Privacy Policy
What personal data AdTake collects, why, who processes it, and the rights you have over it. Written to be read rather than skimmed past.
Effective August 23, 2026
Who is responsible for your data
Foriero s.r.o., registered at Držkov 7, 468 24 Držkov, Czech Republic under company number 08278016, is the controller of the personal data described here. That means we decide why and how it is processed, and we are the ones you hold to account for it.
For anything about this policy or your data, write to privacy@adtake.ai. That address reaches a person, not a queue that discards what it cannot categorise. We are not required to appoint a data protection officer and have not appointed one.
What this policy covers
This policy covers the AdTake website and the signed-in product. It does not cover other companies' websites we link to, which have their own policies.
Where we say "personal data", we mean information that identifies you or could be linked back to you, as the General Data Protection Regulation defines it.
What we collect
We collect what the service needs to work, and stop there. In practice that is:
- Account data: your name and email address, held through our identity provider. We never receive your password.
- Billing data: your credit balance and transaction history, plus the last four digits and brand of a saved card. Full card numbers reach our payment provider directly and never touch our servers.
- Project data: the briefs you write, the images you upload, the storyboards you edit and the advertisements we deliver.
- Contact messages: the name, email address, topic and message you send through our contact page.
- Technical logs: request paths, timestamps and error information, kept to keep the service running and secure.
- Language preference: the locale you choose, stored in your browser so the site opens in the right language.
We do not run advertising or analytics trackers, we do not buy personal data from anyone, and we do not build profiles of you for marketing.
Why we process it, and on what legal basis
Every use below has a legal basis under Article 6 of the General Data Protection Regulation:
- To provide the service you asked for, including generating and delivering your advertisements. Basis: performance of our contract with you.
- To take payment and maintain your credit balance. Basis: performance of our contract with you.
- To keep records required by tax and accounting law. Basis: compliance with a legal obligation.
- To keep the service secure, prevent abuse and investigate incidents. Basis: our legitimate interest in a service that is not abused.
- To answer the message you sent us. Basis: our legitimate interest in replying to people who contact us, or performance of our contract if you are already a customer.
- To send product updates by email, if you ask for them. Basis: your consent, which you can withdraw at any time.
How your briefs are processed by AI
Generating a storyboard or a video means sending your brief, and any image you uploaded, to the model providers that produce it. They process it under contract, only to return your result.
We do not use your briefs, images or delivered advertisements to train our own models, and we instruct our providers not to use them to train theirs. We do not sell your content to anyone.
Providers may hold content briefly to run abuse and safety checks, which is a condition of using them at all. The current list of providers is in the sharing section below.
Who else processes your data
We share personal data only with providers who need it to run the service, each bound by a contract that limits them to our instructions:
- Identity and authentication, which holds your name, email address and sign-in credentials.
- Payment processing, which holds your payment details and transaction records.
- Hosting and database infrastructure, on which the service and its data run.
- AI model providers, which process the briefs and images needed to generate your advertisement.
- Professional advisers such as accountants and lawyers, where they need it to do their work for us.
We also disclose data where the law requires it, for example to a court or a regulator. If a business transfer ever brought your data with it, we would tell you before it happened.
Where your data goes
The service and its database are hosted in the European Union. Some of our providers are established outside it, so certain processing happens in other countries.
Where data leaves the European Economic Area, we rely on an adequacy decision or on the European Commission's standard contractual clauses. Write to privacy@adtake.ai if you want to know which applies to a particular provider.
How long we keep it
We keep personal data only as long as there is a reason to:
- Account and project data: for as long as your account is open, then deleted within 90 days of closure.
- Billing and tax records: for the period Czech accounting and tax law requires, currently ten years from the end of the accounting period.
- Contact messages: for two years after the conversation ends, so we can pick up a thread you refer back to.
- Technical logs: for 90 days, unless a security investigation needs a specific entry for longer.
Your rights
Under the General Data Protection Regulation you have the right to:
- Ask what personal data we hold about you and get a copy of it.
- Have inaccurate data corrected.
- Have data deleted where we no longer have a reason to keep it.
- Ask us to restrict processing while a dispute about it is resolved.
- Receive the data you gave us in a portable, machine-readable form.
- Object to processing we base on legitimate interest, including at any time.
- Withdraw consent you gave, without affecting what we did before you withdrew it.
To use any of these, write to privacy@adtake.ai. We answer within one month, and we do not charge for it. We may ask you to confirm who you are first, which protects you rather than us.
If you think we have handled your data badly, please tell us so we can fix it. You can also complain to the Czech Office for Personal Data Protection, or to the supervisory authority in the European Union country where you live.
How we protect it
Data is encrypted in transit, access to production systems is limited to the people who need it, and payment details never reach our servers at all.
Our Security page describes the measures in more detail, including how to report a vulnerability.
Children
AdTake is not for children. We do not knowingly collect personal data from anyone under 18, and we delete it if we find we have. If you believe a child has given us data, write to privacy@adtake.ai.
Changes to this policy
We update this policy when what we do with data changes. The effective date at the top shows when the current version took effect.
For a change that materially affects your rights, we will tell you by email or in the product before it takes effect, rather than quietly editing the page.
How to reach us
Write to privacy@adtake.ai, or by post to Foriero s.r.o., Držkov 7, 468 24 Držkov, Czech Republic. A request sent by post is answered on the same terms as one sent by email.
Still not clear?
If any part of this document does not answer your question, ask us. A policy nobody can apply is not doing its job. Contact us