Privacy Notice

Information we process

We process account identifiers, name, email, profile image, and sign-in information; prompts and business or catalog information; images, audio, video, and likeness or voice references you provide; generated results, task history, creative revisions, selected versions, reuse relationships, and interaction records; payment identifiers, subscription and credit transactions; support correspondence; and technical information used to operate and secure the service, including request logs, browser information, and IP addresses.

Stripe collects payment and billing details in Checkout. Nano stores payment references and billing records, not full payment-card numbers or security codes.

For requested research features, we retrieve information from URLs you submit and public advertisement, review, or other sources. You must have authority to provide another person’s information and the necessary permission for likeness or voice references.

How we use information

We use information to authenticate accounts, provide requested generation and research, save and deliver work, process payments and credits, send account and billing messages, respond to support, prevent misuse, investigate errors, and meet legal obligations.

We also use creative history and interaction records to evaluate and improve generation quality, recommendations, reliability, and cost. These records distinguish visible previews, export requests, saved changes, and reused creatives. An export request does not tell us whether you downloaded the file or published an ad. We do not receive campaign results unless a separate feature explicitly collects them.

Push notifications require browser permission and can be controlled through account preferences and browser settings. Marketing communications, if introduced, require the applicable consent and unsubscribe controls.

Service providers

We send providers the information needed for the feature you request. The integrations used by Nano include:

• Cloudflare and Vercel: app delivery, database and media storage infrastructure, authentication services, security and operational logs. Cloudflare also provides transactional email delivery.
• Stripe: Checkout, saved payment methods, billing details, receipts, refunds, and disputes.
• Google: sign-in identity and profile information when you choose Google sign-in.
• Google AI: source videos and analysis instructions for Ad Spy and Steal Ad audiovisual analysis.
• OpenAI: prompts, relevant source context, and structured results for direct video compilation and advertising-policy review.
• Kie.ai and the upstream model providers used for your request: relevant prompts, images, audio, video or voice references, generated outputs, and usage for AI generation.
• Together AI: audio sent for transcription, returned transcripts, and usage.
• Apify: Ad Spy search terms and country to find public ads; relevant offering context and selected source URLs for Buyer Signals research, including public reviews, comments, and posts.
• Research sources: URL imports contact the public websites you select. Reddit is a research source when its integration is configured.
• Your browser’s push service: encrypted notification delivery when you enable browser notifications.

Providers may process information outside your country. A US or Canadian billing address does not guarantee local data residency. A provider’s independent practices are governed by its own terms and notices; our access controls do not establish its retention or training practices.

We may disclose relevant records when required by law, to investigate fraud, or to resolve a payment dispute. These records can include acceptance evidence, payment references, usage and delivery evidence, and support correspondence.

Cookies and interaction records

We use sign-in and preference storage needed to operate the app. When you sign in, our application records creative previews, export requests, and reuse actions with temporary session identifiers. These records describe activity inside Nano and do not include browsing history from other websites.

Optional third-party analytics and session recording remain disabled. Enabling them would require an updated disclosure and any consent or choice required by law.

Retention and account deletion

Request account deletion in Settings. The app schedules deletion after a 30-day waiting period, and you can cancel before processing starts. Active subscriptions and unresolved paid work or payment outcomes must be settled before deletion proceeds.

The deletion process removes account-linked creative records, interaction history, owned operational media, and sign-in identity from our active application systems. We retain limited payment and account references, balances, and financial evidence needed for refunds, disputes, and legal obligations. Information required for an unresolved legal or payment matter may be retained while that matter is handled.

We retain separate collections of completed source-video studies, including copied source media, transcripts, and structural analysis. Public Ad Spy studies and private input studies remain in separate collections. These collections omit account identifiers and remain after account deletion. Their media and transcripts can still contain identifying information. Private studies do not become a public library or a cache available to other accounts. Contact us about retained source material.

The waiting period is not a promise that every record is erased in 30 days. Deleting our copies does not automatically delete a provider’s independently retained records. Talk to the CEO about retained information or deletion from provider systems.

Your choices and rights

Update account details, manage billing, control notifications, and request deletion through Settings. Depending on applicable law, you may request access, correction, deletion, or a copy of your personal information, withdraw applicable consent, or challenge our handling of it.

Email the CEO at support@nanoadstudio.com. We may request information needed to verify and respond to your request, and will explain any lawful reason we cannot fully fulfill it. You may contact the applicable privacy regulator; we do not require you to waive that right.

Security and updates

We restrict access to application-owned media and use authenticated or time-limited delivery for requested processing. These measures do not make internet transmission risk-free or control a supplier’s independent storage.

We post the effective date of updates and provide any notice or consent required for material changes. Send privacy questions or formal notices to the contact details below.