Privacy Policy

Welcome to AdFluxa — the AI-powered advertising platform. Operated through app.adfluxa.ai, we are committed to protecting your privacy and personal data in accordance with the Saudi Personal Data Protection Law (PDPL). This policy explains how we collect, use, protect, and share your information.

2.1 Account Information

• Full name, email, and phone number
• Business name, industry, and city
• Business logo, website, and WhatsApp number
• Commercial Registration and VAT number (optional)

2.2 Campaign & Design Data

• Ad content (headlines, copy, images, CTAs)
• Targeting settings (age, location, interests)
• Budgets, schedules, and performance metrics
• AI-generated designs and reference images

2.3 Payment & Wallet Data

• Transaction history (top-ups, debits, refunds)
• Credit balance and usage history
• We do NOT store card details — payments handled by a SAMA-licensed gateway

2.4 Technical Usage Data

• IP address, browser type, operating system
• Login records and session timestamps
• Audit logs for security purposes

• Providing platform services: campaigns, designs, publishing
• Processing payments and managing credits
• Generating ad copy and visuals with AI
• Publishing campaigns on social media on your behalf
• Sending campaign performance notifications via WhatsApp or email
• Improving our services and developing new features
• Complying with legal and regulatory requirements

We share only the minimum data necessary with the following parties to operate the platform:

• We use AI to generate ad copy, design images, and suggest audiences
• All generated content is shown for your review and editing before publishing
• We make no automated financial decisions — deductions occur only after your approval
• You can always modify or reject any AI-generated content

• All communications encrypted via HTTPS/TLS
• API keys and passwords encrypted and stored securely
• HMAC-SHA256 verification for payment webhooks
• Rate limiting to prevent abuse
• Full audit trail for all financial and sensitive operations
• Input sanitization to prevent injection attacks
• Permission checks on every operation — users cannot access others' data

• We retain your data while your account is active
• Financial records are kept for 5 years per regulation
• Audit logs are retained for 1 year
• Upon account deletion, personal data is removed within 30 days — except as legally required

Under the Saudi Personal Data Protection Law (PDPL), you have the following rights:

• Access and view your personal data
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw your consent for data processing at any time
• Export your data in a portable format
• File a complaint with the relevant data protection authority

• We use session cookies only to maintain your login
• We save campaign drafts in localStorage to prevent losing your work
• We do not use third-party advertising or analytics tracking cookies

We may update this policy from time to time. We will notify you of any material changes via email or in-app notification at least 14 days before they take effect.

For any questions or requests related to privacy and data protection: