Privacy Policy
Last updated: 12 June 2026
1. Who we are
Adplico is operated by Adplico LTD, a company registered in England and Wales, with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
We are the data controller of your personal data within the meaning of Article 4(7) of the UK GDPR and the General Data Protection Regulation (EU GDPR, Regulation (EU) 2016/679).
Contact us:
- General enquiries:
- Data protection:
- Postal address: Adplico LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
2. Data protection enquiries
For any question regarding the processing of your data or the exercise of your rights, contact us at .
3. What data do we collect and why?
We only collect the data strictly necessary for our purposes (data minimisation principle, Art. 5(1)(c) GDPR).
3.1 Creating and managing your account
| Data | Legal basis | Retention |
|---|---|---|
| Email address, first name, last name | Art. 6(1)(b) — performance of the contract | Lifetime of the account + 3 years after closure |
| Password (PBKDF2-SHA256 hash) | Art. 6(1)(b) | Lifetime of the account |
| Profile picture (via Google OAuth) | Art. 6(1)(b) | Lifetime of the account |
| Session data (encrypted token) | Art. 6(1)(b) | 30 days |
3.2 Signing in with Google (OAuth)
If you choose to sign in with Google, we retrieve your unique identifier, email address, first name, last name and profile picture. We do not access your Google account or any of your other Google data.
3.3 Using the service
| Data | Legal basis | Retention |
|---|---|---|
| Projects, videos, configurations | Art. 6(1)(b) | Lifetime of the account + 30 days |
| Activity logs | Art. 6(1)(f) — legitimate interest | 90 days |
| IP address (Cloudflare logs) | Art. 6(1)(f) | 30 days |
3.4 Subscription and payment
Payments are processed by our payment provider. We do not store your card number.
3.5 Connecting to Meta Ads
| Data | Legal basis | Retention |
|---|---|---|
| Meta access token (AES-encrypted) | Art. 6(1)(b) | Lifetime of the connection |
| Ad accounts, pages, pixels | Art. 6(1)(b) | Lifetime of the connection + 30 days |
| Metrics (CTR, ROAS, impressions) | Art. 6(1)(b) | 2 years |
3.6 AI video generation
The source images and videos you upload are transmitted to AtlasCloud (Seedance) for generation. If these files contain identifiable faces or voices, contact before uploading.
3.7 Transactional emails
Email address used for password resets and notifications (Art. 6(1)(b), lifetime of the account).
3.8 Cookies and trackers
On our public website, we use analytics cookies (Google Analytics 4) and advertising cookies (Meta Pixel) only with your prior consent. You can manage your preferences at any time via the “Manage cookies” link at the bottom of every page.
3.9 Adplico Chrome extension
Our browser extension lets you clone ad images and videos into your Adplico library. It processes the following data:
| Data | Legal basis | Retention |
|---|---|---|
| Adplico session token (stored locally in your browser) | Art. 6(1)(b) — performance of the contract | Until sign-out or uninstall |
| Media (image/video) you explicitly clone, and the URL of the page it came from | Art. 6(1)(b) | Lifetime of the account + 30 days |
| Overlay display preferences (global and per-site, stored locally) | Art. 6(1)(b) | Until uninstall |
Detection of the media present on the pages you visit happens entirely locally, inside your browser. No data is transmitted to our servers until you explicitly click “Clone”. The extension does not collect your browsing history, the content of the pages you visit, or any data in the background, and it does not sell or transfer any data to third parties other than the processors listed in section 4. Cloned media is stored on our infrastructure (Cloudflare R2) and is only accessible to your workspace.
4. Who receives your data?
We do not sell your data. We share it only with our processors (Art. 28 GDPR):
| Processor | Role | Location | Safeguards |
|---|---|---|---|
| Cloudflare | Infrastructure, CDN | USA + global | EU-US DPF + SCCs |
| Payment provider | Payment | USA | EU-US DPF + SCCs |
| SendGrid (Twilio) | Transactional emails | USA | EU-US DPF + SCCs |
| Authentication, analytics | USA | EU-US DPF | |
| Meta Platforms | Ad publishing | USA (via IE) | EU-US DPF |
5. Transfers outside the European Union
Some processors are established in the United States. These transfers are governed by the EU-US Data Privacy Framework adequacy decision (2023/1795) and/or by Standard Contractual Clauses (SCCs, decision 2021/914). A copy is available on request at .
6. Retention periods
| Context | Retention |
|---|---|
| Active account | For the lifetime of the account |
| After closure | 3 years (account data) / 30 days (content) |
| Accounting data | 10 years |
| Technical logs | 30 to 90 days |
7. Your rights
In accordance with Articles 15 to 22 of the GDPR:
- Access (Art. 15): obtain a copy of your data.
- Rectification (Art. 16): correct inaccurate data.
- Erasure (Art. 17): request the deletion of your data.
- Restriction (Art. 18): temporarily freeze the use of your data.
- Portability (Art. 20): receive your data in a machine-readable format.
- Objection (Art. 21): object to processing based on our legitimate interest.
- Withdrawal of consent (Art. 7(3)): withdraw at any time a consent you have given.
Contact: — response within 1 month (Art. 12(3) GDPR).
8. Unsubscribing from marketing communications
Every commercial email contains a working unsubscribe link. You can also write to . Processing time: 10 business days.
9. Security
We implement appropriate technical and organisational measures (Art. 32 GDPR):
- Encryption in transit (TLS 1.3).
- Encryption of sensitive tokens at rest (AES).
- Password hashing (PBKDF2-SHA256, 100,000 iterations).
- Access limited on a least-privilege basis.
- Cloudflare infrastructure (SOC 2, ISO 27001).
10. Minors
Adplico is a professional service. We do not knowingly collect data from individuals under 18 years of age.
11. Right to lodge a complaint with a supervisory authority
As a UK company, our lead supervisory authority is the Information Commissioner’s Office (ICO) in the United Kingdom:
- Website: ico.org.uk
- Phone: +44 (0)303 123 1113
If you reside in the European Union, you may also lodge a complaint with the data protection authority of your country — in France, the Commission Nationale de l’Informatique et des Libertés (CNIL, www.cnil.fr).
12. Changes to this policy
We may update this policy. In the event of a material change, we will inform you by email and/or by notification within the application.