Privacy Policy

AdLytics is a media intelligence platform operated by FYM Labs, LLC, an Illinois limited liability company ("we", "us", "our"). AdLytics helps marketing teams consolidate advertising data and measure cross-channel performance. This Privacy Policy explains how we collect, use, and protect data when you use AdLytics.

We collect the following categories of data:

• Account data: Name, email address, and organization name provided during sign-up via Clerk authentication.
• Advertising data: Campaign metrics, spend, impressions, conversions, and audience data fetched from connected ad platforms on your behalf.
• Usage data: Feature interactions, API call volumes, and error logs used to monitor service health and improve the product.
• Identity data (optional): Hashed customer identifiers for cross-channel attribution. These are tokenized using HMAC-SHA-256 and never stored as plain hashes.

Where GDPR applies, we process personal data under the following legal bases:

• Contract: To provide the AdLytics service you have subscribed to.
• Legitimate interests: To improve the platform, prevent fraud, and ensure security.
• Consent: For optional identity data processing (you control this via the Privacy settings page).

• Provide and operate the AdLytics platform.
• Generate attribution, halo analysis, and optimization reports.
• Monitor service reliability and security via Sentry error tracking.
• Send transactional communications related to your account and billing.

We do not sell your data to third parties.

Advertising metrics are retained for the duration of your subscription plus 90 days. Account data is retained until you request deletion. Identity tokens are erased on request via the Privacy settings page (GDPR Art. 17 erasure right).

We use the following sub-processors:

• Clerk — Authentication and user management
• Railway / Render — Cloud hosting (PostgreSQL, Redis, API)
• Stripe — Payment processing
• Anthropic — AI-powered insights generation
• Sentry — Error monitoring (PII masking enabled)

All data is encrypted in transit (TLS 1.2+) and at rest. Advertising credentials are encrypted using AES-256-GCM with per-workspace encryption keys. We apply differential privacy (Laplace mechanism) to identity query results to prevent individual re-identification.

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, email [email protected]. For identity data erasure, use the Privacy page in Settings.

For privacy questions or to submit a Data Subject Request, contact us at [email protected].