Privacy Policy.
Effective date: July 17, 2026
Aderato is a web application at www.aderato.com that generates brand strategy and advertising creatives and, when you choose to connect your Meta account, publishes and monitors ads in your own Meta ad account. Aderato is operated by KI Alpin, Austria (“we”, “us”). This policy explains what data we collect through the Aderato app and website, how we use and store it, and how you can have it deleted. It also describes how we handle data received from Meta Platforms, Inc. (“Meta Platform Data”) when you connect a Meta account.
Questions about this policy or your data: nikolay@ki-alpin.at.
1. Data we collect
Account data. When you create an account we collect your email address and a password (stored only in hashed form by our authentication system).
Content you provide. Website URLs, brand information, text, and images you submit or upload, and the brand strategies, ad copy, images, and videos generated from them.
Meta Platform Data. Received only if you connect a Meta account — see section 2.
Billing data. Payments are processed by Stripe. We store your subscription status and plan; we never see or store your full card details.
Usage data. We use PostHog analytics to understand how the product is used (pages visited, features used) and keep standard server logs (IP address, timestamps) for security and debugging.
2. Meta Platform Data
If you connect your Meta account, you go through Meta’s login dialog and explicitly grant Aderato specific permissions. Depending on what you grant, we receive and store:
- an access token that lets Aderato act on your behalf, stored server-side and never exposed in full to your browser;
- the list of your ad accounts and Facebook Pages, including names, IDs, currency, and linked Instagram business accounts, so you can choose where ads are published (permissions ads_read, pages_show_list);
- campaign, ad set, and ad structure of the ad account you connect, and its performance metrics such as impressions, clicks, and spend, used to show you reports and improve your ads (permission ads_read);
- the ability to create campaigns, ad sets, and ads in your ad account, running in the name of the Page you select — only when you explicitly launch them (permissions ads_management, pages_manage_ads).
We use Meta Platform Data solely to provide these features to you. We do not sell it, do not use it for our own advertising or model training, and do not share it with anyone except the service providers listed in section 4 to the extent necessary to run Aderato. We process Meta Platform Data in accordance with the Meta Platform Terms and Developer Policies.
3. How we use your data
We use your data to provide the service you signed up for (generating strategy and creatives, publishing and reporting on ads), to bill your subscription, to secure and debug the platform, and to understand product usage so we can improve it. Where the GDPR applies, we rely on performance of contract for providing the service and billing, and on legitimate interest for security and product analytics.
Content you submit (such as your website text, brand details, and uploaded images) is sent to the AI providers listed below to generate your outputs. Your Meta access token is never shared with AI providers.
4. Service providers we share data with
- Hetzner Online GmbH (Germany) — server hosting, EU data centers
- Vercel Inc. — website hosting and delivery
- Supabase — authentication infrastructure
- Stripe — payment processing
- PostHog — product analytics
- OpenRouter — AI text generation
- Google — AI image and video generation
- Apify — collection of publicly available web data
- Meta Platforms — ad delivery and the Marketing API, when you connect your Meta account
Each provider receives only the data needed for its purpose. We do not sell your personal data to anyone.
5. Storage and security
Application data is stored on servers in the European Union. All data is transmitted over encrypted connections (TLS). Meta access tokens are used exclusively server-side, and access to production systems is restricted.
6. Data retention and deletion
We keep your data for as long as your account is active. You can delete data at any time:
- Disconnect Meta:in the app, open your workspace’s Connections page and remove the Meta connection. This immediately deletes the stored access token and connection data from our database.
- Revoke via Meta:you can also remove Aderato’s access in your Facebook Settings → Business Integrations, which invalidates the access token. You may additionally request deletion of the data the app received, and we will honor it.
- Delete your account: email nikolay@ki-alpin.at from your account email address and we will delete your account and all associated data, including any Meta Platform Data, within 30 days.
7. Your rights
Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, and to receive it in a portable format. Contact us at nikolay@ki-alpin.at to exercise these rights. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde (dsb.gv.at).
9. Changes to this policy
If we make material changes to this policy we will update this page and its effective date. Significant changes affecting how we handle your data will be announced in the app or by email.