt out of, because there is nothing tracking you.

2.4 Data we do not collect

• We do not use advertising cookies or third-party trackers on this site or in the application.
• We do not buy, enrich, or otherwise obtain data about you from data brokers.
• We do not access your Google account beyond the Google Ads data you explicitly authorise — not your email, files, calendar or contacts.

3. How we use it

• To provide the service: retrieving your advertising data on a schedule and presenting reports.
• To keep it working: detecting expired or revoked credentials so we can tell you an account needs reconnecting, and diagnosing errors.
• To secure it: authenticating you, and detecting misuse.

We do not use your advertising data to train machine learning models, to build products for other customers, to create benchmarks or aggregated market data, or for advertising of any kind. We do not sell it, and we do not share it for cross-context behavioural advertising.

4. How it is stored and protected

adlx uses encryption in transit and at rest, and access controls that limit who and what can reach stored data. Access credentials for connected ad accounts are encrypted before they are stored, and passwords are stored only as irreversible hashes — they cannot be recovered from the stored value by us or by anyone else. Data is held on servers in the European Union.

No security method is completely risk-free, and we cannot guarantee absolute protection.

5. Who we share it with

We do not sell your data, and we do not share it with advertisers, data brokers, or other customers. We share it only with the service providers required to operate adlx — hosting, database storage, encryption key management and backups — and only to the extent they need it to provide those services to us.

We may also disclose data where required by law, or to protect our rights or the safety of others. If adlx is ever acquired, data may transfer as part of that transaction; you would be notified before any change of control affects how your data is handled.

6. Google user data

adlx's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Google Ads data obtained through the API is:

• used only to provide and improve the reporting features you can see in the product;
• never transferred to others except as necessary to provide the service, to comply with applicable law, or as part of a merger or acquisition;
• never used for advertising, and never sold;
• never read by a human, except with your explicit permission for a specific support request, for security purposes, to comply with applicable law, or where the data is aggregated and anonymised.

We retain Google user data only while your account is active and the Google Ads connection remains in place. If you disconnect the account or revoke access from your Google account settings, the stored credentials are deleted immediately and any remaining Google user data is deleted within 30 days. If you close your adlx account, all of it is deleted within 30 days (§8.2).

7. Meta platform data

Data obtained through Meta's Marketing API is used solely to provide the reporting features described above, is not transferred to third parties except as set out in §5, and is deleted on the terms in §8. adlx requests read access only; it cannot alter your campaigns or spend.

8. Retention and deletion

Disconnecting an ad account. You can disconnect a connected account at any time from within adlx. The stored credentials for it are deleted and adlx stops retrieving its data. Performance data already retrieved stays in your reports, so past reports do not silently change — write to support@adlxai.com if you want it erased as well. You can also revoke access directly from Meta's or Google's own settings, which takes effect immediately and independently of us.

Closing your account. Write to support@adlxai.com and we will delete your account, your credentials and your advertising data within 30 days. Backups are overwritten on a rolling basis after that.

While your account is open, advertising data is retained so that year-on-year comparison works.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to complain to a data protection authority. Write to support@adlxai.com and we will respond within 30 days.

If you are in the European Economic Area or the United Kingdom, our legal basis for processing account data is performance of our contract with you, and for security logging our legitimate interest in keeping the service safe. We do not process special categories of personal data.

10. Children

adlx is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

If we make a material change we will update the date at the top of this page and notify account holders by email before it takes effect. Continued use after that date means you accept the revised policy.

12. Contact

If you have any questions or privacy concerns, please contact us at support@adlxai.com.