Data & Privacy

Who is responsible

adcerebrum is run by me, Rafael Echavarria, personally, from Prague, Czech Republic. I am the controller of your personal data. Contact: hello@marketralph.com.

What I collect

• Account data: your email address and sign-in information. If you sign in with Google, I receive your email address and basic profile information from Google. Passwords are handled by the sign-in system and are never visible to me.
• Brief data: your campaign-planning inputs: product, audience, markets, campaign objective, budget, exclusions and destination URL.
• Blueprint data: the campaign blueprints generated from your briefs, including every version.
• Feedback and waitlist data: feedback you submit, and your waitlist entry if you join it.
• Usage data: your free-blueprint balance and when your blueprints were created.

Please don't include personal data about other people in your brief. adcerebrum doesn't need it.

Why I use it, and the legal basis

• To provide the service you request, including your account and generating and storing blueprints: necessary to perform the service you asked for.
• To keep the service secure and prevent abuse, including limited operational records: my legitimate interests.
• To contact you about access to adcerebrum and changes in its availability, if you join the waitlist: your consent, which you can withdraw at any time. The waitlist is not a general marketing list.
• To measure visits and advertising campaigns with Google Analytics and Google Ads: your consent, which you can withdraw at any time.

I don't sell your data. If you accept cookies, information about your visit is used to measure and improve adcerebrum's own advertising campaigns.

Who processes it for me

• Lovable builds and hosts adcerebrum and provides its backend. The backend project, including its database, is hosted in AWS eu-west-1 (Ireland, EU); sign-in runs within the same backend project. If a page fails with an error, error details and the page address are sent to Lovable so the problem can be diagnosed.
• Cloudflare delivers and protects the site. Like any network provider, it receives standard connection information such as your IP address.
• OpenAI generates your blueprint. Your brief is sent to the OpenAI API to generate the blueprint and run live web research. Search queries may be based on details in your brief, and your destination URL may be searched or visited. Requests are configured so that OpenAI does not store responses for later retrieval. OpenAI does not use API data to train its models by default, but may keep API inputs and outputs for up to 30 days for abuse monitoring.
• Google provides sign-in if you choose to sign in with Google. If you accept cookies, Google Analytics measures visits and Google Ads measures advertising campaigns.

Where it's processed

The adcerebrum database is hosted in Ireland, in the EU. Some service providers, including OpenAI and Google, may process data outside the European Economic Area. Where this happens, the provider's applicable contractual and legal safeguards govern the transfer.

Who can access it

Your blueprints aren't public and are only visible to your account in the app. As the operator, I can access account data and blueprints when needed for support, security and abuse prevention. Actions taken through the admin interface may be recorded for security and support purposes. Lovable, as the hosting and platform provider, can also technically access stored data.

Cookies and similar storage

Analytics and advertising cookies, only with your consent. If you accept, adcerebrum uses Google Analytics to measure visits and Google Ads to measure advertising campaigns. They set cookies such as _ga, _ga_<id> and _gcl_au, and send information about your visit to Google, such as the pages you view, your device and your approximate location. If you reject, or make no choice, nothing is loaded from Google. You can change your choice at any time with Cookie preferences in the footer; withdrawing consent removes these cookies from adcerebrum.

Necessary storage, always on:

• __cf_bm (Cloudflare): bot protection, necessary for security.
• __dpl: set by the hosting infrastructure. I'm confirming its exact purpose with the provider and will update this page when I have it.
• Your browser's local storage: keeps you signed in, saves an unfinished brief on your device, and remembers your cookie choice.

How long it's kept, and how to delete it

• Blueprints: kept until you delete them. Use Delete in My Blueprints, which permanently removes the blueprint and all its versions.
• Your account and its data: kept until you delete your account. Go to Profile → Privacy & Data → Delete my account. This permanently removes your account, blueprints, feedback and waitlist entry.
• Admin records about a deleted account: kept with your email address removed.
• Backups: deleted information may remain in infrastructure backups for a limited period before those backups are overwritten.
• OpenAI: up to 30 days, as described above.
• Google Analytics and Google Ads: cookies expire according to Google's settings or when you withdraw consent; analytics data is kept by Google according to the retention setting of adcerebrum's Google Analytics property.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format where that applies. You can export any blueprint as PDF or CSV yourself, delete blueprints and your account yourself, and withdraw consent at any time. For anything else, email hello@marketralph.com.

You also have the right to complain to a data protection authority. In the Czech Republic, that's the Úřad pro ochranu osobních údajů (www.uoou.gov.cz).

Changes

When this page changes in a way that matters, the date at the top will change.