Privacy Notice

Effective November 2, 2026 · Version 2026-11-02-v1

Scope and operator

This notice describes the SyntheticAds service at syntheticads.ai. Contact the site operator through Contact & Privacy Requests. Effective November 2, 2026.

What is collected

We store account email addresses, password hashes, business names and URLs, policy acceptance versions and times, job status, business-intelligence reports, generated images, captions, provider request identifiers and reported usage, and submitted contact requests. Passwords are hashed rather than stored as plaintext. Website analysis retrieves public page content, which may include contact details or other personal data published by that website.

How it is used

We use this information to operate accounts, analyze submitted websites, generate and deliver ads, track jobs and provider usage, address technical failures, prevent misuse, record policy acceptance, and respond to requests. Essential session cookies support sign-in and security. This release does not install advertising trackers or analytics scripts.

Providers and disclosures

The service is hosted on Amazon Web Services. Extracted website text and generation prompts are sent to OpenAI to provide requested analysis and image generation. Website servers receive technical requests when we retrieve a submitted URL. Provider processing is subject to their terms and policies. Data may be processed in the United States and other locations where providers operate. We may also disclose information where legally required or necessary to address security or misuse.

No current sale or marketing sharing

In this release, SyntheticAds does not sell account information or share it for targeted advertising. We do not use your account email for automated prospect outreach. Resend, customer email verification and recovery, Stripe checkout, and automatic outreach are not connected in this release. We will update this notice when those processing activities are added.

Storage and retention

Account records, reports, and assets remain stored while the account is active unless removed by the operator. This release does not apply a fixed automatic deletion period. Technical logs and backup copies may persist separately until rotated or removed. Provider request records may be retained to reconcile usage, resolve failures, and address disputes or legal obligations. Do not rely on this service as your only backup.

Security and your choices

We use HTTPS, password hashing, account-scoped access checks, and restricted server credentials. No security measure is absolute. You can download available reports and bundles. Use Contact & Privacy Requests to request access, correction, export, deletion, or other rights available under applicable law. We may verify your identity and retain information needed for legal, security, or dispute purposes. Requests are saved for manual review; this release does not send email receipts or perform immediate automatic deletion.

Logs, cookies and children

Server access logs can include IP addresses, request paths, browser information, and timestamps. Session cookies are required for account functionality; clearing them signs you out. The service is not intended for anyone under 18. Please do not submit children’s personal information. Contact us if you believe such data has been submitted.