Privacy Policy

ADLO LLC

Effective Date: May 15, 2026 | Last Updated: May 15, 2026

Adlo LLC | 8735 Dunwoody Place Ste N, Atlanta, GA 30350 | hello@getadlo.com

This Privacy Policy for Adlo LLC (doing business as Adlo) (“we,” “us,” or “our”) describes how and why we collect, store, use, and share information about you when you use our services, including when you:

Visit our website at https://getadlo.com or any website of ours that links to this Privacy Policy

Subscribe to Adlo Studio, our AI-powered creative generation service

Engage with us in other related ways, including marketing communications or events

Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at hello@getadlo.com.

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use. We collect information you provide directly and information collected automatically through your use of our platform.

Do we process sensitive personal information? We process financial data and account credentials as necessary to provide our billing and platform services. We do not process sensitive information such as racial or ethnic origins, health information, or biometric data.

Do we collect information from third parties? We do not purchase or receive personal information from third-party data brokers. We receive limited profile information when you register using Google OAuth.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, process payments, prevent fraud, and comply with applicable law.

With whom do we share information? We share information only with service providers necessary to operate the platform including Stripe for payment processing, third-party DSP infrastructure providers for programmatic campaign delivery, and Anthropic and fal.ai for AI creative services.

How do we keep your information safe? We implement appropriate technical and organizational security measures. No system is 100% secure and we cannot guarantee against all unauthorized access.

What are your rights? Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information. See Section 10 for details.

1. WHAT INFORMATION DO WE COLLECT?

Information You Provide Directly

We collect personal information that you voluntarily provide when you register for an account, use our Services, or contact us. This may include:

Names and job titles

Business and email addresses

Phone numbers

Account usernames and passwords

Billing and payment addresses

Campaign settings, targeting parameters, and advertising creative content

Communications you send to us

Payment Data

We collect information necessary to process payments, including payment instrument numbers and associated security codes. All payment data is handled and stored by Stripe. You can review Stripe’s privacy practices at https://stripe.com/privacy. We do not store full payment card numbers on our systems.

Campaign and Advertising Data

As a programmatic advertising platform, we process data relating to your advertising campaigns including budgets, targeting criteria, creative assets, impression and click data, and performance metrics. This data is used to operate your campaigns, generate reporting, and improve our platform. We may use anonymised and aggregated campaign performance data to develop industry benchmarks. No individual client or campaign is identifiable in benchmark data.

Information Collected Automatically

We automatically collect certain information when you visit or use our Services

Log and usage data: IP address, browser type, device information, pages viewed, features used, and timestamps

Device data: hardware model, operating system, browser type, and configuration

Location data: general location inferred from IP address

Cookies and tracking technologies: see Section 4 for details

Information from Third Parties

If you register using Google OAuth, we receive basic profile information from Google including your name and email address. We do not purchase personal information from third-party data brokers or data providers.

AI-Generated Content

If you use Adlo Studio, our AI creative generation service, we collect your inputs, brand materials, and generated outputs. Inputs and outputs may be processed by our AI service providers Anthropic and fal.ai as described in Section 5.

2. HOW DO WE USE YOUR INFORMATION?

We process your personal information for the following purposes

Account creation and authentication: to enable you to create and manage your Adlo account

Service delivery: to operate your advertising campaigns, process payments, and deliver platform features

Adlo Studio: to process creative generation requests and deliver AI-generated advertising content

Billing and payments: to process charges for advertising spend and subscription fees, handle payment failures, and maintain billing records

Communications: to send service notifications, billing confirmations, campaign performance reports, and support responses

Marketing: to send promotional communications about Adlo products and features, subject to your preferences

Platform improvement: to analyse usage patterns, identify bugs, and improve platform features

Security and fraud prevention: to detect and prevent fraudulent activity and unauthorized access

Legal compliance: to comply with applicable laws, respond to legal process, and enforce our Terms of Service

Aggregated benchmarking: to develop anonymised programmatic advertising performance benchmarks from campaign data

We will not use your personal information for purposes materially different from those listed without providing prior notice and, where required, obtaining your consent.

