Privacy Policy

AdSpy Pro ("we", "us", or "our") operates the AdSpy Pro Chrome Extension and the AdSpy Pro web application available at adspypro.com (collectively, the "Service"). This Privacy Policy explains what data we collect, why we collect it, how we store and protect it, and how it may be shared. By using the Service you agree to this policy.

2.1 Chrome Extension

The extension collects and processes the following data:

• Google Search URLs and domain names — when you perform a Google search, the extension reads the page to extract domain names visible in the results. These domains are sent to our backend to look up publicly available metrics (domain authority, estimated traffic, domain registration date). The full search query or page content is never transmitted.
• Google Shopping ad URLs — the extension reads advertiser domains from Google Shopping panels solely to annotate results. No ad creative content is stored.
• Facebook Ads Library page data — when you visit facebook.com/ads/library, the extension reads ad metadata (advertiser name, spend, creative type) rendered on that page and may forward it to our backend for storage in your personal spy library. This data is associated with your account and visible only to you.
• Authentication token — a Clerk-issued session token is stored in browser storage to authenticate API requests. We never store your password.
• Extension settings and preferences — stored locally inchrome.storage.local and never sent to our servers.

2.2 Web Application

When you create an account or use the web app we collect:

• Account information — email address, name, and any profile data provided during sign-up (managed by Clerk).
• Billing information — payment method details are processed directly by Stripe. We store only a Stripe customer ID; we never see or store full card numbers.
• Usage data — pages visited, features used, and actions taken within the web app, used to improve the Service.
• Saved ad library entries — Facebook ads you choose to save to your spy library, stored in our database linked to your account.

2.3 Data We Do NOT Collect

• Browsing history outside of Google Search and facebook.com/ads/library.
• Keystrokes, form inputs, or passwords.
• Personal data of third parties whose ads appear in search results.
• Any data from pages not listed above.

• To display domain metrics (authority, traffic, age) alongside Google search results.
• To build and display your personal Facebook ad spy library.
• To authenticate your account and enforce subscription entitlements.
• To process payments via Stripe.
• To operate, maintain, and improve the Service.
• To respond to support requests.
• To comply with legal obligations.

We do not use your data for advertising, sell it to data brokers, or use it to build advertising profiles about you.

Data is stored in Supabase (PostgreSQL), hosted on servers in the United States. Domain metric lookups are cached locally in your browser's IndexedDB for up to 7 days to reduce repeated network requests; this cache contains only publicly available domain metadata and no personal information.

Account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at the address below. We will process deletion requests within 30 days.

Aggregated, anonymized usage statistics may be retained indefinitely.

We share data only in the following limited circumstances:

• Service providers — Clerk (authentication), Stripe (payments), Supabase (database), and Cloudflare (edge networking) receive data as necessary to provide the Service. Each provider is bound by their own privacy policies and data processing agreements.
• Domain metric lookups — to resolve domain authority, traffic estimates, and registration dates, domain names (not your identity) are sent to our Cloudflare Worker backend, which queries third-party RDAP/WHOIS registries and SEO data APIs. These queries contain no personally identifiable information.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of AdSpy Pro, our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify affected users before data is subject to a different privacy policy.

We do not sell, rent, or trade your personal information to any third party.

The extension requests the following Chrome permissions and uses them solely as described:

The web application uses cookies set by Clerk to maintain your authenticated session. These are first-party, session-functional cookies and are not used for advertising. The extension does not set any cookies on third-party websites.

The Service is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at privacy@adspypro.com. We will respond within 30 days.

We use industry-standard security measures including TLS encryption in transit, role-based access controls, and encrypted secrets management. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions to protect your data.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will notify you by email or via a notice in the extension or web app before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us: