Privacy Policy

Last updated: April 19, 2026

Who we are

AdPilot is operated by Smart World Language & Technology (SWLT), a company registered in the United Arab Emirates. Our address is Abu Dhabi, UAE. Contact: hani@swlt.ae.

What we collect

• Account data: name, email, company name, company website, hashed password.
• Tenant data: campaigns, ad copy, keywords, AI briefs, images you generate or upload.
• Google Ads data: accessible customer IDs, account hierarchy, performance metrics we retrieve via the Google Ads API, OAuth refresh tokens.
• Usage data: login timestamps, IP addresses, browser user-agent, interactions within the product.
• Billing data: payment method tokens, subscription status (handled by Stripe; we never see full card numbers).

How we use it

Your data is used exclusively to operate AdPilot for you: render your dashboard, create and manage campaigns, send product emails, bill you, detect abuse, and support you. We do not sell your data.

Third-party processors

• Google — Google Ads API, OAuth
• OpenAI — ad copy / image generation (only the brief you submit is sent; we do not send account identifiers or customer-level performance data)
• AWS — hosting (EC2, S3-compatible storage)
• Stripe — billing
• Resend / SES — transactional email

Data retention

Daily metrics are retained for 24 months, then aggregated into monthly summaries. Account data is retained for the life of your account. When you delete your account, we remove your personal data within 30 days; aggregated, de-identified statistics may be retained for service improvement.

Security

OAuth refresh tokens are AES-256 encrypted at rest. Traffic is TLS 1.2+. Two-factor authentication is available for Tenant Admins. Tenant data is logically isolated per tenant in the database.

Your rights

You can export or delete your data from the dashboard at any time. You can also email hani@swlt.ae with a data request.

Google user data

AdPilot's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google data for advertising outside the user's own Google Ads accounts, and we do not transfer Google data to third parties except as necessary to provide the service.

Cookies

We use first-party cookies for authentication and preference storage (theme, language). We do not use third-party tracking cookies.

Changes

Material changes are announced by email with 30 days' notice.