Privacy policy

1. Who we are

Admetra GmbH is the data controller for the processing of your personal data.

We operate an AI-powered platform that analyzes video advertisements against Meta delivery requirements and advertising trends, providing campaign readiness reports and creative optimization recommendations.

2. What data we collect

2.1 Data you give us

• Name and work email address (for account creation)
• Password (stored hashed) or Google account identifier if you sign in with Google
• Brand name, brand URL, and industry niche (provided during onboarding)
• Videos or advertisement files you upload ("User Content")
• Payment information (processed by Stripe; we do not store full card details)

2.2 Data collected automatically

We use cookies and similar technologies, grouped into three categories. You decide which categories we may use; the choice is recorded in your browser and can be changed at any time from Settings → Privacy or by clearing site data in your browser.

• Essential - required for the site to function. Keeps you logged in (session cookies and JWT), remembers your language preference, and protects against fraud and abuse. Cannot be disabled. Examples: access_token, refresh_token, admetra_language.
• Analytics - help us understand how the product is used so we can improve it. We use PostHog (hosted in the EU). Data collected: pages visited, clicks, scroll depth, error reports, and a device-stable identifier (admetra_lead_id) used to measure retention. No advertising is performed with this data.
• Marketing - used to measure the performance of our advertising campaigns. We use Meta Pixel. Data collected: page views and signup conversions on our site. This data is shared with Meta to attribute ad spend.

Withdrawing consent does not affect the lawfulness of processing performed before withdrawal. We do not intentionally collect sensitive personal data (for example health, political opinion, or biometric data).

3. Why we process your data

We process your data for the following purposes and legal bases:

We do not sell personal data, and we do not use your uploaded videos to train AI models.

3.1 People who appear in third-party advertisements

Admetra collects and analyzes advertisements that companies ran publicly and that are published in public advertising transparency archives. Those advertisements sometimes show identifiable people, such as presenters or creators. Where we process that material, our legal basis is our legitimate interest in research, commentary, and market analysis of public advertising (Art. 6(1)(f) GDPR).

If you appear in an advertisement that we analyze and you do not want that material shown, you can object at any time by emailing info@admetra.ai with a link to the page. We will remove or suppress the material rather than asking you to justify the objection.

4. How long we keep your data

• Uploaded videos: deleted automatically after 7 days
• Account data: kept until you delete your account
• Payment and invoice records: retained for the duration required by tax and accounting laws (typically 10 years under German law)
• Contact messages: kept until your request is completed
• Technical logs: 30–90 days
• Backups: hosting provider backups may retain data for a limited time according to their retention cycles

5. Who we share data with

5.1 Service providers (processors)

Trusted vendors that support our operations, for example:

• Cloud hosting provider
• Stripe, Inc. (payment processing and subscription management)
• Google (authentication via Google OAuth, if you choose to sign in with Google)
• Email delivery provider
• Error logging tools
• Content delivery networks (CDNs)
• Analytics provider (if consent is given)

They process data only according to our instructions.

5.2 Legal requirements

We may share data with authorities if legally required to do so.

5.3 Business transfers

If our company is merged or acquired, data may be transferred to the new owner under GDPR protections. We never sell your data.

6. International data transfers

Some of our service providers (including Stripe and Google) are based in the United States or operate globally. When personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place:

• EU-U.S. Data Privacy Framework (where applicable)
• Standard Contractual Clauses (SCCs) approved by the European Commission

These safeguards ensure your data receives a level of protection equivalent to that within the EU.

7. Security

We use modern security measures to protect your data, including encryption, access controls, secure hosting, and data minimization. No system is perfect, but we take reasonable steps to protect your information.

8. Your rights under GDPR

You can request the following at any time:

• Access to your data
• Correction of inaccurate data
• Deletion of your data
• Download (portability) of your data
• Restriction of processing
• Objection to certain processing
• Withdrawal of consent (for consent-based processing)

To exercise your rights, email info@admetra.ai. You also have the right to file a complaint with any EU supervisory authority of your choice.

9. Cookies

We use necessary cookies for basic site functions and optional analytics cookies only if you accept them. Details are provided in our Cookie Policy.

10. Children

Our service is not intended for individuals under 16, and we do not knowingly collect data from children. If you believe a child has used our service, contact us so we can delete the data.

11. Changes to this policy

If we update this privacy policy, we will post the new version here. If changes are significant, we will notify you.

12. Contact

Admetra GmbH, Kameruner Str. 16, 13351 Berlin, Germany
info@admetra.ai