1. Controller
The controller for personal data processed via creativescout.ai and the CreativeScout app is the operator of CreativeScout, reachable at [email protected]. The operator's full legal details are being completed and will be published in the imprint shortly.
2. What we process
- Account data: your email address and login events, to provide your account (Art. 6(1)(b) GDPR).
- Billing data: subscription status and payment references. Payment details themselves (Klarna, PayPal) are processed by Stripe; we never see full payment credentials (Art. 6(1)(b) GDPR).
- Usage data: server logs (IP address, user agent, timestamps) for security and abuse prevention (Art. 6(1)(f) GDPR).
- Support: emails you send us, to answer them (Art. 6(1)(b) and (f) GDPR).
3. Processors we use
- Cloudflare (hosting and content delivery for the marketing site).
- Stripe (payment processing for Klarna and PayPal).
- Supabase (application database, hosted in an EU region).
- Postmark (transactional email, e.g. login and billing emails).
Each processor acts under a data processing agreement. Where data leaves the EU/EEA, transfers are protected by EU standard contractual clauses or an adequacy decision.
4. Ad data and its source
The advertising content you research in CreativeScout comes from the official Meta Ad Library, the transparency dataset Meta publishes under the EU Digital Services Act. We store ad metadata and facts (such as library IDs, ad texts, link URLs, page names, run dates and reach figures) and links to the original entries. We do not store ad media files, and we do not scrape profiles, private accounts or any non-public data. Ad transparency data describes advertisers (companies and pages), not the private browsing of individuals.
5. Browser extension
The CreativeScout browser extension only saves the specific ad you click onwhile you browse the Meta Ad Library yourself. For that one ad it captures: the library ID, the ad text, the link URL, the page name, the advertiser's public page ID, the run dates and the active status at the moment of saving. It performsno background collection, does not read other tabs, does not collect your browsing history and does not store media files. The captured ad data goes only to your own CreativeScout account. Uninstalling the extension stops all capture immediately.
The extension can also show you how long an ad has been running, filter the ads already rendered on your screen, and estimate spend from Meta's published EU reach figure. All of that happens locally in your browser tab; your filter settings and saved searches are stored on your own device and are never sent to us.
Downloads: when you click Download on a specific ad card, your browser saves that ad's video or image, and optionally a text file with the ad copy, to your own device. The file goes directly from Meta's servers to you. CreativeScout does not receive, proxy or store that media, and downloads never happen automatically or in bulk.
6. Cookies
The marketing site does not use analytics or ad-tracking cookies. The only client-side storage is functional (for example your language preference). Details are in ourCookie Policy.
7. Retention
Account and billing data are kept for as long as your account exists and afterwards only as long as statutory retention duties require. Server logs are kept for a short rolling window for security purposes.
8. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority. To exercise any right, email [email protected].
9. Changes
We will update this policy when our processing changes and adjust the date above. Material changes are announced to account holders.