Privacy Policy

Effective: 28 August 2026

PivotAd, operated from Gærdesmuttevej 10, Hørsholm, Denmark ("PivotAd", "we"), is the data controller for the personal data described in this policy. It explains what we collect when you visit pivotad.ai or use the PivotAd service (the "Service"), why we collect it, who sees it, and the rights you have over it. We wrote it to be read, not skimmed past.

1. What we collect

• Waitlist. Your email address, used only to tell you about beta access — nothing else.
• Intake answers. What you tell us about your business: business and legal name, registration number, business address, website address, contact email, what you sell, where you serve customers, your daily budget, how customer inquiries reach you, and your business phone number if calls are one of them. Google requires the legal details for advertiser verification.
• Your website. A snapshot of your website's public pages, which we read in order to write your ads. We never log in to anything of yours.
• Campaign data. The campaigns we build for you and their performance data — impressions, clicks, costs, conversions — from the Google Ads API.
• Approval records. When you approve a campaign plan on the review screen, we record that approval. It is your authorisation to launch, so we keep proof of it.
• Technical logs. Like nearly every website, our servers record IP address, browser type and pages requested. We use these to keep the Service secure (including rate-limiting abusive traffic), to troubleshoot, and to keep things working.

2. What we don't collect

• Nothing about your customers or your website's visitors. We place no pixels, tags or code on your website. Where conversion tracking is set up, it uses Google's own tags, which send data to Google under Google's terms — not to us.
• No payment details. There is nothing to pay during the free beta, and your advertising budget is paid by you directly to Google in Google's own billing system. If we launch paid plans, payments will be handled by a payment processor named at that time — your card details will still never be stored by PivotAd.

3. How we use it

• To provide the Service — building, launching and managing your campaigns, and supporting you. Legal basis: performance of our contract with you.
• To keep the Service secure and working — logs, rate limits, fixing what breaks. Legal basis: our legitimate interests, balanced against yours.
• To email the waitlist about beta access. Legal basis: your consent — withdraw it any time by replying or emailing us, and we'll remove you.

We don't use your data to advertise to you, we don't build profiles of you, and we never sell it.

4. AI processing

To generate your campaign plan, we send your intake answers and your website snapshot to our AI provider, Anthropic, whose model drafts the keywords and ads under PivotAd's rules. Anthropic processes this data to provide the generation service and is not permitted to use it to train its models. The result is shown to you for review before anything goes live.

5. Who we share it with

Only what's needed to run the Service, with providers acting on our instructions:

• Google — to create and manage campaigns in your Google Ads account, at your instruction, through the official Google Ads API.
• Anthropic — AI campaign generation, as described above.
• Railway — cloud hosting for the Service and its database.
• Content-delivery networks. Our pages load fonts and scripts from CDNs (Google Fonts, Tailwind, unpkg); your browser sends its IP address to those services when it fetches the files.

We may also disclose information if the law requires it, to protect the Service or its users from fraud or abuse, or — under the same protections as this policy — as part of a merger or sale of the business. We never sell your personal data.

6. Cookies

We use only the cookies the Service needs to function: a session cookie, so the intake wizard remembers your answers between steps, and a security cookie that protects forms against forgery. No advertising cookies, no analytics cookies, no cross-site tracking — so there is nothing here to opt out of. If that ever changes, this policy changes first, and we'll ask for consent where the law requires it.

7. Where your data lives

PivotAd operates from Denmark. Our hosting and AI providers are US companies, so your data may be processed in the United States. Where personal data leaves the European Economic Area, we rely on safeguards approved by the European Commission — Standard Contractual Clauses, or the EU-US Data Privacy Framework where the provider is certified.

8. Your rights

Wherever you live, we offer everyone the rights the GDPR provides: ask for a copy of your data, correct it, delete it, receive it in a portable format, object to or restrict its processing, and withdraw consent at any time. Email contact@pivotad.ai and we'll respond within a month, as the GDPR requires — we may first need to verify that you are you. If you're unhappy with our answer, you can complain to the Danish Data Protection Agency (Datatilsynet) or to your local supervisory authority.

9. How long we keep it

We keep your data while you use the Service and delete or anonymise it when it is no longer needed. Two things we hold longer: approval records, as proof that a launch was authorised, and anything the law requires us to keep, such as accounting records. Deletion requests are honoured except for those.

10. Security

Access to your data is restricted, credentials and API keys are kept out of the application code, and connections to the Service are encrypted. No internet service can promise absolute security, so we won't — but if a breach ever affects your personal data, we will notify you and the authorities as the GDPR requires.

11. A service for businesses

PivotAd is built for businesses advertising on Google. It is not directed at children, and we do not knowingly collect data from anyone under 16.

12. Changes to this policy

As the Service evolves, this policy will be updated so it keeps telling the truth. Material changes will be announced on the Service or by email — never silently — and the current version always lives at pivotad.ai/privacy.

13. Contact

PivotAd · Gærdesmuttevej 10, Hørsholm, Denmark · contact@pivotad.ai. Questions, requests and complaints are all welcome.