AdMakeAI

GDPR overview

The privacy policy carries a GDPR Data Protection Rights section listing the six rights, access, rectification, erasure, restriction of processing, objection and portability, with a stated response time of one month, and a separate CCPA section for California residents. Beyond that, implementation is thin. No data protection officer is named, no EU representative under Article 27 is designated, no controller postal address is given, and there is no dedicated privacy contact: the only published address is support@admakeai.com. The policy is undated, carries no effective date, and still contains a generator placeholder (www.website.com), which points to a generic template rather than a reviewed document. It contains no retention clause, and no DPA or sub-processor list is offered. The terms of service mention only that content posted must comply with EU copyright law.

Who owns the data?

The terms of service state that the publisher claims no intellectual property rights over the material a user provides, and that everything uploaded remains the user's property. Commercial use of the generated creatives is included in every paid plan, so the visuals can be run on Meta, Instagram, Google Ads or a brand's own site, delivered without a watermark. The FAQ adds that uploaded images and generated ads stay private to the account and are never shared with third parties, and that data can be deleted at any time from account settings. These commitments come from terms of service last updated on 12 August 2023.

Reuse rights

Paying users may reuse the generated creatives without asking permission: outputs are delivered as high-resolution PNG files, with no watermark, and full commercial rights are included in every paid plan, which covers paid social, e-commerce listings and a brand's own site. On the publisher's side, the privacy policy states that the name, email address, phone number, company name and address collected at sign-up, the content of messages sent, and standard log files (IP address, browser type, internet service provider, timestamps, referring and exit pages, click counts) are used to operate and improve the service, analyse usage, develop new products, communicate with users and prevent fraud. Cookies and web beacons handle preferences and content personalisation, and Google's DART cookie and Google as an advertising partner are explicitly named. The terms of service add that AdMakeAI may process user data as described in the privacy policy and for no other purpose. Neither document mentions training AI models on customer content, and no opt-out from such training is documented anywhere on the site.

Data retention & training

Hosting summary

AdMakeAI publishes no data hosting information. Neither the privacy policy nor the terms of service names a hosting country, a region, a cloud provider or an international transfer mechanism, and no sub-processor list and no data processing agreement is offered. The only security statement comes from the terms of service: the publisher says it takes many measures to protect and secure data through backups, redundancies and encryption, with no detail and no certification. Outside the site, the domain resolves to 104.21.27.4, a Cloudflare anycast node (AS13335); this describes the delivery network only and says nothing about where data is actually stored. Buyers with a jurisdiction requirement should therefore treat hosting as undocumented and ask the publisher directly before uploading sensitive material.