Privacy Policy

1. Who we are

LoveAds Copilot (“LoveAds Copilot”, “the Service”, “we”, “us”) is an analytics and decision-intelligence platform for digital advertising, operated by LOVE ADS MARKETING SRL, a company registered in Romania (“LoveAds”). The Service is available at https://copilot.loveads.ro.

This policy explains what data we process, why, and the choices and rights you have. For questions or to exercise your rights, contact us at copilot@loveads.ro.

2. Controller and processor

For the account and contact data of the people who sign in to the Service, LoveAds acts as a data controller.

For the advertising, store and performance data we import from connected platforms on your instruction (see section 3), LoveAds acts as a data processor on behalf of you (our customer), who is the controller of that data. We process it only to provide the Service and on your documented instructions.

3. Data we collect

a. Account data

Name, email address, password (stored hashed), organization, and basic usage/diagnostic logs.

b. Connected platform data

When you connect an advertising or commerce account, we import data through that platform’s official API, strictly within the scopes you authorize:

• Google Ads — accounts, campaigns, daily performance metrics (spend, impressions, clicks, conversions, conversion value) and account change history.
• Meta (Facebook/Instagram) Ads — ad accounts, campaigns and campaign-level insights (read-only).
• Shopify (optional, per store) — order totals/refunds, products and inventory cost, used to compute revenue and profit.

We request read-only access. We do not create, edit, pause or delete campaigns, and we do not collect the personal data of your customers’ end-shoppers beyond aggregate order values needed to compute revenue and profit.

4. How and why we use data (lawful bases)

• To provide the Service — import metrics, compute KPIs (ROAS, POAS, CPA), detect money-leaks and opportunities, and produce reports (performance of a contract).
• AI analysis — we send already-aggregated, non-identifying performance figures to our AI sub-processor to generate written summaries and recommendations (legitimate interests / performance of a contract). The AI does not perform the underlying calculations and our providers do not use your data to train their models.
• Security, debugging and abuse prevention (legitimate interests).
• Communications about your account and optional digests (consent / contract).

5. Sub-processors

We rely on the following providers to operate the Service:

• Hetzner (EU, Germany) — cloud hosting and database.
• Anthropic (USA) — AI model that generates report narratives from aggregated metrics.
• Google, Meta, Shopify — the platforms you connect, as data sources.
• Transactional email delivery for account and digest emails.

Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Storage, transfer and security

Data is stored in the EU (Germany). Platform access tokens and store tokens are encrypted at rest; all traffic is encrypted in transit (HTTPS). Access is restricted, authentication is token-based, and webhook payloads are signature-verified.

7. Data retention

We keep aggregated performance data, decisions and learnings for as long as your account is active, because the product’s value is its long-term “marketing memory”. Raw, granular API responses are retained for a shorter period (typically 30–90 days). When you disconnect a platform or delete your account, we delete or anonymize the associated data as described in section 9 and our Data Deletion page.

8. How we disclose data

We do not sell your data and we do not use it for cross-context behavioral advertising. We disclose data only to the sub-processors above, where required by law, or in connection with a corporate transaction (with continued protection).

9. Your rights

Subject to applicable law (including the GDPR), you may request access to, correction of, deletion of, restriction or portability of your personal data, and you may object to certain processing. To exercise any right, email copilot@loveads.ro or see the Data Deletion page. You also have the right to lodge a complaint with your local supervisory authority (in Romania, the ANSPDCP).

10. Cookies

We use only strictly-necessary cookies to keep you signed in. We do not use advertising or third-party tracking cookies in the Service.

11. Contact

LOVE ADS MARKETING SRL, Romania.
Privacy & data requests: copilot@loveads.ro