Your clients' ad accounts, handled with care.
Who runs adgensy, what we store and for how long, who processes it, and how to get it deleted. Written for agencies that have to answer these questions for their own clients.
Read-only by default
The assistant can only read data until you approve a specific change. Every write is a proposal you see and confirm first.
Encrypted tokens
OAuth refresh tokens and API credentials are encrypted at rest with AES-256-GCM. We never see or store your Google or Meta password.
Live data, not copies
Ad and analytics performance data is fetched live for each question and is not stored as a copy of your accounts.
Deletion within 30 days
Disconnect any platform instantly. Ask for account deletion and all associated data is removed within 30 days.
DPA on request
Agencies and businesses subject to GDPR can sign a data processing agreement with us. Email us and we send it the same week.
Official APIs only
Google and Meta are connected through their official OAuth sign-in. Google data use follows the Google API Services User Data Policy, including Limited Use.
Data retention
What we keep, and for how long
| Data | Retention |
|---|---|
| Ad and analytics performance data (Google Ads, Meta, GA4, Search Console) | Not stored. Fetched live for each request. |
| OAuth tokens and API credentials | Encrypted; deleted immediately when you disconnect a platform. |
| Account profile (name, email) | Until you delete your account. |
| Chat history, saved reports, memory notes | Until you delete them or your account. |
| Change log (what was proposed and approved) | Until you delete your account, so you can audit past changes. |
| Uploaded media (images, videos for ads) | Until you delete them or your account. |
| Everything above after an account deletion request | Removed within 30 days. |
Subprocessors
Who else processes data
Plus the AI assistant you connect (ChatGPT, Claude or another MCP client), under that provider's own terms.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting | USA / global edge |
| Cloudflare | Database (D1) and media storage (R2) | Global |
| Anthropic | AI model for the built-in assistant in the adgensy web app | USA |
| Google (Gemini, Veo) | Optional ad image and video generation | Global |
| Semrush | SEO keyword and backlink data you request | USA |
| Resend | Transactional email (sign-in links) | EU (Ireland) |
| Google Analytics | Website usage measurement on adgensy.com | Global |
GDPR
Your rights and how to use them
You can access, correct, export or delete your personal data, and object to or restrict its processing. Send the request to support@adgensy.com from the email on your account; we reply within 30 days.
When an agency connects a client's ad account, the agency is the controller of that client data and adgensy acts as its processor. A data processing agreement covering this is available on request.
The service is operated by Digitexa Yazılım, a sole proprietorship owned by Erdi Doğan, Koşuyolu, Ali Nazime Sk. No:32, 34784 Kadıköy, İstanbul, Türkiye. See also the Privacy Policy and About.
Security questions
Who operates adgensy?+
adgensy is built and operated by Digitexa Yazılım, a sole proprietorship owned by Erdi Doğan, Koşuyolu, Ali Nazime Sk. No:32, 34784 Kadıköy, İstanbul, Türkiye. Contact: support@adgensy.com.
Does my AI assistant receive my ad data?+
Yes, the answers it needs. When you use adgensy from ChatGPT or Claude, the data returned for your question goes to that assistant under its own terms. Inside the adgensy web app, the built-in assistant runs on Anthropic's API, which does not train on API data.
Is my data used to train AI models?+
No. adgensy never sells your data and never uses it to train models.
Can an agency keep client data separate?+
Each ad account must be activated before the assistant can see it, and you can disconnect any account at any time. Teammates join your workspace by invitation and you can remove them whenever you like.
How do I get a DPA or a security questionnaire answered?+
Email support@adgensy.com with your company name. We send a DPA for signature and answer security questionnaires, usually within a few working days.
Need a DPA or a security review?
Email us with your company name and we will send what your client or legal team needs.