Privacy Policy

1. Who We Are

Adflow is an AI-powered advertising platform built for African small businesses. We are operated by Adora Digital Agency, Lagos, Nigeria. When we say "Adflow", "we", "us" or "our" in this policy, we mean Adora Digital Agency and its Adflow platform.

Our platform helps small business owners create, launch, and optimise Meta advertising campaigns automatically using artificial intelligence.

2. Information We Collect

We collect the following types of information when you use Adflow:

• Account information — your name, email address, phone number, and business name when you sign up
• Business information — details about your business including category, description, target audience, and location that you provide during onboarding
• Content you upload — photos and videos you upload to use as ad creatives
• Payment information — subscription payment data processed securely by Flutterwave. We do not store your card details
• Facebook data — when you connect your Facebook account, we receive an access token, your Facebook Page ID and name, and your Ad Account ID. We use this solely to create and manage campaigns on your behalf
• Campaign data — ad copy, targeting settings, budget, and performance metrics from your campaigns
• Usage data — how you interact with our platform including pages visited and features used

3. How We Use Your Information

We use the information we collect to:

• Create and manage your Adflow account
• Build and launch Meta advertising campaigns on your behalf
• Generate AI-powered ad copy tailored to your business
• Optimise your campaigns automatically based on performance data
• Send you performance reports and platform updates
• Process your subscription payments
• Improve our AI models and platform features
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for purposes other than providing and improving the Adflow service.

4. Facebook and Meta Data

Adflow integrates with Meta's Marketing API to create and manage ads on your behalf. When you connect your Facebook account:

• We request only the permissions necessary to create and manage your campaigns
• When you connect your Facebook account by clicking "Connect with Facebook", Facebook's secure OAuth system automatically grants Adflow a background access token. You never see or handle this token — it works exactly like signing in with Google on any website
• We do not access your personal Facebook profile, messages, or friends list
• You can revoke Adflow's access to your Facebook account at any time through your Facebook Settings under Apps and Websites
• When you disconnect your Facebook account or delete your Adflow account, we delete your Facebook access token from our systems

Our use of Meta data complies with Meta's Platform Terms and Developer Policies.

5. Data Storage and Security

Your data is stored securely using Supabase, a PostgreSQL database platform with enterprise-grade security. Your uploaded files are stored using Supabase Storage.

• All data is encrypted in transit using HTTPS/TLS
• Passwords are hashed and never stored in plain text
• We use row-level security to ensure users can only access their own data
• Our servers are located in the European Union (Frankfurt)

While we take all reasonable steps to protect your data, no system is completely secure. If you believe your account has been compromised, contact us immediately at security@adflowapp.com

6. Data Sharing

We share your data only with the following third parties, and only as necessary to provide the Adflow service:

• Meta Platforms — to create and manage your ad campaigns via the Marketing API
• Anthropic — your business description is sent to Anthropic's Claude API to generate ad copy. No personal identifying information is included in these requests
• Flutterwave — to process your subscription payments securely
• Supabase — for database and file storage infrastructure

We do not share your data with advertisers, data brokers, or any other third parties.

7. Your Rights

You have the following rights regarding your personal data:

• Access — you can request a copy of all data we hold about you
• Correction — you can update your account information at any time from your dashboard settings
• Deletion — you can delete your account and all associated data at any time. We will delete your data within 30 days
• Portability — you can request an export of your campaign data in a readable format
• Objection — you can object to certain uses of your data by contacting us

To exercise any of these rights, contact us at privacy@adflowapp.com

8. Cookies

Adflow uses session cookies to keep you logged in. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may affect your ability to use the platform.

9. Children's Privacy

Adflow is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at privacy@adflowapp.com and we will delete the account immediately.

10. Changes To This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you by email and display a notice on the platform. Your continued use of Adflow after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or how we handle your data, contact us:

• Email: privacy@adflowapp.com
• Address: Lagos, Nigeria
• Response time: within 48 hours