1. Who We Are
AdTecher is a Chromium browser extension designed to help small and medium-sized enterprises (SMEs) and marketing agencies connect to and manage their advertising platforms more efficiently. We act as both a data controller (for account and usage data) and, where applicable, a data processor (when handling advertising data on behalf of our business clients).
References to “AdTecher”, “we”, “us”, or “our” in this policy refer to the AdTecher extension and its operating company. References to “you” or “your” refer to any individual or business using the extension.
2. What Data We Collect
When you install and use the AdTecher extension, we may collect the following categories of data:
2.1 Account and Identity Data
- Name and email address used to register your AdTecher account
- Company or agency name and billing details
- Login credentials (stored in encrypted form; passwords are never stored in plain text)
2.2 Ad Platform Credentials and Tokens
- OAuth tokens and API credentials used to connect your ad platform accounts (e.g. Google Ads, Meta Ads, LinkedIn Campaign Manager, Microsoft Advertising)
- These tokens are encrypted at rest and in transit and are used solely to perform actions you authorise within the extension
2.3 Advertising and Campaign Data
- Campaign names, budget figures, performance metrics, and audience data retrieved from connected ad platforms on your behalf
- This data is processed only to provide the AdTecher service and is not used for any other purpose
2.4 Browser and Technical Data
- Browser type and version, operating system, and extension version number
- IP address and approximate geographic region (country and city level)
- Error logs and crash reports to help us diagnose and fix technical issues
2.5 Usage Data
- Feature interactions within the extension (e.g. which ad platforms are connected, which tools are used)
- Session timestamps and frequency of use
We do not collect browsing history, personal web activity, or any data from websites you visit outside of ad platform interfaces.
3. How We Use Your Data
We use the data we collect for the following purposes, each supported by a lawful basis under UK GDPR:
3.1 Providing the Service (Contractual Necessity)
- Authenticating your account and connecting to your ad platforms
- Retrieving, displaying, and managing your advertising campaign data as instructed
- Processing payments and managing your subscription
3.2 Improving AdTecher (Legitimate Interests)
- Analysing aggregated, anonymised usage patterns to identify bugs and improve features
- Monitoring extension performance and infrastructure reliability
3.3 Communications (Legitimate Interests or Consent)
- Sending transactional emails such as account confirmations, password resets, and billing notices (legitimate interests)
- Sending product updates, new feature announcements, or marketing communications only where you have given explicit consent; you may unsubscribe at any time
3.4 Legal Compliance
- Complying with applicable laws, regulations, and lawful requests from public authorities
- Detecting, investigating, and preventing fraudulent or unauthorised access
4. Ad Platform Connections
AdTecher connects to third-party advertising platforms on your behalf. By authorising a connection, you instruct us to access and act on data within those platforms according to your directions. Key points:
- We only request the minimum permissions necessary to perform the functions you activate
- OAuth tokens are stored securely and can be revoked at any time from within the extension or directly from the ad platform's own settings
- We do not sell, share, or use your advertising data to train machine learning models or for cross-client analysis
- Each ad platform (e.g. Google, Meta) has its own privacy policy governing how they process your data and we encourage you to review these separately
5. Data Sharing and Third Parties
We do not sell your personal data. We share data only in the following limited circumstances:
5.1 Service Providers
We engage trusted third-party processors who assist us in operating AdTecher, including cloud hosting providers, payment processors, and customer support tools. All processors are bound by data processing agreements and are required to handle data only as instructed by us.
5.2 Legal Requirements
We may disclose data where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of AdTecher, our users, or the public.
5.3 Business Transfers
If AdTecher is involved in a merger, acquisition, or asset sale, your data may be transferred to the new entity. We will notify you via email and/or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
- Account data is retained for the duration of your subscription and for up to 3 years thereafter for legal and billing purposes
- Ad platform tokens are deleted promptly upon disconnection or account deletion
- Technical logs and error data are retained for up to 12 months
- Anonymised, aggregated analytics data may be retained indefinitely as it cannot identify you
You may request deletion of your account and associated data at any time (see Section 8).
7. Data Security
We take the security of your data seriously and apply appropriate technical and organisational measures, including:
- Encryption of all data in transit using TLS 1.2 or higher
- Encryption of sensitive data (including OAuth tokens and credentials) at rest using AES-256
- Role-based access controls limiting internal access to personal data
- Regular security reviews and vulnerability assessments
No method of transmission over the internet is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours, as required by UK GDPR.
8. Your Rights Under UK GDPR
As a data subject, you have the following rights. To exercise any of them, please contact us at the details in Section 11:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to ask us to correct inaccurate or incomplete data
- Right to erasure — to request deletion of your data, subject to legal retention obligations
- Right to restriction — to ask us to limit how we process your data in certain circumstances
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making — AdTecher does not make solely automated decisions that produce legal or similarly significant effects
We will respond to all valid requests within one calendar month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk if you believe we have not handled your data lawfully.
10. International Data Transfers
AdTecher primarily stores and processes data within the United Kingdom and European Economic Area. Where we engage service providers based outside the UK/EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (SCCs), to ensure your data receives an equivalent level of protection.
11. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact us:
We aim to respond to all enquiries within 5 business days.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via the extension interface or by email at least 14 days before the changes take effect. The “Last updated” date at the top of this document will always reflect the most recent revision.
Your continued use of AdTecher after the effective date of any changes constitutes your acceptance of the revised policy.