Legal

Privacy Policy

What data we collect, why we collect it, and the controls you have. Last updated 28 June 2026.

1. Data controller

ADPILOT AI LIMITED (UBI 80638582), Unit B, 11/F, 23 Thomson Road, Wan Chai, Hong Kong is the data controller for personal data processed via ADmetric AI. For GDPR / UK GDPR purposes you can reach our data protection contact at privacy@admetric.ai.

2. What we collect

  • Account data: name, business email, workspace name, role.
  • Billing data: tax ID, invoicing address, last-four digits of the payment method. Full card numbers are tokenised by our payment partner and never reach our servers.
  • Connected-platform data: OAuth tokens, account IDs, budget settings, spend, invoices, and metadata returned by the platforms you connect.
  • Product telemetry: page views, feature usage, and error logs, with IP addresses truncated to /24.

3. Why we process it

To provide the service (contractual necessity), to comply with anti-money-laundering and tax obligations (legal obligation), to secure the platform and prevent fraud (legitimate interest), and — only with your separate opt-in — to send product updates.

4. Sharing

We share data with vetted subprocessors strictly to operate the service: cloud hosting, payment processing, identity verification, customer support, and analytics. A current list is available at privacy@admetric.ai. We do not sell personal data.

5. International transfers

Where data leaves the EEA / UK, transfers are protected by Standard Contractual Clauses and supplementary measures including encryption in transit and at rest.

6. Retention

Account and ledger data is retained for as long as your workspace is active, plus the period required by applicable tax and financial-record laws (typically up to 10 years). Product telemetry is retained for 13 months.

7. Your rights

You have the right to access, correct, delete, and export your personal data, and to object to or restrict certain processing. Email privacy@admetric.ai and we will respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication and a privacy-friendly first-party analytics cookie. No third-party advertising cookies are set on our marketing site.

9. Updates

We will notify workspace admins by email at least 30 days before any material change to this policy takes effect.