Privacy Policy
Last updated: 2026-09-24
This policy explains what data Adverna collects, how we use it and your choices. Adverna helps businesses create AI product ads, publish them to Instagram and Facebook, and optionally answer customer messages and take orders.
1. Who we are
Adverna is operated by [Emri zyrtar i kompanise], [Adresa e kompanise, qyteti, Kosove] (business no. [Numri i biznesit / NUI]). For privacy questions contact privacy@adverna.app.
2. Data we collect
- Account: email and password (stored hashed by our authentication provider).
- Business data: name, category, language, products (photos, names, prices, stock, descriptions) and Brand Kit (logo, colors, style, contact).
- Generated content: AI images, videos and captions you create, and scheduled posts.
- Connected Meta accounts (Instagram, Facebook): Page and Instagram account IDs, name, username, profile picture and access tokens, stored encrypted.
- Customer messages (only if you enable the Sales Agent): messages your customers send on Instagram/Messenger and the order details they provide (name, phone, address).
- WhatsApp: your phone number and the messages you send to the assistant, if you link WhatsApp.
- Payments: plan, amount, status and transaction ID. Card details are processed only by Paddle, never by us.
- Technical data: essential cookies for sign-in and the active business.
3. How we use it
- To generate ad images, videos and captions for your products.
- To publish or schedule posts on Instagram and Facebook only when you request it or approve a plan.
- To reply to your customers in DMs and take orders on your behalf, only while the Sales Agent is enabled.
- To notify you about orders and receive your requests on WhatsApp.
- For billing, support, security and improving the service.
4. Data from Meta platforms
We use data received from Instagram, Facebook and WhatsApp only for the features you enable: publishing your content, replying to your customers' messages and sending you notifications. We do not sell it, use it for advertising, or share it beyond the processors listed below.
You can disconnect any account at any time under Social accounts, or remove Adverna from your Facebook settings (Business integrations).
5. Processors
- Supabase: database, authentication and file storage.
- Vercel: application hosting.
- OpenRouter and Google (Gemini): AI models that generate images, videos, captions and replies; product photos and the necessary text are sent to them.
- Meta Platforms: Instagram, Facebook, Messenger and WhatsApp for publishing and messaging.
- Paddle: payments and invoicing as merchant of record.
6. Your customers’ data
When you use the Sales Agent you are the controller of your customers' data and we process it on your behalf only to reply and record orders. Please let your customers know that replies may be AI-generated.
7. Retention
We keep data while your account is active. When you delete your account we delete business data, products, generated content, conversations, orders and tokens within 30 days. Payment records may be kept as long as required by accounting law.
8. Your rights
You can request access, correction, deletion or export of your data and object to processing, under the data protection laws of Kosovo and, where applicable, the GDPR. You can delete your account yourself under Settings → Account. For other requests email privacy@adverna.app. See also Data deletion.
9. Security
We use encrypted connections (HTTPS), encryption of social access tokens, per-business access control and limited staff access. No system is 100% secure, but we protect your data with standard industry measures.
10. Children
Adverna is a business tool and is not intended for people under 16.
11. Changes
If we change this policy we update the date above and, for material changes, notify you by email or in the app.