Privacy Policy

Last updated: November 2026

Adsmithy is operated by Merlio (SIREN 884589896, Paris, France). This Privacy Policy explains how Merlio collects, uses, and protects your personal information when you use Adsmithy. By using Adsmithy, you consent to the collection, use, and disclosure of your personal information in accordance with this policy.

Information We Collect

  • Registration Information: We collect your email address and password when you create an account.
  • Conversation Data: We store chat conversations to enhance user experience, provide continuity, and allow users to retrieve past interactions.
  • Payment Information: For subscription services, payments are processed securely through Stripe. We do not store your payment card details.
  • Usage Data: We collect analytics and logs to monitor platform performance and prevent abuse.
  • Cookies & Tracking: Only with your consent, for audience measurement (Google Analytics, Hotjar) and for advertising and affiliation (Google Ads, Google Tag Manager, Affonso). See Cookies and Tracking.

How We Use Your Information

  • To provide, maintain, and improve our services.
  • To communicate with you about your account, updates, and promotional offers.
  • To ensure the security and integrity of our services.
  • To process subscription payments and manage your subscription status.
  • To analyze usage, secure the platform, and prevent abuse.

Information Sharing

Service Providers: We share necessary data with third-party service providers to support our platform, including hosting providers (AWS EU Central), analytics, and payment processors such as Stripe.

AI Processing Providers: When using our AI features, your requests may be processed by third-party providers, including but not limited to:

OpenAIGroqMistralAnthropicxAIGoogleDeepSeekOpenRouterReplicate

Some processing may occur outside the EU, depending on the provider. These providers have their own privacy policies.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

  • Contractual necessity: Processing required to provide and maintain Adsmithy services, manage your account, and process payments.
  • Legitimate interest: Platform security, fraud prevention, and service improvement.
  • Consent: Audience measurement, advertising and affiliate cookies, and marketing communications. You may withdraw your consent at any time.
  • Legal obligation: Where required by applicable law (e.g., tax records, fraud reporting).

Data Location and Transfers

Your data is primarily stored in AWS EU Central (Europe). Some processing (such as AI queries) may occur outside the European Union. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of protection for your personal data.

Data Retention

We retain your personal information as long as needed to provide our services or as required by law. You may request deletion of your account and data at any time.

One exception: so that the free credits offered at sign-up are given only once per email address, we keep, even after your account is deleted, a non-reversible fingerprint of your address (a hash with a secret key, never the address itself). This relies on our legitimate interest in preventing fraud, and the fingerprint is kept for as long as we offer these credits.

Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

You have the right to access, correct, or delete your personal information. To exercise these rights, please contact us at hello@adsmithy.com.

EU users: Under the General Data Protection Regulation (GDPR), you have the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. You also have the right to withdraw consent at any time where processing is based on consent. If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés — www.cnil.fr).

California residents: You have rights under the California Consumer Privacy Act (CCPA), including the right to access, delete, and opt out of certain uses of your personal information.

Connected Social Networks

When you connect an Instagram, Facebook, Threads, LinkedIn, Pinterest, TikTok or Google Business Profile account, we receive and store, for each account: its identifier, name and profile picture, the access tokens the network issues (stored encrypted), the permissions you granted, the posts you publish through Adsmithy (images, caption, and the network's answer), and the account's recent posts with their statistics (caption, picture, link, date, views, likes, comments, shares, saves), refreshed several times a day. We use them only to publish what you ask us to publish and to show you their results in Adsmithy. We never sell this data, never use it for advertising, and never post without your action.

If you share a connected account with a brand, the members of that brand can publish to it from Adsmithy. You can disconnect an account at any time in Settings: its tokens and data are deleted. You can also remove Adsmithy from the network's own settings, or ask Meta to delete your data: we then delete the accounts connected through that product.

Adsmithy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Meta, LinkedIn, Pinterest and TikTok is handled under their developer terms.

Children's Privacy

Adsmithy is not intended for users under 16 years old. We do not knowingly collect personal information from children under 16.

Cookies and Tracking

Cookies the site needs to work (signing in to your account, language, security, remembering your cookie choice) are always on: they don't require your consent.

The others are only set with your consent, asked on your first visit, purpose by purpose:

  • Audience measurement: Google Analytics and Hotjar, to understand how the site is used and improve it;
  • Advertising and affiliation: Google Ads and Google Tag Manager, to measure how our ads perform, and Affonso, to recognize the affiliate partner who referred you to Adsmithy.

Refusing is as easy as accepting and doesn't limit your access to the service. Your choice is kept for 6 months, then asked again. You can change it or withdraw your consent at any time with the “Manage cookies” link at the bottom of the site's pages, or in your account settings.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you of significant changes by email or through a notice on our site.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at hello@adsmithy.com.