Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

replient.ai Software GmbH
Derflerstraße 27/1
4040 Lichtenberg, Austria
Email: office@replient.ai
Managing Directors: Markus Danninger, Thomas Danninger

2. What Data We Collect

When you use uplads.com, we may collect the following data:

• Account data: Name, email address, and password when you sign up.
• OAuth data: When you connect an advertising account (Meta/Facebook/Instagram, Google Ads and YouTube, TikTok, or Snapchat), we receive an access token and your ad account information. We never receive or store your password for these platforms.
• Ad account data: Campaign structures, ad set configurations, ad creatives, and performance metrics you access through our platform.
• Uploaded files: Creative assets (images, videos) you upload for ad launches.
• AI data: Prompts, selected ad account data, brand context, creative content, and generated outputs when you use AI features.
• AI billing data: Provider, model, token counts, estimated provider cost, credit reservations, and final credit usage.
• Support data: Your name, email address, account identifier, support messages, and files you choose to send through live chat.
• Usage data: IP address, browser type, pages visited, and timestamps collected automatically.

3. How We Use Your Data

• To provide and operate our ad launch platform.
• To create and manage ads on your behalf via the APIs of the advertising platforms you connect (Meta Marketing API, Google Ads API, TikTok Business API, Snapchat Marketing API).
• To upload video creatives you select to your own YouTube channel (as unlisted videos) so they can be used in Google Ads.
• To store and deliver your creative assets for ad creation.
• To provide AI-assisted copy, analysis, recommendations, and approved account actions.
• To calculate and display AI credit usage or provider cost estimates.
• To improve our services and fix technical issues.
• To comply with legal obligations.

4. Advertising Platform Data

4.1 Meta

Our app accesses Meta platform data through the Meta Marketing API. We request the following permissions:

• ads_management & ads_read: To create, manage, and read your ad campaigns, ad sets, and ads, including their performance and spend data.
• business_management: To access your business assets including product catalogs.
• pages_read_engagement & pages_show_list: To list and read your Facebook Pages for ad creation.
• instagram_basic: To access your linked Instagram business accounts.
• catalog_management: To access your product catalogs and product sets.

We only access data necessary to perform the services you request. We do not sell, share, or use your Meta data for any purpose other than providing our services to you.

4.2 Google Ads and YouTube

When you connect a Google account, our app accesses Google user data through the Google Ads API and the YouTube Data API. We request the following scopes:

• adwords: To list the Google Ads accounts you have access to, read your campaigns, asset groups and ad groups so you can choose where to launch, and to create asset groups and ads in the accounts you select.
• youtube.upload: To upload the video creatives you select to your own YouTube channel as unlisted videos, so they can be referenced by your Google Ads campaigns.
• youtube.readonly: To show you which YouTube channel is connected, so you can confirm that videos are uploaded to the correct channel.

Limited Use:uplads’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data solely to provide the features you request. We do not sell it, we do not transfer it to third parties except as necessary to provide those features or as required by law, we do not use it for advertising purposes of our own, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. Human access to this data occurs only with your explicit consent (for example when you ask our support team to look into a problem), for security purposes, or where required by law.

By uploading videos through uplads you also agree to the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.

4.3 TikTok and Snapchat

Where you connect a TikTok or Snapchat advertising account, we access your advertiser accounts, campaign structures and creative assets through the TikTok Business API and the Snapchat Marketing API for the same purpose: to let you select launch targets and to create the ads you configure. The same rule applies: we only access what is necessary for the services you request, and we do not sell or repurpose that data.

5. Data Storage & Security

Your data is stored on secure servers provided by Supabase (database and authentication) and Cloudflare R2 (file storage). OAuth tokens are encrypted using AES-256 encryption before storage. We implement industry-standard security measures to protect your data.

6. Data Sharing

We share your data only with the following third parties, solely to provide our services:

• Meta Platforms, Inc.: To create and manage ads on your behalf.
• Supabase: Database and authentication hosting.
• Cloudflare: File storage (R2) and content delivery.
• OpenAI and Anthropic: AI processing when you use the corresponding provider, either through uplads AI or your own API key.
• Chatwoot Inc.: Live chat and customer support (see section 15).
• Google Ireland Limited: Tag management, advertising measurement, and remarketing (Google Tag Manager, Google Ads - see sections 12-13).
• Meta Platforms Ireland Limited: Advertising measurement and remarketing via the Meta Pixel (see section 14).

We do not sell your personal data to third parties.

