Privacy Policy

1. Who this covers

This policy applies to the Banner Buddy web application at bannerbuddy.app, its API and MCP connector, and related emails (together, the “Service”), operated by SkratchAds (“SkratchAds”, “we”, “us”). It does not cover the ad placements that run on publishers’ sites or apps, or third-party sites we link to.

2. What we collect

Information you give us

• Account details: name, email address, password (stored hashed), company name and website, and your role.
• Campaign content: campaign briefs, brand names, target audience descriptions, prizes, logos and other brand assets, and the banners you upload or generate.
• Billing details: plan, invoices and payment status. Card numbers go directly to Stripe, our payment processor; we never see or store them.
• Support messages and anything else you choose to send us.

Information collected automatically

• Usage events inside the app (for example, a campaign created, an image generated, an export downloaded), with timestamps and the account that performed them.
• Technical data: IP address, browser and device type, pages viewed, and error logs, used to run and secure the Service.
• API and MCP connector activity, including the key used and the operations performed.

Information from others

• If you sign in with Google, we receive your name, email and profile image from Google.
• Audience research results generated by our AI research provider from the brief you enter.

3. How we use it

• To provide the Service: research audiences, generate and store banner states, export files, and keep your campaigns available to you.
• To run your account: approve new accounts, manage plans and credits, send invoices and receipts, and respond to support requests.
• To send service emails such as account approval, payment problems and security notices. We do not send marketing email without your consent.
• To keep the Service secure, prevent abuse and enforce our Terms of Service.
• To understand how the Service is used, fix problems and improve features, using aggregated or de-identified data where possible.
• To meet legal obligations, including tax and accounting rules.

4. AI processing

Banner Buddy uses third-party AI models to research audiences and generate images. When you run research or generate a banner, the relevant parts of your brief (brand, audience, prize, tone) and any logo you supply are sent to those providers to produce the result. We use providers’ business or API terms, under which your inputs are not used to train their models. Generated images and research are stored in your account so you can edit and export them.

AI output can be inaccurate or unexpected. You are responsible for reviewing creatives before running them in paid media.

5. Who we share it with

We do not sell personal information. We share it only with the service providers we need to run Banner Buddy, and only for that purpose:

• Supabase (database, authentication and file storage)
• Netlify (hosting and serverless functions)
• Stripe (payments, invoices, tax calculation and the billing portal)
• Google (Gemini image generation; and Google Sign-In if you use it)
• Perplexity (AI audience research)
• Resend (transactional email)

We may also disclose information when the law requires it, to protect the rights and safety of SkratchAds or others, or as part of a merger, acquisition or sale of assets (in which case this policy continues to apply until it is changed).

If you connect an AI agent through the MCP connector, that agent and its operator receive the data they request from your account under your API key. Their handling of it is governed by their own policies.

6. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember interface preferences (such as grid or list view) and protect against fraud. Stripe sets its own cookies on its checkout and billing pages. We do not use third-party advertising or cross-site tracking cookies in the app.

7. How long we keep it

• Account and campaign data: for as long as your account is open. Delete a campaign or creative in the app and it is removed from your workspace; backups roll off within 30 days.
• Billing records: 7 years, as required for tax and accounting.
• Usage and security logs: up to 12 months.
• Closed accounts: we delete or de-identify personal data within 90 days of closure, except where we must keep it by law.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to the people who need it, and account passwords are hashed. API keys are stored as hashes and shown only once when created. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.

9. Your choices and rights

Depending on where you live (including California, the EU/EEA and the UK) you may have the right to:

• Access the personal information we hold about you and get a copy.
• Correct it: most details can be changed in Settings.
• Delete it: delete campaigns yourself, or ask us to close and erase your account.
• Restrict or object to certain processing, and to data portability.
• Opt out of marketing email at any time (service emails continue while you have an account).
• Not be discriminated against for exercising these rights.

To exercise any of these, email contact@skratchads.com from the address on your account. We respond within 30 days. If you are in the EU/EEA or UK you may also complain to your local data protection authority.

10. Children

Banner Buddy is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, contact us and we will remove it.

11. International transfers

We are based in the United States and our providers store data in the US. If you use the Service from elsewhere, your information is transferred to and processed in the US under appropriate safeguards, such as standard contractual clauses with our providers.

12. Changes

We will post any changes here and update the date at the top. For material changes we will also email account holders before the change takes effect.

13. Contact

SkratchAds
514 Americas Way, PMB 25025, Box Elder, SD 57719-7600, USA
contact@skratchads.com