Privacy Policy

Last updated: October 27, 2026

This policy explains what data CreativeAds.io ("we") collects and how we use it. It covers our marketing site, creativeads.io, and our private admin app, admin.creativeads.io.

Our marketing site

You do not need an account to use creativeads.io. We do not ask you to log in.

The site loads Google Tag Manager from Google. Google receives your IP address and browser details when it loads. Tags that run through Google Tag Manager can set cookies and measure how you use the site.

The "Let's Talk" section on our homepage shows a booking form from Cal.com. The details you enter go to Cal.com so you can book a call with us. Cal.com handles them under its own privacy policy.

The Safe-Zone Checker runs in your browser. Your image or video stays on your device. The tool does not upload it to our servers.

Our admin app

The admin app is a private tool for our team. Only email addresses on our allow-list can sign in. It stores this data:

  • Account data: your name, email address and profile picture.
  • Sessions: your IP address and browser user agent. A session ends after 7 days.
  • Login links: we email a one-time link from no-reply@creativeads.io. The link expires after 5 minutes.
  • Rate limits: request counters that block abuse of the login and other routes.
  • Business records: our clients' company names, addresses, tax IDs, contact names and contact email addresses, and their contracts and invoices.
  • Slack: if you connect Slack, we store the workspace name, the channels you pick and a bot access token. We use Slack to send you messages about contracts and invoices.

Google user data

You can sign in to the admin app with Google. You can also link a Google account to send invoice emails from Gmail. We ask Google for these permissions:

  • openid, email and profile: your name, email address and profile picture. We use them to sign you in.
  • gmail.send: permission to send email from your Gmail account. We use it only to send invoice emails that you set up in the app, and test emails to your own address.

We do not read, list or delete your email. The gmail.send permission does not give us access to your inbox. We store the Google access token and refresh token in our database. We use them only for the purposes above.

CreativeAds.io's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This means:

  • We use Google user data only to provide the features above.
  • We do not sell Google user data. We do not use it for ads.
  • We do not transfer it to others, except to provide these features, to comply with the law, or as part of a merger or sale of the business.
  • No person reads it, unless you agree, it is necessary for security or to comply with the law.

You can remove our access at any time on your Google Account permissions page. After that, the app cannot send email from your account.

Who processes data for us

We do not sell personal data. These services process it:

  • Cloudflare: hosts both sites, stores the admin database, keeps server logs and sends login emails.
  • Google: sign-in, Gmail sending and Google Tag Manager.
  • Slack: messages to our team about contracts and invoices.
  • Cal.com: call bookings.

Cookies

The admin app uses a session cookie to keep you signed in. It also uses a short-lived cookie to protect the Slack connect step. On creativeads.io, tags in Google Tag Manager can set cookies.

Your choices

You can ask us to show, correct or delete your data. You can block cookies in your browser settings.

Changes and contact

We can change this policy. When we do, we change the date at the top of this page.

For questions about this policy, book a call in the Let's Talk section or message us on LinkedIn.