PRIVACY NOTICE · V2

Your brief stays your business.

Effective date: September 5, 2026. Responsible business: Ads On Deck. Privacy contact: hello@adsondeck.com.

What we collect and why

When you choose to save a brief, we collect your name, email, brand, product link, audience, and offer to respond to your request. Saving a brief does not subscribe you to marketing. Paid orders add creative instructions, asset links, rights confirmations, deliverables, and payment references. Stripe handles card data; we do not store card details.

Storage and providers

This site runs through OpenAI Sites and Cloudflare, with structured records in Cloudflare D1. Stripe processes payment. Source assets may stay in the storage service you link. Before transferring private customer assets to a production provider, we confirm its suitability and record the provider and usage rights for the job. Customer assets are not available to other customers.

Cookies and measurement

A necessary browser cookie connects your private brief and order without a login; it expires after 90 days. We record minimal page, brief, checkout, and fulfillment events. Browser events are not proof of payment. Rate limiting uses short-lived hashed request identifiers, not stored raw IP addresses. Infrastructure providers may keep their own operational logs.

We use PostHog for limited usage measurement, such as brief steps and checkout attempts. We do not send your name, email, product or asset links, form contents, or private order links to this analytics service. Session recordings and automatic interaction tracking are disabled. Analytics uses an identifier held only in page memory, with no analytics cookies or persistent browser storage. We honor browser Do Not Track and Global Privacy Control signals. PostHog receives network requests; IP-based location enrichment is disabled. These usage events are not proof of payment.

Access, retention, and choices

Only authorized operators should access client records. Request access, correction, or deletion through the privacy contact above. We review unpaid briefs after 30 days and creative links and intake records 90 days after completion; deletion is reviewed for legal obligations and active disputes. Payment records needed for accounting may be retained longer. Retention review tasks do not themselves delete records automatically.

We do not collect ad-account passwords, Shopify passwords, consumer lists, or payment-card data. Do not put those into your brief. Portfolio reuse and testimonials require separate permission.