Privacy Policy

Adfield is the controller for personal data processed under this Privacy Policy, except where we process data on behalf of a customer, in which case the customer is the controller and Adfield acts as processor.

Questions or requests concerning privacy can be sent to support@adfield.ai. Adfield operates under the laws of the Netherlands, including the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG).

Account data: name, email address, password (stored in hashed form) and, if you sign in with Google, the basic profile information Google shares with us, such as your name, email address and profile picture.

Organization and workspace data: company name, team members, roles, settings and onboarding information you provide.

Advertising data: campaigns, targeting choices, budgets, locations, creatives, texts, images, videos, landing pages, pixel and website details and performance data related to your advertising.

Billing data: subscription plan, payment status and transaction references. Payments are processed by our payment provider. Adfield does not store full credit card numbers. Advertising spend is charged by the advertising platform to the payment method you connect.

Communication data: messages, support requests, feedback and any other information you send us.

Usage and technical data: IP address, browser type, device information, pages visited, referring URLs, timestamps, interactions, log files and error reports.

We do not intentionally collect special categories of personal data. You must not provide such data to us or include it in advertising content unless permitted by law.

Providing the Services, creating and managing accounts, workspaces and ad accounts, processing subscriptions and providing support: performance of a contract (Article 6(1)(b) GDPR).

Reviewing campaigns and content, preventing fraud, abuse, policy violations and security incidents, and enforcing our Terms of Service: legitimate interests (Article 6(1)(f) GDPR).

Analytics, measuring marketing effectiveness, improving and developing the Services: legitimate interests or, where required by law, consent (Article 6(1)(a) GDPR).

Complying with legal obligations such as tax and accounting rules, and responding to lawful requests from authorities: legal obligation (Article 6(1)(c) GDPR).

Establishing, exercising or defending legal claims: legitimate interests.

We use cookies, local storage and similar technologies that are necessary to keep you signed in and to operate the Services securely.

We use Google Analytics to understand how visitors use the website. Google may process data such as IP address, device information and browsing behaviour.

We use our payment provider's pixel to measure visits and conversions. When an account is created, we may send a registration event to this provider that includes your email address, name and user ID, to attribute and measure sign-ups.

Where consent is required, we will request it. You can block or delete cookies through your browser settings, which may affect the functioning of the Services.

We share personal data only where necessary for the purposes above, with: our payment provider (payments, subscriptions, conversion measurement); infrastructure partners; Google (sign-in, analytics, search services); hosting, database, authentication and email providers; mapping providers such as Mapbox; and advertising platforms such as Meta, on which your campaigns are run.

Advertising platforms process data under their own terms and privacy policies, and act as independent controllers. Adfield is not responsible for their processing.

We may also disclose data to professional advisers, to authorities when required by law or to protect our rights, and to a successor in connection with a merger, acquisition or sale of assets.

We do not sell personal data.

Some of our service providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on adequacy decisions, the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.

We retain personal data for as long as necessary for the purposes described in this Privacy Policy, including for as long as your account is active, and thereafter as long as required to comply with legal obligations (such as the seven-year Dutch fiscal retention period), resolve disputes and enforce agreements.

We may retain anonymized or aggregated data without limitation.

We take reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

Subject to applicable law, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting earlier processing.

Send requests to support@adfield.ai. We may need to verify your identity and may decline requests where permitted by law.

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your country.

Where you upload personal data of third parties, such as audiences or leads, you are the controller and responsible for having a lawful basis and providing required notices. Adfield processes such data only to provide the Services.

The Services are not intended for persons under 18. We do not knowingly collect personal data from minors.

We may update this Privacy Policy at any time. The updated version takes effect when published on this page. Continued use of the Services after publication constitutes acceptance of the updated version.

Adfield, email: support@adfield.ai.