1. Controller
The controller for personal data processed via creativescout.ai and the CreativeScout app is[PYFA_LEGAL_NAME],[PYFA_ADDRESS], reachable at[PYFA_EMAIL].
2. What we process
- Account data: your email address and login events, to provide your account (Art. 6(1)(b) GDPR).
- Billing data: subscription status and payment references. Payment details themselves (Klarna, PayPal) are processed by Stripe; we never see full payment credentials (Art. 6(1)(b) GDPR).
- Usage data: server logs (IP address, user agent, timestamps) for security and abuse prevention (Art. 6(1)(f) GDPR).
- Support: emails you send us, to answer them (Art. 6(1)(b) and (f) GDPR).
3. Processors we use
- Cloudflare (hosting and content delivery for the marketing site).
- Stripe (payment processing for Klarna and PayPal).
- Supabase (application database, hosted in an EU region).
- Postmark (transactional email, e.g. login and billing emails).
Each processor acts under a data processing agreement. Where data leaves the EU/EEA, transfers are protected by EU standard contractual clauses or an adequacy decision.
4. Ad data and its source
The advertising content you research in CreativeScout comes from the official Meta Ad Library, the transparency dataset Meta publishes under the EU Digital Services Act. We store ad metadata and facts (such as library IDs, ad texts, link URLs, page names, run dates and reach figures) and links to the original entries. We do not store ad media files, and we do not scrape profiles, private accounts or any non-public data. Ad transparency data describes advertisers (companies and pages), not the private browsing of individuals.
5. Browser extension
The CreativeScout browser extension only saves the specific ad you click onwhile you browse the Meta Ad Library yourself. For that one ad it captures: the library ID, the ad text, the link URL, the page name and the run dates. It performsno background collection, does not read other tabs, does not collect your browsing history and does not store media files. The captured ad data goes only to your own CreativeScout account. Uninstalling the extension stops all capture immediately.
6. Cookies
The marketing site does not use analytics or ad-tracking cookies. The only client-side storage is functional (for example your language preference). Details are in ourCookie Policy.
7. Retention
Account and billing data are kept for as long as your account exists and afterwards only as long as statutory retention duties require. Server logs are kept for a short rolling window for security purposes.
8. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority. To exercise any right, email[PYFA_EMAIL].
9. Changes
We will update this policy when our processing changes and adjust the date above. Material changes are announced to account holders.