Who we are
AdZhi Ltd, a company registered in England and Wales, is the data controller for the personal data described in this policy. We build acoustic creative intelligence software for video advertisements. For anything relating to your data, contact privacy@adzhi.co.uk.
What data we collect
- Account data: Email address, hashed password, plan type, billing history. Required to provide the service.
- Video and audio files: Files you upload for analysis. By default we keep the file so you can replay it in your report, stored privately to your account, encrypted at rest and accessible only to you; you can turn this off in Account → Privacy & data, which deletes it and deletes future uploads the moment analysis finishes. Derived analysis results (acoustic scores, transcript, metrics) are stored in your account.
- Usage data: Analysis history, feature usage, login timestamps. Used to improve the product and trigger relevant lifecycle emails.
- Payment data: Handled entirely by Stripe. We do not store card numbers. We store Stripe customer IDs and subscription status.
- Analytics: We use Plausible Analytics - a privacy-first, cookieless analytics provider. No personal data is transmitted. No cookies are set. No cross-site tracking.
How we use your data
- To provide acoustic analysis of the video files you upload
- To manage your subscription and billing via Stripe
- To send transactional emails: account confirmation, analysis complete, billing events, plan limit alerts
- To send marketing emails where you have not opted out: re-engagement, annual plan offers, product updates
- To improve our acoustic analysis + forecasting models and shared benchmarks using aggregated, anonymised signal data: on by default; you can opt out anytime in Account → Privacy & data (see Section 5). Your ad content itself - your videos, audio, and copy - is never used for training without your explicit opt-in (see Terms, Section 7).
Email communications and unsubscribe
We send two types of email:
- Transactional emails (always sent): account confirmation, analysis complete notification, billing receipts, plan limit warnings. These are necessary to provide the service.
- Marketing emails (opt-out available): re-engagement after inactivity, annual plan offers, product updates. You can unsubscribe from these at any time.
To unsubscribe from marketing emails: click the unsubscribe link in the footer of any marketing email, or email privacy@adzhi.co.uk. Unsubscribing from marketing emails does not affect transactional emails.
Data retention
- Raw video/audio files: Kept by default so you can replay them in your reports, stored privately to your account, encrypted at rest and accessible only to you. Turn retention off in Account → Privacy & data and they are deleted, with future uploads deleted the moment analysis finishes. All retained files are deleted within 30 days of account deletion.
- Analysis results: Retained for the life of your account, including after a subscription is cancelled, so you can export your history. Deleted within 30 days of account deletion.
- Account data: Retained for the life of your account plus 90 days for billing dispute purposes.
Anonymised acoustic signal data
Collected by default to improve our models and shared benchmarks; you can opt out anytime in Account → Privacy & data. Numeric feature vectors and outcome figures only (no audio, no transcript, no filenames, no PII), used only in aggregate behind a k-anonymity floor (a figure is only ever surfaced once enough accounts contribute that no single one can be identified). What this trains is a pooled model (a set of learned weights and benchmarks, never the underlying data), which may then inform the forecasts other accounts see; your own raw signals are never exposed to, or attributable by, another customer. Your own account's data always takes precedence in your forecasts where enough of it exists. Never sold, and never shared with another customer or third party. Retained indefinitely while sharing is on. To request deletion, email privacy@adzhi.co.uk.
Your rights (UK GDPR)
As a UK data subject, you have the right to:
- Access: Request a copy of all personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated personal data
- Portability: Request your analysis data in a machine-readable format
- Objection: Object to processing for marketing purposes (see Section 4)
- Restriction: Request restriction of processing in certain circumstances
To exercise any of these rights, email privacy@adzhi.co.uk. We will respond within 30 days.
Third parties
Transcription runs on our own infrastructure by default. When a hosted transcription provider (Groq or OpenAI) is enabled for speed, your ad audio is processed by that provider to produce the transcript; the providers marked conditional below receive data only when that path is active.
| Processor | Purpose | Data processed | Location |
|---|---|---|---|
| Railway | Infrastructure hosting (app, worker, managed Postgres and Redis) | All application data, video files (temporary), database | US / EU |
| Anthropic | Linguistic analysis (Claude API) | Ad transcript + acoustic summaries: no audio, no video, no account or billing identifiers. A transcript is the words spoken in the ad and can contain incidental personal detail; per Anthropic’s API policy, it is not used to train their models. | US |
| Stripe | Payment processing | Billing information, card details (Stripe-direct, never touches AdZhi servers) | US / EU |
| Resend | Transactional and marketing email delivery | Email address, email content | US |
| Plausible Analytics | Website analytics | Cookieless page view counts, no personal data | EU |
| Groq (conditional) | Hosted transcription (fast path), when enabled | Audio file, transient — processed for transcription, not retained or used to train their models | US |
| OpenAI (conditional) | Hosted transcription and/or summary generation, when enabled | Audio file and/or transcript text, transient — not used to train their models | US |
| AssemblyAI (conditional) | Fallback transcription for complex audio | Audio file, transient — only used when local Whisper confidence is low | US |
Cookies
We do not use tracking cookies. Plausible Analytics is cookieless. We use browser localStorage for session preferences (dismissed UI banners, theme settings) only. No cross-site tracking. No advertising cookies.
Security
Passwords are hashed using bcrypt. API communications use HTTPS. Database connections are encrypted. Sessions use signed tokens with short expiry. We do not log passwords, reset tokens, or OAuth tokens. Database access is restricted to the application layer.
Changes to this policy
We will notify registered users of material changes by email. Continued use of the service after notification constitutes acceptance.
- Data controller
- AdZhi Ltd, a company registered in England and Wales
- Data protection contact
- privacy@adzhi.co.uk
- Supervisory authority
- Information Commissioner's Office (ICO) — ico.org.uk