Privacy Policy

This Privacy Policy explains how Elevate Media LLC, doing business as AdEagle ("AdEagle", "we", "us") collects, uses, shares and protects personal data when you visit adeagle.io, use app.adeagle.io and our APIs (the "Service"), or communicate with us. For customers' own end-user data processed on their behalf, AdEagle acts as a processor and the customer's instructions and our Data Processing Addendum apply.

1. Who we are

Elevate Media LLC, 1001 S. Main St. STE 600, Kalispell, Flathead County, MT 59901, USA. Privacy questions: privacy@adeagle.io or support@adeagle.io.

2. What we collect

Account and organization data

name, work email, password hash, organization name, role, avatar, timezone, billing contact.

Connected-platform data

when you connect Meta, RedTrack, Google Drive, pCloud or other services we receive the access tokens you authorize and the data those permissions expose: ad accounts, Pages, campaigns, ad sets, ads, creatives, insights/performance metrics, audiences, conversion and click data, storage files. Tokens are stored encrypted and used only to operate the features you use.

Customer Content

creatives, copy, landing pages, audiences, templates, uploads and files you archive.

Tracking-domain data

when you use AdEagle tracking links or landers we process click and conversion events: IP address (truncated/hashed after bot screening), user agent, referrer, timestamps, click IDs and sub-IDs, and any form fields your lander collects from your end users. This data belongs to you; we process it on your behalf.

Leads

if you use Leads Inbox, lead-form and lander submissions (name, contact details, answers) collected from your end users on your instructions.

Usage and device data

log data, pages visited, features used, IP address, browser, approximate location, crash reports, in-app events.

Payment data

handled by Stripe; we store only the last four digits, card brand, billing address and transaction records.

Support and marketing

messages you send us, newsletter subscription, demo requests.

Cookies

see the Cookie Policy.

3. Why we use it (lawful bases)

To provide and secure the Service (contract; legitimate interests); to bill you (contract; legal obligation); to send transactional messages (contract); to send marketing you can opt out of (consent or legitimate interests); to improve the Service, including aggregated analytics (legitimate interests); to train or improve AI features only for organizations that have turned on the optional AI-training consent setting, using anonymized performance data (consent); to comply with law and enforce our terms (legal obligation; legitimate interests).

4. Meta and other platform data

We access Meta data through Meta Login and the Marketing API with the permissions you grant (for example ads_management, ads_read, business_management, pages_show_list, pages_read_engagement, pages_manage_ads, pages_manage_posts). We use Platform Data only to provide the features you request (launching and managing ads, reading performance, managing and posting to your Pages), store it only as long as needed, do not sell it, and delete it when you disconnect or delete your account or when Meta requires. Our use complies with Meta's Platform Terms and Developer Policies. The same principle applies to Google (Drive scopes limited to files AdEagle creates or you explicitly select) and other connected services.

5. AI features

Prompts, Customer Content and performance data may be sent to AI model providers (for example Google, OpenAI, Anthropic, xAI, Higgsfield, Lovable AI Gateway) to generate output. These providers process data under contracts that prohibit using it to train their models where such terms are available. We do not use your data to train AdEagle models unless your organization opts in.

6. Sharing

We share personal data with: service providers under contract (hosting, database and storage, email, payments, AI models, analytics, support tooling) — listed in our Subprocessors page; advertising and tracking platforms you connect, at your direction; professional advisers; authorities when legally required; a successor in a merger or acquisition (with notice). We do not sell personal data and do not share it for cross-context behavioural advertising.

7. International transfers

We host primarily in the United States and use providers worldwide. Where GDPR/UK GDPR applies, transfers rely on Standard Contractual Clauses or other approved mechanisms.

8. Retention

Account data: for the life of the account and up to 30 days after deletion (backups expire within 35 days). Connected-platform data and tokens: until you disconnect, delete, or the platform requires deletion. Tracking events: raw events 90 days; aggregated reports for the life of the account. Leads: per your organization's settings (default 24 months). Billing records: as required by tax law (typically 7 years). Logs: 30–90 days.

9. Security

Encryption in transit (TLS) and at rest, encrypted secrets and tokens, role-based access, audit logging, least-privilege access for staff, regular dependency and vulnerability review, and incident-response procedures. No system is perfectly secure; report issues to security@adeagle.io or support@adeagle.io.

10. Your rights

Depending on where you live you may have rights to access, correct, delete, restrict or object to processing, port your data, withdraw consent, and lodge a complaint with a supervisory authority. Use Settings → Danger zone (export/delete) or email privacy@adeagle.io or support@adeagle.io. We respond within 30 days (45 days for certain U.S. state requests). If you are an end user of one of our customers (for example you submitted a lead form), contact that business; we will assist them.

11. U.S. state privacy notices

For residents of California, Virginia, Colorado, Connecticut, Utah, Texas and other states with privacy laws: we do not sell or share personal information for targeted advertising; we do not use sensitive personal information beyond what is necessary to provide the Service; you may exercise the rights above, including through an authorized agent, and we will not discriminate against you for doing so.

12. Children

The Service is not directed to anyone under 18 and we do not knowingly collect their data.

13. Changes

We will notify you of material changes by email or in-app at least 14 days before they take effect.

14. Contact

privacy@adeagle.io or support@adeagle.io · Elevate Media LLC, 1001 S. Main St. STE 600, Kalispell, Flathead County, MT 59901, USA