Privacy Policy

Last updated: 2 October 2026

1. Who We Are

Ad Flare Digital is an AI-powered marketing automation platform for businesses. It covers content creation and social media publishing, and lead generation with email outreach. We are incorporated as Ad Flare Digital Ltd, based in London, United Kingdom.

This policy covers two groups of people:

• Our customers, meaning people and businesses who sign up to and use Ad Flare Digital (sections 2 to 4).
• Business contacts, meaning businesses and the people who work at them whose public contact details are found through our lead generation service, or who receive outreach emails sent through it (section 5).

If you have any questions about this policy, you can contact us at: hello@adflaredigital.com

2. What Data We Collect

We collect the following types of information:

• Account information: Name, email address, and password when you register.
• Business information: Company name, website URL, and industry provided during onboarding.
• Content data: URLs, topics, scripts, and media files you upload or generate through Ad Flare Digital.
• Social account tokens: OAuth access tokens for Instagram, YouTube, and TikTok accounts you connect to our platform. These are stored securely and used solely to publish content on your behalf.
• Usage data: Log data, IP address, browser type, pages visited, and actions taken within the platform.
• Payment information: Processed by our payment provider (Stripe). We do not store card details directly.
• Sending mailbox details (lead generation customers): If you connect an email account to send outreach, we store its server settings, username and password. The password is encrypted and is used only to send your emails and to check that mailbox for replies, bounce notices and unsubscribe requests.
• Campaign data (lead generation customers): Your target audience, brand voice settings, email sequences and campaign results.

3. How We Use Your Data

We use your data to:

• Provide and operate the Ad Flare Digital platform.
• Generate AI content (scripts, voiceovers, videos) based on your inputs.
• Publish content to your connected social media accounts (Instagram, YouTube, TikTok) on your behalf.
• Find business leads, write outreach emails with AI, send them from the mailbox you connect, and stop follow-ups when someone replies or opts out.
• Send service-related emails such as publishing confirmations and account notifications.
• Improve our platform and develop new features.
• Comply with legal obligations.

4. Third-Party Integrations

Ad Flare Digital integrates with the following third-party platforms to deliver its service. By connecting these accounts, you authorise Ad Flare Digital to act on your behalf within the permissions you grant:

• Instagram / Meta: Used to publish posts and Reels to your connected Instagram Business account.
• YouTube / Google: Used to upload videos and Shorts to your connected YouTube channel.
• TikTok: Used to publish videos to your connected TikTok account via the TikTok API. Ad Flare Digital's use of TikTok API Services is subject to TikTok's Privacy Policy and Terms of Service. We only request the minimum permissions necessary to publish content on your behalf.
• Stripe: Payment processing. Governed by Stripe's Privacy Policy.
• Calendly: Used for booking demos. Governed by Calendly's Privacy Policy.
• Apify: Used by our lead generation service to collect publicly available business information from Google Maps listings and businesses' own websites.
• Anthropic (Claude): AI provider used to write captions, scripts and outreach emails, and to suggest campaign improvements. It receives only the information needed for each task.

5. Lead Generation: Business Contacts

This section is for businesses, and people who work at them, who did not sign up to Ad Flare Digital but whose details are found through our lead generation service, or who receive an outreach email sent through it.

Who is responsible for your data

• When Ad Flare Digital contacts you to offer our own services, Ad Flare Digital Ltd is the controller of your data.
• When one of our customers contacts you using our service, that customer is the controller and decides who to contact and why. Ad Flare Digital processes the data on their behalf. The email you received will name the business that sent it.

What we collect and where it comes from

We collect only business information that is publicly available, from Google Maps business listings and the business's own website:

• Business name, category, address, phone number and website.
• Email addresses and social media profile links published by the business.
• Where a business publishes them, names and job titles of people who work there.
• Outreach history: which emails were sent and when, and whether the contact replied, opted out or the email bounced.

Why we use it and our lawful basis

We use these details to send relevant business-to-business emails about products or services that may be useful to the business, and to stop contacting anyone who replies or opts out. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): promoting relevant services to businesses using contact details they have chosen to publish. We have weighed this against your interests and rights, and you can opt out at any time.

Outreach is intended for business email addresses, and our customers must follow the UK's electronic marketing rules (the Privacy and Electronic Communications Regulations, or PECR). Every outreach email identifies the sender and includes a way to opt out.

Opting out

• Click the unsubscribe link in any outreach email, or reply asking not to be contacted.
• Or email hello@adflaredigital.com with the subject "Opt out" and the email address you were contacted at.

Once you opt out, your email address is added to a suppression list and the business that contacted you can no longer send outreach to it through our service. If you would like us to block your address for every business using our service, email us and we will do so. We keep only the email address on suppression lists, and only so that we can keep honouring your request.

How long we keep it

Business contact details are kept while the campaign they belong to is in use. They are deleted when the customer deletes them, or within 30 days of the customer's account being closed. Suppression list entries are kept for as long as needed to honour the opt-out.

Your rights

You have the same rights as anyone else under section 8, including the right to know what we hold about you and to have it deleted. You also have an absolute right to object to direct marketing. If one of our customers contacted you, we will act on your request and let them know.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers who help us operate the platform (hosting, AI processing, data collection, analytics).
• Social media platforms when publishing content you have authorised.
• The email provider of the mailbox a customer connects, when sending outreach on their behalf.
• Law enforcement or regulators where required by law.

Some of our service providers (for example our AI provider) are based outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance reasons.

Social media access tokens are revoked immediately upon account disconnection or deletion. Business contact data is kept as described in section 5.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data, including an absolute right to object to direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at hello@adflaredigital.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk. We would appreciate the chance to resolve your concern first.

9. Cookies

We use cookies to operate and improve the Ad Flare Digital platform. Please see our Cookie Policy for full details.

10. Security

We use industry-standard security measures including HTTPS encryption, secure token storage, encryption of stored mailbox passwords, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Ad Flare Digital is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Ad Flare Digital after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or requests, please contact:

Ad Flare Digital Ltd
London, United Kingdom
Email: hello@adflaredigital.com