This policy explains what personal data Adhand collects, why, who we share it with, how long we keep it, and the choices you have. Adhand is a service at adhand.ai and in our mobile and web apps that makes short video ads for apps and websites.
1. Who we are
Adhand is operated by Ballmer Peak Applications LLC, a Delaware limited liability company, at 8 The Green, STE B, Dover, DE 19901, United States ("Adhand", "we", "us"). We are the controller of the personal data described here, except where we say we act for you (see section 3).
- Privacy contact: support@adhand.ai
Our payments are handled by Paddle.com Market Limited and its affiliates ("Paddle"), our reseller and Merchant of Record. Paddle is an independent controller of the payment data it collects (section 5).
2. What we collect
Account and sign-in
- Name, email address and profile picture, from you or from Google or Apple when you use them to sign in.
- A password hash if you sign in with email and password. We never store your password in readable form.
- One-time sign-in codes sent by email. A code expires after 5 minutes.
- A guest account if you try Adhand without signing up. A guest account is a temporary identity with its own workspace.
- Session records: when you signed in, when the session expires, your IP address and your browser or device type (user agent).
- If your company uses single sign-on, the identity details your identity provider sends us (usually name and email).
Workspaces and teams
- Workspace names, members and their roles (owner, admin, member), invitations (including the invitee's email address), project membership, and plan and seat settings.
- An audit log of important actions in a workspace (invitations, removals, role and plan changes, unlocks, top-ups, exports, company sign-in changes), each with who did it and when. Workspace owners and admins can read it.
The apps and sites you give us
- Android app builds (APK) and iOS builds (.ipa) you upload, and details read from them (package or bundle name, display name, version). We encrypt builds at rest.
- Web addresses you enter for web apps you want us to record.
- Test account details you give us so we can sign in to your app (for example a username and password). We store them sealed with an encryption key, bound to the app they belong to.
- The app profile: the features, screens and flows we find when we scan your app, and notes you add.
Recordings and media
- Screen recordings we make by running your app on a cloud phone (a real device in AWS Device Farm) or in a cloud browser, including where taps and clicks happened. These recordings show whatever your app shows on screen, including any data in your test account. Please use test data, not real customer data.
- Media you upload: your own footage, screenshots, B-roll, audio and voice recordings. If you film on your phone through Adhand, the app asks for camera and microphone permission.
- Media we generate for you: images, video clips, voiceovers, music, sound effects, optional AI presenter videos, edit decisions, captions and the finished ads in each version and size.
- Descriptions and transcripts we create for every media file: a short description, key frames and, for audio and video, a transcript of speech.
- Notes, stars and marks you put on cuts.
Chats with the producer
- Everything you and the Adhand producer (an AI assistant) say to each other, the tools it runs and the approvals you give. Each teammate has their own conversation.
Payments and wallet
- Your workspace's wallet balance and a ledger of every top-up, charge, reversal and refund, with the workspace, ad, amount, time and who made it.
- From Paddle: transaction identifiers, the product bought, the amount and currency, and refund and chargeback events. We do not receive or store your card number or other payment instrument details. Paddle collects those.
Support
- When you send a support case from the app or email us, we receive your message, your account details, and, if you choose to attach it, the ad's versions, media list and the last lines of your chat with the producer so a person can review the problem.
Notifications
- Push notification tokens for your devices, and Live Activity tokens on iOS, so we can tell you when an ad is ready or needs your approval.
Connected tools (MCP)
- If you connect an outside tool such as Claude, Cursor or Codex to Adhand, we store the connection (the client's name and web address, the workspace and project it can use, your spending limit for it, access and refresh tokens) and a record of what its calls spent.
Usage and analytics
- Mobile apps: the current mobile apps send no product analytics.
- Marketing site (adhand.ai): it sets no cookies and runs no analytics. It stores your light or dark choice in your browser, and loads its fonts from Google Fonts, so Google receives your IP address when a page loads.
- Web app: we use PostHog for page-view counts and, only if you accept, session recordings. Until you accept our cookie banner, PostHog runs without cookies, keeps its data in memory only, counts anonymous page views and does not record sessions. If you accept, it sets cookies and local storage and records your session with all form inputs masked. If you decline, it stops capturing. You can change your choice in Settings.
- Error logs and operational metrics kept by our hosting providers.