3. LEGAL BASES FOR PROCESSING

We process your personal information on the following legal bases

Performance of a contract: Processing necessary to provide the Services you have purchased, including operating campaigns, processing payments, and delivering platform features.

Legitimate interests: Processing necessary for our legitimate business interests, including platform security, fraud prevention, service improvement, and aggregated analytics, where these do not override your rights.

Consent: Where we rely on consent, including for marketing communications, you may withdraw consent at any time.

Legal obligations: Processing required to comply with applicable law, including tax, accounting, and regulatory requirements.

If you are located in the EU, UK, or Canada, additional disclosures regarding applicable legal bases are available upon request at hello@getadlo.com.

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to operate our platform, maintain session security, remember your preferences, and analyse usage. When you first visit getadlo.com, our cookie consent banner allows you to accept or decline non-essential cookies before any tracking begins. You may update your cookie preferences at any time through the consent tool on our website. Specifically:

Essential cookies: required for the platform to function, including session authentication and security

Analytics cookies: we use Google Analytics to understand how users interact with our platform. You may opt out at https://tools.google.com/dlpage/gaoptout

Advertising cookies: we may use cookies to deliver and measure advertising about Adlo on third-party platforms

We also provide our clients with a retargeting pixel that can be installed on their own websites to build advertising audiences within the Adlo platform. Clients are solely responsible for disclosing pixel data collection to their own website visitors and obtaining all required consents under applicable law including CCPA and state privacy laws. Any client first-party data used for custom audience targeting must have been collected with appropriate consent for advertising use prior to upload or use within the platform. Clients using Adlo Studio AI-generated creative content are solely responsible for complying with all applicable platform policies and laws regarding disclosure and labelling of AI-generated advertising content before submitting campaigns.

You can control cookies through your browser settings. Disabling essential cookies may impair platform functionality. Please note that programmatic advertising delivery through our platform is subject to automatic data restrictions in certain US states under applicable privacy law. In states where Restricted Data Processing applies, audience targeting and personalisation features may be limited for end users who have exercised applicable opt-out rights. These restrictions are applied automatically at the infrastructure level and do not require action from Adlo clients.

5. ADLO STUDIO — AI-POWERED CREATIVE SERVICES

Adlo Studio is our AI-powered advertising creative generation service, available as a monthly subscription. Adlo Studio uses artificial intelligence technology provided by third-party service providers including Anthropic and fal.ai.

When you use Adlo Studio

Your inputs, brand materials, and creative prompts are processed by our AI service providers to generate outputs

AI-generated content is returned to you within the platform

Your inputs and outputs may be processed by Anthropic and fal.ai subject to their respective privacy policies

We do not use your specific creative inputs to train our own AI models

Adlo Studio subscription fees ($35/month for Pro, $49/month for Max) are billed on the monthly anniversary of your subscription start date. Subscriptions are non-refundable. See our Terms of Service for full billing terms.

You must not submit sensitive personal information, confidential third-party data, or content that violates applicable law or third-party rights as inputs to Adlo Studio.

6. WHEN AND WITH WHOM DO WE SHARE INFORMATION?

We share personal information only in the following circumstances

Service Providers

We share information with third-party vendors who perform services on our behalf under written data processing agreements. Current service providers include:

Stripe: payment processing and billing

Third-party demand-side platform (DSP) infrastructure providers: programmatic advertising campaign delivery and inventory access

Anthropic: large language model AI services for Adlo Studio

fal.ai: image and video generation services for Adlo Studio

Google: Google Analytics for platform usage analysis and Google OAuth for user authentication

Cloud hosting and infrastructure providers: platform hosting and content delivery

Database and backend infrastructure providers: data storage and platform operations

These service providers are not permitted to use your personal information for purposes other than providing services to Adlo. Enterprise clients requiring a Data Processing Agreement (DPA) for GDPR or other compliance purposes may request one by contacting hello@getadlo.com.

Business Transfers

We may share or transfer information in connection with a merger, acquisition, financing, or sale of all or a portion of our business. We will notify you of any such transfer and any choices you may have.

