Privacy Policy

Last updated: 2026-03-02

What data we process

• Account information: name, email, password (hash), role/association with workspace.
• Usage data: logs, IP address, device/browser data, timestamps, error and performance measurements.
• Uploaded content: creative files (images/video), file names, tags and naming fields (e.g. country, hook, offer, angle).
• Ad/performance data: metadata and metrics from ad platforms (e.g. Meta), including ad accounts, campaigns, ad sets, ads and results (e.g. impressions, clicks, spend, CTR, CPA/ROAS where available).
• Support communication: inquiries via email/chat and related metadata.

Purpose and legal basis

• Service delivery (account creation, workspaces, creative upload and organization, analysis and reporting). Basis: GDPR art. 6(1)(b).
• Operations, security, and abuse prevention (access control, logging, error/abuse detection). Basis: GDPR art. 6(1)(f).
• Support (responding to inquiries and troubleshooting). Basis: GDPR art. 6(1)(b) and/or 6(1)(f).
• Compliance with legal obligations (e.g. bookkeeping, where relevant). Basis: GDPR art. 6(1)(c).
• Marketing/cookies (only where you provide consent). Basis: GDPR art. 6(1)(a) and cookie rules.

Third parties and processors

We may use trusted vendors (data processors) for platform operations, e.g. hosting, email, logging, and analytics. We may also integrate with ad platforms (e.g. Meta) on your instruction when you connect your account.

We do not share personal data with unauthorized parties. We do not sell personal data.

Transfers to third countries

If we or our vendors transfer personal data outside the EU/EEA, this is done under a valid transfer mechanism, e.g. the European Commission's Standard Contractual Clauses (SCC) and/or other relevant safeguards.

Retention period

We store personal data only as long as necessary for the purposes described, and then delete or anonymize it. Log data is typically retained for a limited period. You may request deletion at any time, subject to mandatory legal retention.

Your rights

Under GDPR, you have rights including:

• access to your data
• rectification
• erasure ("right to be forgotten")
• restriction of processing
• data portability (in certain cases)
• objection to processing (in certain cases)
• withdrawal of consent (where processing is based on consent)

Contact us at support@vextify.com to exercise your rights. You may also lodge a complaint with your local supervisory authority.

Cookies

We use cookies and similar technologies to make the website work, remember preferences, and (with consent) for analytics/marketing. You can usually delete or block cookies in your browser. If we use a cookie banner solution, you can change your consent there.

Security

We apply appropriate technical and organizational security measures, including access controls, encryption where relevant, and continuous monitoring, to protect your data.

Changes

We may update this privacy policy. For material changes, we will inform you via the platform or email.