Privacy Policy

1. Who We Are

ADExhibit ("we", "us", "our") is a web-based platform for previewing, validating and optimizing HTML5 banner ad creatives. Our service is available at adexhibit.com.

For any privacy-related questions, contact us at: privacy@adexhibit.com

2. What Data We Collect

Account data

When you create an account we collect your name, email address and password (stored as a bcrypt hash — we never store your plain-text password).

Files you upload

We store the HTML5 ZIP files you upload in order to display previews, run validations and generate shareable links. Files are stored on our servers and are only accessible to you and anyone you share a preview link with.

Payment data

Payments are processed by Lemon Squeezy. We do not store your card details. We receive a confirmation of payment, your subscription plan and the email address used at checkout.

Usage data

We collect basic usage information such as pages visited, actions taken within the app, browser type and IP address. This is used to improve the platform and troubleshoot issues.

Cookies

We use cookies to keep you logged in and to understand how the platform is used. See our Cookie Policy for full details.

3. How We Use Your Data

• To provide and operate the ADExhibit platform
• To authenticate your account and keep it secure
• To process payments and manage your subscription
• To send transactional emails (verification, password reset, billing receipts)
• To improve and debug the platform based on usage patterns
• To comply with legal obligations

We do not sell your data. We do not use your data for advertising purposes.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your data under the following legal bases:

• Contract — processing necessary to provide the service you signed up for
• Legitimate interests — improving the platform, preventing fraud, security monitoring
• Consent — optional analytics cookies (you can withdraw consent at any time)
• Legal obligation — complying with applicable laws

5. Data Sharing

We share data with a limited number of third-party service providers necessary to run the platform:

• Lemon Squeezy — payment processing and subscription management
• OrangeHost — server and database hosting

All third parties are required to handle your data securely and only for the purpose of providing their service to us. We do not share your data with any third parties for marketing purposes.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete all associated data including uploaded files, campaigns and clients within 30 days.

Payment records may be retained for up to 7 years to comply with financial and tax regulations.

7. Your Rights (GDPR)

If you are in the EEA or UK, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to restrict processing of your data
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — withdraw consent for cookie-based analytics at any time

To exercise any of these rights, email us at privacy@adexhibit.com. We will respond within 30 days.

8. Data Security

We take security seriously. All data is transmitted over HTTPS. Passwords are hashed using bcrypt. Access to production systems is restricted to authorised personnel only.

While we take reasonable precautions, no system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@adexhibit.com.

9. International Transfers

Our servers are located in the EU. If you access ADExhibit from outside the EU, your data may be transferred to and processed in EU countries. We ensure appropriate safeguards are in place for any international transfers.

10. Children's Privacy

ADExhibit is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email.