AI features and your own API key

When you use an AI feature, the content needed for your request may be sent to OpenAI or Anthropic. This can include prompts, ad copy, brand context, selected creative content, campaign structure, and performance data. With uplads AI, we use our provider account and deduct credits based on actual token usage. If you add your own API key, the selected provider processes and bills the request under your provider account and no uplads credits are used. We process this data to provide the requested AI feature (Art. 6(1)(b) GDPR) and to calculate usage, prevent abuse, and secure the Service (Art. 6(1)(f) GDPR).

Your own API key is encrypted before storage and is never sent to the browser after saving. We store usage metadata such as provider, model, token counts, estimated cost, and credit debits. AI inputs and outputs may also be stored in your uplads workspace where needed to provide chat history, audit history, or reusable brand context. OpenAI and Anthropic may process data outside the EEA under their applicable data-processing terms and transfer safeguards. See OpenAI's business data information and Anthropic's commercial data information.

7. Data Retention

We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us. Creative assets are deleted when you remove them from the platform.

8. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate personal data.
• Request erasure of your personal data.
• Restrict processing of your personal data.
• Data portability.
• Object to processing of your personal data.
• Withdraw consent at any time.

To exercise any of these rights, contact us at office@replient.ai.

9. Revoking Platform Access

You can disconnect any advertising platform inside uplads at any time under Configuration → Connections. Disconnecting deletes the stored access and refresh tokens for that platform.

You can also revoke our access directly at the platform. For Meta, use your Facebook Business Integrations settings. For Google (Google Ads and YouTube), use your Google Account permissions page. After revocation, we will no longer be able to access data from that platform.

10. Data Deletion

You can request complete deletion of your data by emailing office@replient.ai. We will process your request within 30 days and confirm deletion.

11. Cookies & Tracking Technologies

We use essential cookies required for authentication and session management. These are necessary for the operation of our platform (Art. 6(1)(f) GDPR).

In addition, we use marketing and analytics technologies (Google Tag Manager, Google Ads conversion tracking and remarketing, and the Meta Pixel - described in detail below). These set cookies or use similar technologies only where permitted under applicable law. Where required, they are used on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

12. Google Tag Manager

We use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager is a tag management solution used to integrate and manage measurement and marketing tags (such as Google Ads and the Meta Pixel) on our website. Google Tag Manager itself does not set cookies and does not collect personal data beyond what is technically necessary to load the configured tags (e.g. your IP address at the time of the request). The tags loaded through it are described in the following sections.

Further information: Google Tag Manager Use Policy and Google Privacy Policy.

13. Google Ads Conversion Tracking & Remarketing

We use Google Ads, an online advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads conversion tracking allows us to measure whether users who clicked on one of our ads perform certain actions on our website (e.g. signing up). For this purpose, Google sets a cookie on your device when you click on a Google ad. We do not receive any information that personally identifies you - only aggregated statistics.

We also use Google Ads remarketing, which allows us to show you ads based on your previous visits to our website. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can opt out of personalized advertising at adssettings.google.com. Further information: Google Privacy Policy.

14. Meta Pixel

We use the Meta Pixel, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). The Meta Pixel allows us to measure the effectiveness of our Facebook and Instagram ads (conversion tracking) and to show our ads to visitors of our website on Meta platforms (remarketing / custom audiences). The pixel collects, among other things, your IP address, browser information, and the pages you visit on our site, and may set cookies on your device.

We and Meta are jointly responsible for the collection and transmission of this data (joint controllership, Art. 26 GDPR); Meta is solely responsible for the subsequent processing. Data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can manage your ad preferences at facebook.com/adpreferences. Further information: Meta Privacy Policy.

15. Chatwoot Live Chat

We use Chatwoot to provide customer support on our public website and inside the authenticated uplads dashboard. Public visitors can use the chat without an uplads account and may choose to provide contact details. For logged-in users, we send the account identifier, name, and email address so support requests can be assigned correctly. The account identifier is cryptographically signed so Chatwoot can verify that the request belongs to the logged-in account. In both cases, Chatwoot processes the messages and attachments you choose to submit.

Processing is necessary to provide requested customer support and for our legitimate interest in operating reliable customer service (Art. 6(1)(b) and Art. 6(1)(f) GDPR). Chatwoot uses technically necessary browser storage and cookies to maintain the chat session. Chatwoot Cloud is operated by Chatwoot Inc. and may process data in the United States using the applicable safeguards for international data transfers.

Further information: Chatwoot Privacy Policy.

16. Children

Our service is not intended for children under 16. We do not knowingly collect data from children.

17. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through our platform.

18. Contact

If you have any questions about this privacy policy, contact us at:
office@replient.ai