# Privacy policy This policy explains how Adnetic handles personal data on adnetic.org, the dashboard and the APIs. It covers the customers who use Adnetic and the people whose public posts appear in the data. Adnetic **does not sell data**, runs no ads and uses no tracking tools. Updated: 2026-10-14 ยท https://adnetic.org/en/privacy/ ## Scope and who is responsible Adnetic (adnetic.org, "we") is responsible for account data and the data needed to run the service. For the data inside a campaign (posts, leads, replies), the customer decides the purpose: whom to find and what to say. Adnetic processes that data on the customer's instructions, within the service's safety limits. This policy applies Vietnam's Personal Data Protection Law No. 91/2025/QH15 and Decree 356/2025/ND-CP. ## What we collect Data by category: | Category | Data | Source | | --- | --- | --- | | Account | Name, email, username, role, workspace. Passwords are stored only as hashes. | You, or your workspace admin when they add you | | Google sign-in | Google account ID, email, name | Google, when you choose "Continue with Google" | | Sign-in sessions | IP address, browser, operating system, sign-in time, failed password attempts | Recorded automatically when you sign in | | Workspace | Campaigns, keywords, reply templates, ad links, product and competitor profile for AI SEO, notification email or webhook | You | | Connected platforms | Facebook, Instagram and Threads access tokens; Discourse forum API keys | You, when you connect them | | Billing | Plan, Stripe customer and subscription IDs, payment status. Adnetic never receives card numbers. | Stripe | | Activity log | Who created a campaign, who approved or rejected a reply, who changed the plan or a password, and when | Recorded automatically | | Public posts | Text of public posts and comments, username, display name, profile URL, follower count, engagement counts, post URL | The [supported platforms](https://adnetic.org/en/#platforms), public content only, per customer campaign | | AI SEO | Questions, answers and cited sources from ChatGPT, Gemini, Claude and Grok | Those AI tools, when you run a check | ## How we use it - **To provide the service:** find posts that match a campaign, classify intent, draft replies for you to approve, post approved replies, run AI SEO. - **Sign-in and security:** authentication, a temporary lock after repeated wrong passwords, and letting you see and end your sessions. - **Safety:** enforcing opt-out requests and the keyword blocklist across all customers, rate limiting, preventing abuse. - **Billing and the limits** of your plan. - **Support** when you contact us, and **service notices** such as changes to the terms or incidents. We do not sell or rent data, do not use it for advertising, and do not use your data to train AI models. Your approvals and rejections of leads are used only to measure the accuracy of that same campaign. ## If your post shows up in Adnetic Adnetic reads public content only. We never log in to read private content, and for forums we respect each site's robots.txt and terms. A post that matches a campaign becomes a lead in that customer's workspace. The customer may reply publicly once a person approves the reply, and replies always carry an ad label. You can ask not to be contacted (opt out) as [described here](https://adnetic.org/en/safety/#opt-out), or by emailing [support@adnetic.org](mailto:support@adnetic.org) with the platform and your account. The request applies to every Adnetic customer: your new posts are skipped before classification even runs. If you also want posts we already stored to be deleted, say so in the email. ## Third parties that process data Parties that process data on our behalf: | Party | Role | Data they receive | | --- | --- | --- | | Cloudflare | Serves the website and dashboard, DNS, attack protection | IP address and HTTP request details | | OVHcloud | Servers for the services, databases and the sign-in system | The data stored on those servers | | Google | Google sign-in (if you choose it); Google Fonts | The Google account details you agree to share; your IP address when fonts load | | OpenAI, Google (Gemini), Anthropic (Claude), xAI (Grok) | Answering and grading AI SEO questions; AI intent classification when a campaign turns it on | AI SEO questions; product name, description, strengths and competitors; the text of posts to classify. No account details. | | Stripe | Payments for paid plans | Email, plan, and the payment details you enter at Stripe | | Meta (Facebook, Instagram, Threads), Discourse forums | Posting replies you approved, through official APIs | The reply text and the access token you granted | | Email delivery provider | Sending notifications, if you turn on email notifications | The recipient address and the notification text | These parties may run servers outside Vietnam, so data may be transferred and stored abroad. Beyond them, we disclose data only when the law requires it. ## How long we keep it - **Account, workspace, leads, AI SEO results, activity log:** kept while the workspace is active. When you ask us to delete them, we do so within 30 days, except billing records that accounting and tax law require us to keep. - **Sign-in sessions:** expire after 30 minutes of inactivity. With "Remember me", after 30 days without use. Signing out ends the session. - **The opt-out list:** kept indefinitely, since that is the only way to keep honouring the request. ## Cookies and browser storage The adnetic.org website uses no tracking cookies, analytics or ads. The dashboard keeps your sign-in session in browser storage: localStorage when you choose "Remember me", sessionStorage otherwise. It is removed when you sign out. Cloudflare may set technical cookies to detect bots. ## Security - Every connection uses HTTPS. - Passwords are hashed by the sign-in system (Keycloak) before they are stored; Adnetic never stores readable passwords. Changing a password requires the current one. - Accounts are locked temporarily after repeated wrong passwords. - Data is separated by workspace, with role-based access: admin, reviewer, viewer. No system is perfectly secure. If a breach exposes data that affects you, we will notify you and the competent authorities as the law requires. ## Your rights Under personal data protection law you have the right to be informed about the processing of your data; to consent or withdraw consent; to access and get a copy of your data; to correct or delete it; to restrict or object to processing; and to complain, report or take legal action. - **Edit your name, change your password, see and end sessions:** on the Account page of the dashboard. - **Get a copy of your data, delete your account or workspace, withdraw consent:** email [support@adnetic.org](mailto:support@adnetic.org) from the address on the account. - **If your posts are in the data:** see the [opt-out section](#public-posts) above. We may need to verify that you are the data subject before acting on a request, and we answer within the time limits set by law. ## Children Adnetic is a business tool and is not meant for anyone under 18. We do not knowingly collect children's data. ## Changes to this policy When this policy changes, the "Updated" date at the top changes with it. For significant changes, we tell workspace admins in advance. ## Contact Questions or requests about personal data: [support@adnetic.org](mailto:support@adnetic.org).