Privacy Policy

Last updated: 9 October 2026

1. Who we are

Adlytica is operated by VirtusNova S.L., Barcelona, Spain ("we", "us"). We are the data controller for account data and act as data processor for the advertising and analytics data you connect. Contact: hello@adlytica.app.

2. What we collect

• Account data: name, email, company, password hash, plan and billing status.
• Advertising data, only after you authorise it: Meta Ads (campaigns, ad sets, ads, creatives, insights, catalogs, pages linked to your ad accounts) and Google Ads (campaigns, ad groups, ads, metrics).
• Analytics data from Google Analytics 4: aggregated sessions, conversions and revenue by source, medium and campaign.
• Usage data: actions taken in the app, including every change you approve, for the audit log.
• Payment data is handled by Stripe. We never see or store card numbers.

3. How we use it

• To show your performance, calculate scores and generate recommendations.
• To make changes to your ad accounts, only when you explicitly approve them or enable capped automation.
• To measure whether applied recommendations worked, so recommendations improve over time for your account.
• To bill you, provide support and send service notices.

We do not sell your data, use it for advertising, or share it with other customers. Aggregated learnings across accounts are only used in anonymised form that cannot identify you or your ad accounts.

4. Legal bases (GDPR)

Performance of a contract (providing the service), legitimate interests (security, fraud prevention, service improvement) and consent where required (for example optional emails).

5. AI processing

Adlytica uses Claude, provided by Anthropic, to write explanations, recommendations and summaries. We send Claude the minimum account data needed for each task, such as metrics and campaign settings. We never send login credentials or access tokens. Under Anthropic's commercial terms, data sent through the API is not used to train its models.

6. Service providers

Transfers outside the EEA rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses.

7. Google API data

Adlytica's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features you see in Adlytica, is not transferred to others except as needed to provide the service or comply with law, and is not used for advertising.

8. Security

Traffic is encrypted with TLS. Platform access tokens are encrypted at rest. Access to production systems is restricted and logged. Every write to your ad accounts is recorded in an audit log you can export.

9. Retention

We keep data while your account is active. When you disconnect a platform, its tokens are deleted immediately. When you delete your account, we erase your data within 30 days, except records we must keep by law (for example invoices).

10. Your rights

You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent at any time. Email hello@adlytica.app or see data deletion. You may also complain to the Spanish Data Protection Agency (AEPD, aepd.es).

11. Cookies

This website sets no tracking or advertising cookies. The app uses only storage strictly necessary to keep you signed in.

12. Changes

We will post updates on this page and change the date above. Material changes are announced by email to account holders.