Privacy Policy
This policy explains how Metro Source Co., Ltd., 228/61 Ruammit Pattana, Tarang, Bangkhen, Bangkok 10220, Thailand (“we”) handles personal data in connection with Admizar. For account and billing data we are the controller. For personal data inside the ad accounts you connect, our customer is the controller and we act as processor under our Data Processing Addendum.
Data we collect
- Account data: name, email address, profile image if you sign in with Google, language preference, workspace memberships and roles.
- Workspace data: workspace name, country, time zone, currency, rules, approvals and the change history.
- Ad platform data: ad account names and IDs, campaign names, statuses and budgets, and aggregated performance metrics (spend, impressions, clicks, conversions, conversion value, frequency). We do not request audience lists or data about individual people who saw your ads.
- Billing data: billing name, address, tax ID and subscription history. Card details are collected and stored by Stripe, not by us.
- Technical data: IP address, browser type and server logs, used for security and troubleshooting.
- Communications: messages you send to support.
How we use it and our legal bases
- To provide the Service you signed up for (performance of a contract).
- To bill you and meet tax and accounting duties (legal obligation).
- To secure the Service, prevent abuse and fix problems (legitimate interests).
- To send service emails such as sign-in links, alerts and billing notices (performance of a contract). We send product news only if you opt in, and you can unsubscribe at any time.
We do not sell personal data, do not use it for advertising profiles, and do not use Customer Data to train AI models.
Google user data
Admizar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Ads data only to show your campaigns, evaluate your rules and apply changes you approve. We do not transfer it to others except as needed to provide the Service, to comply with law, or as part of a merger with notice to you, and we do not allow humans to read it except with your consent, for security, or to comply with law.
Meta and TikTok data
Data from Meta and TikTok marketing APIs is used only to provide the Service to the workspace that connected it, and is deleted when you disconnect the account or delete the workspace. See data deletion.
AI providers
When you run the AI analyst, we send aggregated campaign metrics and your question to the providers you select (Anthropic, OpenAI and/or Google). We do not send personal data about your customers. Requests go through the providers' business APIs; under their published terms, API inputs are not used to train their models. If you add your own API key, your agreement with that provider applies.
Sharing
We share personal data only with service providers that help us run Admizar (our subprocessors), with the ad platforms you connect when you ask us to make changes, with professional advisers, and with authorities when the law requires it.
International transfers
We are based in Thailand and our providers operate in several countries, including the United States. Where data from the EU, UK or Switzerland is transferred, we rely on the European Commission's Standard Contractual Clauses and the UK addendum, or another lawful mechanism. Transfers from Thailand follow the Personal Data Protection Act B.E. 2562 (PDPA).
Retention
We keep account and workspace data while your account is active. When you delete a workspace, its ad platform tokens and data are deleted immediately and removed from backups within 35 days. Billing records are kept for as long as tax law requires (in Thailand, generally 5 years). Server logs are kept for up to 90 days.
Your rights
Depending on where you live, including under the GDPR, UK GDPR, Thailand's PDPA and US state privacy laws such as the CCPA, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. You can export your data and delete workspaces in Settings, or email privacy@admizar.com. We reply within 30 days. You may also complain to your local data protection authority.
Security
We use TLS in transit, AES-256-GCM encryption for stored platform tokens and keys, role-based access and audit logs. See our security page.
Children
Admizar is a business service and is not directed at anyone under 18.
Cookies
We use only essential cookies. See our cookie notice.
Changes and contact
We will post updates here and notify workspace owners of material changes. Contact: privacy@admizar.com, Metro Source Co., Ltd., 228/61 Ruammit Pattana, Tarang, Bangkhen, Bangkok 10220, Thailand.