Privacy Policy

AdMedha ("we", "us") is a service by Medha Labs that lets businesses plan, publish and measure advertising across ad platforms such as Meta (Facebook, Instagram, WhatsApp), Google Ads and others. This policy explains what information we handle, why, and the choices you have.

Information we collect

• Account details: your name, email address, password (stored only as a secure hash) and the workspaces you belong to.
• Campaign content: campaigns, ads, images, videos, budgets, targeting, brands, products and audiences you create in AdMedha.
• Connected ad platform data: when you connect an ad platform, we receive an access token and the ad accounts, Pages, Instagram accounts, WhatsApp numbers and campaign information you choose to share, plus performance metrics (impressions, clicks, conversions, spend).
• Billing: your plan, credits and payment status. Card and bank details are handled by our payment processors (Razorpay and Stripe) and never reach our servers.
• Usage and technical data: server logs and error reports needed to operate and secure the service.

How we use it

• To provide the service: publish and manage ads on the platforms you connect, sync their results and show reports.
• To answer questions you ask in "Ask": your question and the relevant data from your workspace are sent to Google's Gemini API to generate the answer.
• To bill you, keep your account secure, provide support and improve the service.

We do not sell your data, and we do not use data from connected ad platforms to advertise to you or for any purpose other than providing AdMedha to you.

Data from Meta and other ad platforms

We access Meta, Google and other platform data only with your permission and only to perform actions you request in AdMedha. Access tokens are stored encrypted. You can disconnect a platform at any time on the Platforms page, which deletes its stored token from our systems immediately. You can also remove our access from the platform itself (for example in your Facebook "Business integrations" settings).

Who we share it with

• The ad platforms you connect, to carry out the actions you ask for.
• Service providers that run the service for us: hosting (DigitalOcean, Vercel), AI (Google Gemini) and payments (Razorpay, Stripe), under their own privacy terms.
• Members of your workspace, according to their roles.
• Authorities, where the law requires it.

Retention and deletion

We keep your data while your account is active. Disconnecting a platform deletes its token right away. To delete your account and its data, follow the steps on our data deletion page; we complete deletion within 30 days, except where the law requires us to keep records (such as invoices).

Security

Connections to AdMedha use HTTPS, passwords are hashed, and ad platform tokens are encrypted at rest. No system is perfectly secure, so please use a strong password.

Your rights

You can access, correct, export or delete your data, and withdraw permissions you have given us. Email us to make a request.

Changes

We will post updates to this policy on this page and change the effective date above. Significant changes will be notified in the app or by email.

Contact

Medha Labs — medhalabs04@gmail.com