Voltar para a homeLegal

Privacy Policy

Last updated: May 29, 2026

1. Introduction

AdShields ("we", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

2. Information We Collect

2.1 Information You Provide

  • Registration Data: name, email, encrypted password
  • Payment Data: securely processed via Stripe (we do not store card data)
  • Uploaded Files: video files submitted for processing
  • Communications: messages sent to support

2.2 Automatically Collected Information

  • Usage Data: actions within the service, uploads, downloads
  • Technical Data: IP address, browser type, operating system
  • Cookies: used for authentication and preferences
  • Diagnostic Data: IP address, session information, and error context automatically collected by the Sentry monitoring tool for diagnostic and service stability purposes. Authentication headers and cookies are excluded from this data.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service
  • Process payments and manage subscriptions
  • Send notifications about your account and service updates
  • Respond to support requests
  • Improve and personalize the Service
  • Detect and prevent fraud and abuse
  • Comply with legal obligations

4. File Storage

Files you upload and process are stored permanently in your workspace while your subscription is active — there is no automatic time-based deletion. Each plan includes a storage quota per workspace:

  • Starter Plan: 10 GB
  • Pro Plan: 50 GB
  • Business Plan: 200 GB

When the workspace quota is reached, new uploads are blocked until you free up space (by deleting files) or upgrade your plan. You may delete your files manually at any time — deletion is permanent and irreversible.

Upon termination or cancellation of your subscription, access to the platform ceases and your files may be removed from our servers as set out in the Terms of Use.

Privacy and Security of Your Videos

We understand your videos may contain sensitive information. Here is how we handle your files:

  • Automated Processing: Your files are processed by automated systems. Human access to files is restricted and occurs only when necessary for technical support, problem diagnosis, or service improvement — always in a controlled and logged manner.
  • Use for Service Improvement: We may use files, in anonymized or aggregated form, to improve our audio protection algorithms and service quality. This does not involve sharing with third parties or selling your data.
  • Private and Isolated Storage: Your videos are stored in isolated buckets on Cloudflare R2 (Cloudflare's object storage infrastructure). Each account has its own private space — other users cannot access your files.
  • Encryption in Transit and at Rest: All files are encrypted during upload (SSL/TLS) and while stored (AES-256).
  • No Sale or Commercial Sharing: Your files are never sold, licensed, or commercially shared with third parties. Your video content is not sent to analytics or advertising platforms (Meta Pixel, PostHog, and Clarity receive only platform usage events, never file content).
  • Full Control: You can delete your videos at any time from the dashboard. Deletion is permanent and irreversible.

Questions about how your files are handled? Contact our DPO: dpo@adshields.pro

5. Sharing of Information

We do not sell your personal information. We may share information only with:

  • Payment Processing: Stripe — processes transactions; we do not store card data
  • Authentication and Database: Supabase — stores account and session data
  • Error Monitoring: Sentry — receives IP and technical error context; no file content data
  • Product Analytics: PostHog — receives usage events (pages visited, actions taken) with consent; data pseudonymized via UUID
  • Session Recording: Microsoft Clarity — captures UX interactions to improve the service, with automatic masking of sensitive fields (email, phone, password)
  • Advertising and Attribution: Meta Platforms — receives conversion data (SHA-256 hashed email, registration and purchase events) via Meta Conversions API, exclusively to measure advertising campaign effectiveness; only with marketing consent
  • File Storage: Cloudflare R2 — stores videos submitted for processing; files are kept in per-account isolated buckets
  • Processing Infrastructure: Google Cloud Platform (Cloud Run) and Hetzner (processing servers); both with signed DPA/AVV
  • Legal Requests: when required by law or court order
  • Rights Protection: to protect our rights, privacy, safety, or property
  • AI Assistant Providers: Anthropic (Claude) and OpenAI (Codex/ChatGPT) — when you enable the MCP connector, your prompts and the data returned by the platform are sent to the AI provider you connected, to process your requests; only for the organizations you authorize

5.1 MCP Connector and AI Assistants

AdShields offers a connector (Model Context Protocol — MCP) that lets third-party AI assistants you authorize — such as Claude (Anthropic) and Codex (OpenAI) — access and operate your data on the platform on your behalf.

  • Authorization: access is granted by you via OAuth 2.0, with a consent screen, and restricted to the organizations you authorize. You can revoke access at any time in Settings → Connections.
  • Data accessed: depending on the granted scope (read and/or write), the connector accesses data from the authorized organizations — videos and scripts, scenes and reference images, comments, and team member names. Access is always organization-scoped and recorded in an audit trail.
  • Sharing with the AI provider: when you use the connector, your prompts and the data returned by AdShields are sent to the AI provider you connected (e.g., Anthropic, OpenAI) and processed under that provider's own privacy policy. AdShields does not control the data processing performed by these providers.
  • Collection: the connector is an access channel — AdShields does not collect new categories of data beyond those described in this policy.

We recommend reviewing the providers' privacy policies: Anthropic · OpenAI

6. Data Security

We implement technical and organizational security measures to protect your information:

  • SSL/TLS encryption for all data transmissions
  • Passwords stored with cryptographic hash (bcrypt)
  • Authentication via secure JWT tokens
  • Infrastructure hosted by SOC 2 certified providers
  • Regular encrypted backups

7. Your Rights (LGPD)

Under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — LGPD), you have the right to:

  • Access: request a copy of your personal data
  • Correction: correct incomplete or inaccurate data
  • Deletion: request deletion of your data
  • Portability: receive your data in a structured format
  • Revocation: withdraw your consent at any time
  • Objection: object to the processing of your data

To exercise these rights, please contact us at privacidade@adshields.pro

8. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

8.1 Essential Cookies (always active)

  • Supabase Session: keeps you authenticated across pages
  • as_attr / as_attr_last: store visit origin (UTM, fbclid) for internal marketing attribution — no session expiry, 90 days
  • Consent Preference: consent_v2 in localStorage, stores your cookie choices

8.2 Analytics Cookies (require consent)

  • PostHog: ph_* cookies for product analytics; distinct_id = pseudonymized UUID
  • Microsoft Clarity: _clck and _clsk cookies for session recording and heatmaps; PII automatically masked

8.3 Marketing Cookies (require consent)

  • Meta Pixel: _fbp and _fbc cookies set by the Meta SDK, used to measure conversions from advertising campaigns on Facebook/Instagram

You can manage your cookie preferences at any time by clicking "Cookie Preferences" in the site footer or through your browser.

9. Minors

The Service is not intended for persons under 18 years of age. We do not intentionally collect information from minors. If you are a parent or guardian and believe your child has provided us with information, please contact us.

10. Changes to This Policy

We may update this Policy periodically. We will notify you of significant changes by email or through the Service. We recommend reviewing this Policy regularly.

11. Contact

For questions about this Privacy Policy or your personal information:

Email: privacidade@adshields.pro

Data Protection Officer (DPO): dpo@adshields.pro