AdPhenix

1. Who we are

AdPhenix (https://adphenix.com) is a paid-media campaign management platform built and operated by AdPhenix, Brazilian company registration (CNPJ) 29.428.610/0001-72. This Privacy Policy describes how we collect, use and protect your personal data, in compliance with the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018).

2. Data we collect

Account data

Full name, e-mail address and password (stored as an irreversible hash) to create your account.

Ad platform integration data

When you connect an advertising platform (Google Ads, Meta Ads, LinkedIn Ads, TikTok Ads, X Ads), we receive OAuth 2.0 access tokens. Those tokens are encrypted with AES-256 and used solely to manage campaigns on your behalf. We never store your passwords for those platforms.

Usage data

Logs of actions taken on the platform (campaign creation, publishing), session data and IP address for security purposes.

Payment data

Payments are processed by Stripe. AdPhenix does not store credit card data. See the Stripe Privacy Policy.

3. How we use your data

Create and manage advertising campaigns on the platforms you connected
Authenticate you and keep your session active
Send notifications about campaign status (transactional e-mail)
Process subscription payments through Stripe
Improve the platform using aggregated, anonymised usage data
Comply with legal and regulatory obligations

4. Data sharing

Your data is shared only with:

Google, Meta, LinkedIn, TikTok, X (Twitter): to create and manage campaigns via their APIs, as authorised by you through OAuth
Stripe: for payment processing
Infrastructure providers (hosting, database): under confidentiality and data protection agreements

We do not sell, rent or share your personal data with third parties for marketing purposes.

5. Data security

OAuth access tokens encrypted with AES-256
Passwords stored with bcrypt hashing (irreversible)
HTTPS/TLS on every connection
Data access restricted by session authentication
Audit logs of administrative actions

6. Data retention

Your data is retained while your account is active. When you request account deletion, we erase your personal data within 30 days, except for records we must keep by law (e.g. tax records, for up to 5 years).

7. Your rights (LGPD)

You have the following rights over your personal data:

Access: request a copy of the data we hold about you
Correction: correct incomplete, inaccurate or outdated data
Deletion: request erasure of your personal data
Portability: receive your data in a structured format
Withdrawal: withdraw consent at any time
Objection: object to processing in certain situations

To delete your account and your data, see the data deletion instructions. For the other rights, contact us at privacidade@adphenix.com

8. Use of data from Google APIs

AdPhenix’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice: data obtained from the advertising APIs is used only to operate the features you request on the platform. We do not sell it, we do not use it for advertising, and we do not use it to train artificial intelligence models.

9. Cookies

We use essential cookies for authentication (session) and security cookies (CSRF). We do not use third-party tracking cookies for advertising.

10. Children

AdPhenix is not intended for anyone under 18. We do not knowingly collect data from children or adolescents.

11. Changes to this policy

We may update this policy from time to time. We will notify you by e-mail or through a notice on the platform when changes are material. Continued use after the notice constitutes acceptance.

12. Contact and DPO

Data Protection Officer (DPO):
AdPhenix
E-mail: privacidade@adphenix.com
AdPhenix - CNPJ 29.428.610/0001-72