Legal Requirements

We may disclose information when required by applicable law, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of any person.

Aggregated and Anonymised Data

We may share aggregated, anonymised campaign performance benchmarks that cannot be used to identify any individual client or campaign. This benchmark data may be published for industry research purposes.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Account information: retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations

Campaign data: retained for the duration of your account and a reasonable period thereafter for reporting and legal compliance

Billing records: retained for seven (7) years as required by applicable tax and accounting law

Anonymised benchmark data: retained indefinitely as it contains no personal information

When retention is no longer necessary, we will delete or anonymise your personal information. Where deletion is not immediately possible due to backup systems, we will securely isolate the information until deletion is feasible.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These include:

Encrypted data transmission using TLS/HTTPS

Access controls and authentication requirements for platform access

Multi-factor authentication options for accounts with significant spend levels

Pixalate integration for invalid traffic detection and prevention

Regular security assessments of our infrastructure

No electronic transmission or storage system is 100% secure. We cannot guarantee that hackers, cybercriminals, or other unauthorised parties will not defeat our security measures. Transmission of personal information to and from our Services is at your own risk. You should access the Services only in a secure environment.

9. CHILDREN’S PRIVACY

Our Services are directed at businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 18. By using our Services you represent that you are at least 18 years of age. If we learn that we have collected personal information from a minor, we will take prompt steps to delete it. Contact us at hello@getadlo.com if you believe we have collected information from a minor.

10. YOUR PRIVACY RIGHTS

United States Residents

Depending on your state of residence, you may have the following rights regarding your personal information:

Right to know whether we are processing your personal information

Right to access your personal information

Right to correct inaccuracies in your personal information

Right to request deletion of your personal information

Right to obtain a portable copy of your personal information

Right to opt out of targeted advertising, sale of personal data, or profiling for significant decisions

Right to non-discrimination for exercising your privacy rights

To exercise these rights, submit a request to hello@getadlo.com or visit getadlo.com/contact. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.

EEA, UK, and Switzerland Residents

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation, including the right to access, rectify, erase, restrict processing of, and port your personal data. You may also have the right to object to processing and to lodge a complaint with your local data protection authority.

California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Under the “Shine the Light” law (California Civil Code Section 1798.83), California residents may request once per year, free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes.

11. CATEGORIES OF PERSONAL INFORMATION (CALIFORNIA)

The following table identifies the categories of personal information we have collected in the preceding twelve (12) months:

Retention: We retain each collected category for the duration of the client’s account and thereafter as required by applicable law. Billing and financial data is retained for seven (7) years.

12. DO-NOT-TRACK SIGNALS

Most web browsers include a Do-Not-Track (“DNT”) feature or setting. No uniform technology standard for recognising and implementing DNT signals has been finalised. We do not currently respond to DNT browser signals. If a standard is adopted that we are required to follow, we will update this Privacy Policy accordingly. California law requires disclosure of how we respond to DNT signals: we do not respond to them at this time. Global Privacy Control (“GPC”) is a separate browser-based signal that may be required under applicable US state privacy laws including California and Colorado. We do not currently recognise GPC signals at the platform level. We will update this Privacy Policy if and when applicable law requires us to honour GPC signals, and will implement appropriate technical measures at that time.

13. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated version will be identified by an updated date at the top of this document. If we make material changes, we will notify you by email or by a prominent notice on our platform at least thirty (30) days before changes take effect. We encourage you to review this Privacy Policy periodically.

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will consider and act on any request in accordance with applicable data protection laws.

15. HOW TO REVIEW, UPDATE, OR DELETE YOUR DATA

Based on applicable laws of your country or state of residence, you may have the right to request access to, correction of, or deletion of the personal information we hold about you. You may also have the right to withdraw consent to our processing of your personal information.

To submit a request

Email: hello@getadlo.com with the subject line “Privacy Request”

Web form: getadlo.com/contact

We will verify your identity before processing any request. We will respond within the timeframe required by applicable law. These rights may be limited in certain circumstances as permitted by law.