Privacy Policy
This policy explains what data AdGen (operated by Sikasio, at adgen-api.sikasio.com) collects, why, and what happens to it. The short version: we collect the minimum needed to run a campaign-generation API, we don't sell your data, and hosted assets are not meant to be kept forever — each plan has a retention window after which they may be removed.
1. What we collect
- Account data — your name, your email address, and a salted hash of your password. We never store the password itself.
- API usage records — one entry per credit charge or refund (which action, how many credits, when, which key) so your monthly allowance, plan enforcement, and dashboard usage chart can be computed. These records are what your billing is based on, so we keep them for billing and audit purposes for as long as your account exists. They record what was generated, not the content itself.
- Operational logs — running the service produces technical request and error logs (which can include your IP address) at our servers and our hosting and content-delivery providers. They exist for debugging, security, and abuse prevention only; we do not use them to profile you or to build advertising audiences.
- Briefs and generated assets — the campaign briefs, brand details, and reference material you submit are processed to produce your copy, images, and videos. Generated assets are stored as hosted URLs on our content-delivery domain, subject to a retention window that depends on your plan (7 days on Free, 30 on Starter, 90 on Pro), after which they may be removed.
- Billing data — payments for paid plans are handled entirely by Polar (polar.sh) as merchant of record. We never see or store your card details; we receive only your subscription status and plan.
2. What we use it for
To provide the service (authenticate keys, enforce credits and rate limits, generate and host your assets), to send transactional email (verification codes, password resets, account notices), to prevent abuse, and to comply with legal obligations. We do not use your briefs or generated assets to train our own models, we do not send marketing email without your consent, and we do not sell or rent your personal data to anyone.
3. Cookies
The customer portal sets a single session cookie so you stay signed in. There are no advertising, analytics, or third-party tracking cookies.
4. Sharing
We share data only with the processors needed to run the service: our hosting and content-delivery providers, the AI model providers that turn your briefs into copy, images, video, and narration, our email service provider (to deliver account emails), the captcha provider that protects our sign-up and sign-in forms, and Polar for payments. Each receives only what it needs. We may disclose data if legally required.
5. Retention
- Account data — kept while your account exists.
- API usage records — kept while your account exists; they are the record of your billing periods.
- Operational logs — kept only for as long as they are useful for debugging, security, and abuse prevention.
- Hosted generated assets — may be removed after the retention window for your plan (7 days on Free, 30 days on Starter, 90 days on Pro).
Retention windows describe how long we undertake to keep something available, not a guaranteed deletion time. If you need an asset or a record removed sooner, ask us (see "Your rights" below) and we will remove it.
6. Your rights
You can ask us to export or delete the personal data we hold about you, or delete your account entirely, by emailing support@sikasio.com from your account address. We answer within 30 days. Depending on where you live you may have additional statutory rights (such as under the GDPR), which we honor.
7. Security
All traffic is encrypted in transit (TLS). Passwords are hashed with a memory-hard algorithm, API keys are stored only as hashes, session cookies are signed and HTTP-only, and access to production systems is restricted. No system is perfectly secure — if a breach affects your data we will notify you.
8. Changes
We may update this policy as the service evolves. Material changes will be announced by email or on the site, with the "Last updated" date above revised.
9. Contact
Privacy questions and data requests: support@sikasio.com.