Privacy Policy

What we collect

• Google account basics — when you sign in with Google we receive your name, email address and profile picture. We request no other Google data and no access to your Gmail, Drive or contacts.
• What you give us to make videos — briefs, project descriptions, logos, screenshots and audio files you upload, and the videos we make from them.
• Billing records — top-ups, charges and your credit balance. Card payments are handled entirely by Stripe; we never receive or store your card number.
• Technical data — server logs (IP address, browser, time of request) kept for security and troubleshooting, and the time you were last active.
• Visit statistics — on our public pages we count visits ourselves: the page, the referring site or campaign link (UTM tags) you came from, your approximate country, device type, browser, operating system and browser language. Your country is looked up from your IP address at the moment of the visit with an offline database (IP Geolocation by DB-IP) — we don't store your IP address for this; visits are grouped by an anonymous code that changes every day, so we can't follow you over time. When you sign up, we note the first campaign or site that brought you, to learn which of our ads work.

How we use it

• to sign you in and keep your account secure;
• to generate, store and deliver your videos and project ideas;
• to keep your balance, process payments and prevent fraud;
• to email you about your account: a welcome message, payment and refund receipts, and when a video is ready or fails;
• to answer support requests and send important service notices.

We don't sell your data, we don't use it for advertising, and we don't use your content to train AI models.

Google user data

AdHub uses Google sign-in only to identify you. The name, email address and profile picture we receive are used solely to create and show your account, are not shared with third parties except the service providers below as needed to run AdHub, and are not used for advertising. AdHub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Instagram

If you connect an Instagram professional account, we receive from Meta its account id, username, name, profile picture and an access token, with the permissions you approve (basic profile and publishing). We use them only to publish the videos you choose, with the caption, cover and time you set, and to show you each post's status. The token is stored encrypted and is refreshed automatically while the account stays connected. We don't read your messages, comments, followers or other posts, and we never post without your request.

You can disconnect the account at any time in AdHub (Account → Connected accounts) or remove AdHub in Instagram (Settings → Apps and websites); either way the token is erased at once. To delete the account details we keep, use Instagram's data deletion request or email contact@web-univers.com.

AI avatar (your face and voice)

If you set up an AI avatar, you give us one photo of yourself and a recording of your voice, after confirming they are your own and that you consent. We use them only to make your own videos: the photo and each voice-over line are sent to fal.ai (Kling AI Avatar model) to make the talking bubble, and the recording is sent to ElevenLabs to create a voice clone that only your account can use. We keep the photo, the voice sample and a record of your consent (time and a hashed IP address). You can delete your avatar at any time on the My avatar page: the photo, the sample and the ElevenLabs voice are deleted at once; videos you already made are kept.

Who processes data for us

We share data only with providers that help us run AdHub, under contracts that limit them to that purpose:

• Anthropic (Claude) — receives your brief, images and project text to write and review each video;
• ElevenLabs — receives the voice-over script to record narration;
• Stripe — processes payments and receives your email and payment details;
• Google — provides sign-in;
• Resend — delivers our emails (welcome, receipts, video-ready notices) and receives your email address and the email's content;
• our cloud hosting provider — stores the app, your files and videos.

Some of these providers are in the United States; where required, transfers are covered by standard contractual clauses.

Cookies

AdHub sets one essential cookie that keeps you signed in and a short-lived one during Google sign-in. On the public pages we also set one first-party cookie, adhub_src, that remembers for up to 30 days which link or campaign first brought you, so it can be saved when you sign up; it's deleted at sign-up. If you arrive through a friend's invite or a partner's link, adhub_partner remembers it for up to 60 days so that person can be credited. These two cookies are only set if you accept them in the cookie banner (an adhub_consent cookie keeps your choice for 13 months; clear your cookies to change it). An adhub_lang cookie remembers the language you pick. If you accept cookies, we also measure our own ads with Meta (Facebook, Instagram): the Meta Pixel sets its cookies (_fbp, _fbc) and, through Meta's Conversions API, we tell Meta when a visitor views a page, signs up, opens checkout, tops up or starts a video, with your email address and account id in hashed (SHA-256) form, your IP address and browser, so Meta can tell which ads work. Meta acts as an independent controller for this data (see Meta's Privacy Policy). If you refuse, no Meta cookie is set and nothing is sent to Meta. We use no other advertising or analytics cookies.

How long we keep it

Your account, projects and videos stay until you delete them or ask us to close your account. You can delete any video or project from the app at any time. Billing records are kept as long as tax and accounting law requires (typically 7 years). Server logs are kept for up to 90 days, and visit statistics for up to 13 months.

Your rights

Depending on where you live (for example under the GDPR or California law) you can ask to access, correct, export or delete your personal data, or object to how we use it. Email contact@web-univers.com and we'll reply within 30 days. You can also complain to your local data-protection authority.

Security

Data travels over HTTPS, sessions are signed, and each account can only see its own videos and projects. No system is perfectly secure; if a breach affects you we'll tell you promptly.

Children

AdHub is for businesses and isn't meant for anyone under 18. We don't knowingly collect data from children.

Changes and contact

We'll post updates here and change the date above; material changes will be announced by email or in the app. Questions or requests: contact@web-univers.com.