We do not knowingly collect special categories of data (such as health or biometric data) and do not use voices or faces to identify anyone. We do not offer voice cloning. If you upload a recording of a person or choose a portrait for an AI presenter, you are responsible for having that person's permission (see our Terms and Acceptable Use Policy).
3. When we act on your behalf
If you use Adhand for work, the content in your workspace (your app builds, recordings, test accounts, media and chats) may include personal data about your own customers or staff. For that content you are the controller and we are your processor. A data processing addendum is available on request at support@adhand.ai.
4. Why we use your data, and the legal basis
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Create and secure your account, sign you in | Account, session, sign-in data | Contract |
| Run the service: record your app, produce, render and store your ads | App builds, test accounts, recordings, media, chats, versions | Contract |
| Take payment, keep the wallet and ledger, handle refunds | Wallet, ledger, Paddle identifiers | Contract; legal obligation (accounting) |
| Send service emails and push notifications | Email, push tokens | Contract; legitimate interests |
| Check apps for content we will not advertise, prevent abuse and fraud, enforce our rules | Screens of your app, usage and spending records, account and session data | Legitimate interests (keeping the service safe and lawful) |
| Support and fixing problems | Support cases, attached project data | Contract; legitimate interests |
| Measure web traffic and improve the website | PostHog data | Consent (cookies and session recordings); legitimate interests (cookieless counts) |
| Keep accounting and audit records | Ledger, audit log | Legal obligation; legitimate interests |
We do not sell your personal data and do not use it for advertising profiles. We do not use your content to train our own models; we have none. Our AI providers handle content under their own terms. Anthropic's commercial terms state that it may not train its models on customer content from its services, and its documentation says it automatically deletes API inputs and outputs within 30 days, with exceptions its documentation lists, such as longer-retention services, an agreement to the contrary, usage-policy enforcement and legal compliance. Runware's terms state that it will not use customer material to train its own models and does not retain outputs on a long-term basis. ElevenLabs' terms and privacy policy allow it to use content to improve its services and train its models unless the account holder opts out, so we promise nothing about ElevenLabs beyond its own terms.
Automated content check: when you upload an app, an AI model looks at its first screens and decides whether the app is one we will advertise (see the Acceptable Use Policy). A refusal shows you a fixed reason, and you can contact us at support@adhand.ai to ask a person to look again.
5. Who we share data with
We use the service providers below ("subprocessors"). Each processes data only to provide its part of Adhand.
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Paddle (Merchant of Record) | Sells and bills, handles tax, receipts, refunds, fraud checks | Name, email, billing details, payment data, transactions. Paddle is an independent controller; see Paddle's privacy notice | Global |
| Railway | Hosts our API | All account and service data in transit and in operation | United States (us-east) |
| Turso | Our database | Accounts, workspaces, chats, ledger, metadata, sealed test accounts | United States (AWS us-east-1) |
| Backblaze (B2) | Stores files: app builds (encrypted), uploads, recordings, media, finished ads | Your files | United States (us-east-005) |
| Trigger.dev | Runs our background tasks: recording, screening, generation, rendering | Files and data being processed | Chosen by Trigger.dev; see its privacy policy |
| Amazon Web Services | AWS Device Farm runs your app on real phones; Remotion Lambda renders video; AWS also underlies other providers | Your app build while a recording runs, screen recordings, media being rendered | United States (Device Farm us-west-2, Lambda us-east-1) |
| Anthropic | AI models for the producer, the app scan, content check and media descriptions | Your chats, app screens, frames and descriptions of your media | United States |
| Runware | Generates images, video clips and AI presenter videos | Prompts, reference images, portraits and audio you chose | United States, Germany and Romania, as Runware's terms state |
| ElevenLabs | Generates voiceovers and transcribes speech | Scripts, and audio of uploaded media | United States, as ElevenLabs' privacy policy states |
| Resend | Sends our email (sign-in codes, invitations, account notices) | Your email address and the message | United States |
| PostHog | Web analytics and, with consent, session recordings | Web usage data, IP address | Chosen by PostHog; see its privacy policy |
| Expo (EAS) | Delivers push notifications and app updates; hosts the web app | Push tokens and notification text | United States |
| Google Firebase Cloud Messaging and Apple Push Notification service | Deliver notifications to Android and iOS devices (Apple's service is also used directly for iOS Live Activities) | Push tokens and notification text | Global |
| Google and Apple | Sign-in, if you choose them | Name, email, profile picture | Global |
We also share data:
- With other people in your workspace, as your role and project access allow. Admins can see the audit log and every project.
