AdMaker

GDPR overview

The privacy policy names the GDPR explicitly (Regulation (EU) 2016/679) and claims that personal data is stored securely under it, with processing carried out in “strict compliance with EU privacy laws”. A dedicated section summarises data subject rights: access, erasure, rectification, complaint to a supervisory authority, information about the processing, restriction, portability, objection, and rights relating to automated decision-making and profiling. A further section covers contesting an automated decision, obtaining human intervention, expressing a point of view and receiving an explanation. Consent can be withdrawn at any time, with deletion of the data, and cookies are said to follow UK and EU cookie law. The documentary layer is what is missing: no Article 27 EU representative, no data protection officer, no DPA, no subprocessor list, no standard contractual clauses or transfer countries, and no establishment address anywhere on the site.

Who owns the data?

Clause 4.1 of the Terms states that you keep ownership of everything you upload, including scripts, images and brand assets. Clause 4.2 then grants AdMaker a non-exclusive, worldwide, royalty-free licence to use, reproduce, modify, adapt, publish and display that content, stated as being solely to operate, maintain and improve the Service; no onward sharing with third parties is described. Clause 5 keeps the intellectual property in the platform itself — software, design, templates, technology — with the publisher. Clause 4.4 authorises commercial use of the generated videos and ads, and the home-page FAQ extends that to the voice-overs, music and avatars supplied by the platform, while leaving advertising compliance to the user.

Reuse rights

The generated ads can be reused commercially without asking permission, provided the use is lawful. As for personal data, the publisher collects name, username, password, email address and company name with consent, and automatically records IP address, browser and version, operating system and the sequence of URLs followed through the site. The stated purposes are account creation and access management, personalisation, delivery of the products and services, replies to messages, subscribed emails, market research and usage analysis for continuous improvement. The publisher declares that it never sells personal data, but third parties handling payment, delivery, search, advertising and marketing may access some or all of it, with no named list published. Anonymised usage statistics may be shared with investors, affiliates, partners and advertisers. First- and third-party cookies are used, including Google Analytics, Facebook analytics and advertising cookies, and the data may be transferred if the business is sold, with prior notice to users.

Data retention & training

Hosting summary

No hosting country or region appears anywhere on the site: not in the privacy policy, not in the Terms, and not on a trust or security page, since none exists. The publisher claims physical, electronic and managerial safeguards for personal data without describing them, and reminds users that transmission over the internet is never entirely secure. It also states that processing complies with EU privacy law, but names no location. No certification is claimed — no SOC 2, no ISO 27001 — and no subprocessor list is published. Technically, the site is served behind Cloudflare (anycast address 104.18.16.113, AS13335), which indicates nothing about where customer data is actually stored. Any organisation with a data residency requirement will therefore have to ask the publisher directly at service@admaker.ai, because the site itself provides no answer.