Privacy notice

This explains what the operator of Spy-to-Creative collects when you use Spy-to-Creative, why, and who else processes it. It is short because the service collects little.

What we collect

Your email address, because that is how you sign in. We never ask for a password.

What you type into the two fields: the competitor you paste and the description of your own product. We store both so you can see the job again.

What the job produced: the advertisements we found and the five drafts written for you.

Ordinary server logs kept by our host, which include IP address and browser, used to keep the service running and to investigate abuse.

We do not use advertising trackers or third-party analytics cookies. The only cookie we set is the one that keeps you signed in.

Where it goes

Running one generation means sending the competitor you pasted to Apify, which reads Meta's public Ad Library, and sending your product description plus the advertisements found to Anthropic, which writes the drafts. Those companies process it on our instructions and do not use it to train models.

These providers are based in the United States and the European Union, so your data is processed outside Brazil.

Payment data

Paddle collects and holds your card and billing details as merchant of record. We never receive the card number; we only learn that a subscription started, changed or ended.

Why we are allowed to do this

We process your data to provide the service you asked for (performance of a contract), to comply with tax and accounting law, and — for server logs and abuse investigation — because we have a legitimate interest in keeping the service working.

How long we keep it

Account and job data stay while your account is open. Ask us to delete your account and we remove your account, your jobs and the drafts within 30 days, except records we must keep for tax purposes. Server logs roll off within 30 days.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to hello@spytocreative.com and we answer within 30 days. If you are in Brazil the LGPD gives you these rights; if you are in the European Union or the United Kingdom, the GDPR does.

Changes

If this notice changes we update the date at the top, and tell you by email when the change is material.