Privacy Policy

Introduction

Adium (“we,” “us,” or “our”) operates the Adium platform. This Privacy Policy explains how we collect, use, and protect information when you use our ad benchmarking service. By using Adium, you consent to the practices described in this policy.

Information We Collect

Account Information

When you create an account, we collect your full name and email address. Authentication is handled through Supabase Auth.

Company Information

During onboarding, you provide a company name and select an industry classification. This information is used to group your benchmarks with relevant peers.

Ad Platform Data

When you connect your Google Ads or Meta Ads accounts via OAuth, we access read-only performance metrics including impressions, clicks, spend, conversions, and conversion value. We do not access:

• Your ad creative content or copy
• Audience targeting settings
• Billing or payment information
• Personal data of the people who see your ads

OAuth Tokens

We store encrypted OAuth access and refresh tokens to maintain your ad platform connections. These tokens grant read-only access only.

Usage Data

We collect standard usage data such as page views, feature usage, and server logs to improve the service.

How We Use Your Information

• To pull your ad performance metrics and display them on your dashboard
• To calculate anonymized, aggregated benchmarks across users in the same industry and spend tier
• To authenticate you and manage your account
• To improve, maintain, and secure the service

Benchmarking and Anonymization

Your individual ad performance data is never shared with other users. Benchmarks are computed as statistical aggregates (median, 25th percentile, 75th percentile) across a minimum threshold of accounts per industry and spend-tier segment. Individual account data cannot be reverse-engineered from these aggregates.

Data Sharing

• We do not sell your data.
• We do not share individual account data with third parties.
• Aggregated benchmark data (which cannot identify you) may be used in marketing materials or industry reports.
• We share data with service providers who process data on our behalf under contractual obligations, including Supabase (database and authentication) and Vercel (hosting).

Data Storage and Security

Your data is stored in Supabase (PostgreSQL) with row-level security policies. OAuth tokens are encrypted at rest. The service is hosted on Vercel with HTTPS encryption in transit. Access is restricted by authentication and authorization checks at the middleware and API level.

Your Rights and Choices

• You can disconnect ad accounts at any time, which stops data collection for those accounts.
• You can request deletion of your account and all associated data by contacting us.
• You can revoke Adium’s OAuth access directly from your Google or Meta account settings at any time.

Third-Party Services

Adium integrates with the following third-party services, each subject to their own privacy policies:

• Google Ads API — subject to Google’s API Services User Data Policy
• Meta Marketing API — subject to Meta’s Platform Terms
• Supabase — database and authentication provider
• Vercel — hosting provider

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email address associated with your account. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@adium.com.