Privacy Policy

AdBalloon is an AI-powered marketing service operated by Upcrossing AI Ltd ("AdBalloon", "we", "us" or "our"), a company registered in the United Kingdom.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website or use our services.

1. Information We Collect

We may collect the following information:

Account information: Your name, email address, profile image and account identifiers when you register or sign in.

Google Sign-In information: When you sign in with Google, we receive the basic account information authorised through Google OAuth, such as your name, email address and profile image. We use this information to authenticate you and manage your AdBalloon account. We do not receive your Google password.

Business information: Business names, addresses, websites, descriptions, publicly available reviews, business photographs and other information needed to understand and promote your business. This information may come from you or publicly accessible sources.

Uploaded content: Images, videos, logos, brand guidelines, descriptions and other materials you provide for content generation.

Generated content: Marketing scripts, videos, images and other outputs created through our service, together with information required to manage generation jobs.

Technical information: Information such as IP addresses, device information, browser type, authentication sessions and service activity logs.

Payment information: If you purchase a paid service, we may receive billing details and transaction records from our payment provider. [CONFIRM: Payment provider and data collected.]

2. How We Use Your Information

We process information to:

• Create and secure user accounts, including Google authentication.
• Analyse business information and build reusable business profiles.
• Generate marketing content using AI technologies.
• Store and manage your uploaded assets and generated content.
• Provide customer support and important service communications.
• Monitor reliability, prevent abuse and improve our services.
• Process payments and comply with legal obligations where applicable.

Our legal bases under UK data protection law include performance of a contract, legitimate interests in operating and securing our service, compliance with legal obligations, and consent where required.

Where we rely on legitimate interests, these include maintaining service security, resolving technical issues and improving the reliability of our platform.

3. Google User Data

We use information obtained through Google Sign-In for authentication, account identification and account management.

We do not use Google authentication information for targeted advertising or sell it to advertisers.

Google account information may be processed through our authentication infrastructure, including Supabase, to provide secure login and account management.

[CONFIRM: Google OAuth scopes and any additional Google API integrations before publication.]

4. AI Processing and Business Content

AdBalloon uses AI services to analyse business information and generate promotional materials.

Business information and uploaded content may be transmitted to third-party AI and infrastructure providers where necessary to operate the service.

Some business information may be obtained from publicly accessible websites and business listings. Where such information contains personal data, we process it for the purposes described in this policy, subject to applicable law.

[CONFIRM: Whether external AI providers may retain inputs or use them for model training, and disclose the actual arrangements.]

5. Sharing Information

We may share information with service providers that help us operate AdBalloon, including:

• Google, for authentication.
• Supabase, for authentication and related backend services.
• Cloud infrastructure and data storage providers.
• AI model and media-processing providers.
• Payment processors, if paid services are enabled.
• Analytics and security providers, where used.

We may also disclose information where legally required. We do not sell personal information.

6. International Data Transfers

Some service providers may process information outside the United Kingdom.

Where personal data is transferred internationally, we will use an applicable lawful transfer mechanism and safeguards as required by data protection law.

[CONFIRM: Processing locations, transfer mechanisms and safeguards used by the actual providers.]

7. Data Retention and Deletion

We retain account information while your account remains active and for as long as reasonably necessary for the purposes described in this policy.

Uploaded assets, business profiles and generated content are retained as required to provide the service, subject to our deletion processes and applicable legal obligations.

Security records, backups and transaction information may be retained for additional periods where necessary.

You may request account or personal data deletion by contacting support@upcrossing.ai.

[CONFIRM: Specific retention periods, backup deletion timelines and account deletion procedures.]

8. Your Rights

Subject to applicable law, you may have rights to access, correct, erase, restrict or transfer your personal data, as well as object to certain processing activities.

Where processing relies on consent, you may withdraw that consent.

To exercise your rights, contact support@upcrossing.ai.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk/.

9. Cookies and Similar Technologies

We may use cookies or similar technologies required for authentication, security and essential website functionality.

If we use non-essential analytics or marketing technologies, we will provide information and appropriate choices or consent controls where required by law.

[CONFIRM: Actual cookies, analytics tools and consent mechanisms.]

10. Security

We use appropriate technical and organisational measures to protect personal information, including access controls and security measures appropriate to the services we operate.

No online service can guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy as our service develops or legal requirements change. The latest version will be available on this page, with its last updated date.

12. Contact