- With your identity provider, if your workspace uses company sign-in.
- With professional advisers (lawyers, accountants, insurers) under confidentiality.
- With authorities when the law requires, or to protect rights, safety and the service.
- In a business transfer, such as a merger or sale, with notice to you.
Links to finished ads are signed web addresses. Anyone who holds a media link can open it until it expires (one to two weeks), even if the person who got it later leaves the project. Do not share a link with people you would not share the file with.
6. International transfers
We and our providers are mostly in the United States. If you are in the UK or European Economic Area, your data is transferred to countries without an EU or UK adequacy decision. We rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or an adequacy decision (for example the EU-US Data Privacy Framework for certified providers), as applicable. Contact us for a copy.
7. How long we keep data
| Data | How long |
|---|---|
| Account and workspace content | Until you or the workspace owner delete it (section 8) |
| Uploaded app build (APK or .ipa) | Deleted 30 days after its last use (upload, screening or recording), earlier when a newer build replaces it or the workspace is deleted. Deleted from our bucket in every stored version. A copy placed on Device Farm for a run is deleted when the run ends |
| App test account details | Deleted when the app is removed or archived, or the workspace is deleted |
| Run list entries (progress of recording, rendering and so on) | Removed 30 days after the run ends |
| Ad versions, recordings and media | Kept while the workspace exists |
| Files no longer used by any version | Removed by clean-up routines. Our storage provider may keep hidden earlier versions of a file for a limited time after it is deleted |
| Signed media links | Valid one to two weeks |
| Sign-in codes | 5 minutes |
| Sessions | Until they expire or you sign out. MCP refresh tokens last up to 30 days |
| Render working files on Remotion's bucket | Deleted when the render finishes, and expire after a day if the task fails. Render logs are kept 14 days |
| Operational health snapshots | 35 days |
| Guest accounts | A guest with no session used for 30 days is deleted with their workspace and files |
| Wallet ledger and audit log | Kept for accounting and security. When an account is deleted these rows stay, with the person's identity removed |
| Support cases | Kept until the account or workspace they belong to is deleted |
| Web analytics (PostHog) | For as long as needed to measure web traffic, then deleted |
| Paddle's records | Under Paddle's own policy and tax law |
8. Deleting your account and downloading your data
- Download my data. In the app you can export a zip of your account data: your profile and settings, the workspaces you belong to, your producer chats, the ads, versions and uploads you made (with the files), your notes, support cases, requests and wallet entries you made. It does not include your password hash, sessions, or other people's data.
- Delete my account. In Settings you can delete your account. We start a 30-day grace period. If you sign in again within it, the deletion is cancelled. When it ends we delete your account's rows and files. A workspace you alone belong to is deleted with you. If you own a workspace with other people, you must pick the next owner first. Money left in a deleted workspace's wallet is lost, so spend it, or ask us about a refund under our Refund Policy before you delete.
- Ledger rows stay for accounting, with your identity removed.
- Contact support@adhand.ai if you cannot use these tools.
9. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, take it with you (portability), withdraw consent at any time, and complain to your data protection authority (in the UK, the Information Commissioner's Office; in the EU, your local authority). We answer within one month. Residents of California and some other US states have similar rights to know, delete, correct and opt out of sale or sharing; we do not sell or share personal data for cross-context advertising. We will not discriminate against you for using your rights. Write to support@adhand.ai. We may ask you to verify who you are first. For data in a workspace you do not control, we may direct you to the workspace owner.
10. Security
We encrypt data in transit, encrypt app builds at rest with keys we hold, seal test account details, restrict staff access, give each customer workspace its own access rules, and cap what any automated tool can spend. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.
11. Children
Adhand is for businesses and is not meant for people under 18. We do not knowingly collect data from children. If you think a child gave us data, write to support@adhand.ai and we will delete it.
12. Cookies
On the web app, essential storage keeps you signed in and remembers your cookie choice. Analytics cookies and session recording happen only after you accept the banner (section 2).
13. Changes
If we change this policy in a way that matters, we will post the new version here, update the date, and tell account holders by email or in the app before it takes effect when the change is significant.
14. Contact
Ballmer Peak Applications LLC, 8 The Green, STE B, Dover, DE 19901, United States. Email support@adhand.ai.
Questions about this policy: support@adhand.ai