Privacy Policy

1.1 Account Information

When you create an account, we collect your name, email address, company name, and password. If you sign up using a third-party login provider (Google, Meta/Facebook, TikTok, Apple, or Microsoft), we receive basic profile information such as your name and email from that provider in accordance with the permissions you grant. Some providers (for example, TikTok) do not share an email address; in those cases we use the username or account identifier supplied by the provider to create your account.

1.2 Ad Platform Data

When you connect your advertising accounts (Google Ads, Meta Ads, LinkedIn Ads, TikTok Ads, etc.), we access campaign data, ad performance metrics, audience information, and billing data from those platforms solely to provide our services. We act as your authorized agent when accessing this data.

1.3 Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, actions taken, timestamps, and referring URLs.

1.4 AI Interaction Data

When you use our AI-powered features (campaign generation, ad copy creation, optimization suggestions), we collect the prompts you provide, AI-generated outputs, and your feedback on those outputs to improve our service quality.

1.5 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number, CVV, or bank account details on our servers. Stripe provides us with limited information such as the last four digits of your card, card brand, expiration date, and billing address for record-keeping and support purposes.

1.6 Device and Browser Information

We collect device type, operating system, browser type and version, screen resolution, IP address, and general location data (city/country level) derived from your IP address.

We use the information we collect for the following purposes:

• Provide and maintain our services: To operate the Lazy Ads platform, manage your account, and deliver the features you request.
• AI-powered optimization: To generate ad copy, suggest campaign optimizations, predict performance, and continuously improve our AI models.
• Billing and payments: To process subscriptions, manage invoices, and handle refunds through our payment processor (Stripe).
• Communication: To send service notifications, security alerts, billing reminders, product updates, and (with your consent) marketing communications.
• Security and fraud prevention: To detect, investigate, and prevent unauthorized access, abuse, and other malicious activity.
• Analytics and improvement:To understand usage patterns, diagnose technical issues, and improve our platform's functionality and user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell your personal data. We share your information only in the following circumstances:

3.1 Advertising Platforms

At your direction, we transmit campaign data, ad creatives, and targeting parameters to advertising platforms (Google Ads, Meta Ads, LinkedIn Ads, TikTok Ads, etc.) to manage your campaigns. This sharing is necessary to provide our core services.

3.2 Payment Processor (Stripe)

We share billing information with Stripe to process your subscription payments. Stripe acts as an independent data controller for payment data and is subject to its own privacy policy.

3.3 AI Providers (OpenRouter)

We send anonymized and aggregated data to our AI provider, OpenRouter, to generate ad copy and optimization recommendations. We strip personally identifiable information before transmitting data to AI models. OpenRouter does not retain your data for model training purposes.

3.4 Analytics Providers

We use PostHog and Google Analytics 4 (GA4) to understand platform usage and improve our services. These tools collect usage data and are configured to respect applicable privacy regulations and your cookie choices. Advertising and conversion measurement is described separately in Section 3.7.

3.5 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.6 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

3.7 Advertising and Conversion Measurement

To measure the effectiveness of our own marketing and improve our advertising, we use measurement tools provided by Google (Google Analytics 4), Meta Platforms (the Meta Pixel and Conversions API), and TikTok (the TikTok Pixel and Events API). When you consent to analytics cookies, these tools record actions such as page views, registrations, and purchases, and may set cookies or similar identifiers.

For more accurate, privacy-protective measurement, we may also send a limited set of event information to these providers from our servers. Where this includes identifiers such as your email address or IP address, we transmit them in a hashed (pseudonymized) form using industry-standard one-way hashing before transmission. We share this data solely to measure and attribute conversions for our own advertising and do not sell it.

These tools are configured so that advertising cookies and identifiers are set or shared only after you accept analytics cookies (using Google Consent Mode and the equivalent consent controls for Meta and TikTok). You can decline or withdraw consent at any time through our cookie banner or your cookie preferences. Your use of these providers is also subject to their respective privacy policies.

We retain your account data and associated information for as long as your account remains active. Upon receiving an account deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records for tax compliance).

Aggregated and anonymized data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes.

Backup copies of your data may persist in our backup systems for up to 90 days after deletion from our primary systems.

Depending on your jurisdiction, you may have the following rights regarding your data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Right to Export: Request your data in a portable, machine-readable format (data portability).
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@lazyads.ai. We will respond to your request within 30 days.

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication, session management, and security (CSRF protection). These cannot be disabled.
• Analytics cookies: Help us understand how users interact with our platform (PostHog, GA4). You can opt out of these via your cookie preferences.
• Advertising/measurement cookies: Set by Google, Meta, and TikTok measurement tools to attribute conversions and measure the effectiveness of our advertising (see Section 3.7). These load only after you accept analytics cookies and can be declined or withdrawn at any time.
• Preference cookies: Store your settings such as theme preference, language, and display options.

For detailed information, please see our Cookie Policy.

Your data is primarily processed and stored in the United States. If you are located outside the US, your information will be transferred to and processed in the US.

For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States, we rely on EU Standard Contractual Clauses (SCCs) and implement additional safeguards as necessary to ensure an adequate level of data protection.

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@lazyads.ai.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of that data, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Opt Out of Sale:We do not sell personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Limit Use of Sensitive Data: You may direct us to limit our use and disclosure of your sensitive personal information.

To exercise these rights, contact us at privacy@lazyads.ai or call us. We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.

If you are located in the European Union or European Economic Area, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of a contract, (c) legitimate interests, or (d) compliance with legal obligations.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.
• Data Protection Officer: For GDPR-related inquiries, contact us at privacy@lazyads.ai.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (sent to the email address associated with your account) or by placing a prominent notice on our website at least 30 days before the changes take effect.

We encourage you to review this page periodically for the latest information on our privacy practices. Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: