Privacy

DesignSpark Studio LLC (“DesignSpark”, “we” or “us”), an Ohio limited liability company, runs AdSitter, the website at getadsitter.com and the AdSitter dashboard (together, the “Service”). This policy explains what information we collect, how we use it, who we share it with, and your rights. It goes with our Terms.

The short version. We use your information to run AdSitter for you. We never sell it, and we never use it to train AI models. You can disconnect anything, turn off texts and emails, and ask us to delete your account at any time.

1. What we collect

Things you give us

• Your account. Your name and email address. If you sign in with Google, we also get your Google profile name, email address and profile picture. Sign-in is handled by Clerk, which also records when and from which browser and IP address you sign in, to keep your account safe.
• Your setup answers. Your App Store link, your website, your monthly limit, your goal (downloads or paying customers), how much experience you have with Apple Ads, and how you heard about AdSitter.
• Your instructions. What you write on the Instructions page: your goal, searches you never want your ads shown for (and in which countries), searches you want to try, notes, and one-time requests.
• What you tell the AdSitter assistant. Your questions and its answers, the changes it suggested and whether you applied them, and facts you ask it to remember, such as the dates your card was declined. It also keeps a short note each time it notices your ads stopped showing, and any question it asked you about that. These are kept for each ad account so the assistant can answer you better later.
• Your mobile number, if you turn on text alerts. Your number, the code you text us, when you agreed to texts, and the texts we exchange.
• Support chats. What you write in the chat on our site or dashboard, and in emails to us. The chat runs on Chatwoot. An AI support assistant called Sitter may answer first, and a person can take over.
• Launch updates. If you signed up for launch updates before accounts opened, your email address and the App Store link you gave us, if any.

Things you let us read from other services

• Apple Ads, once you connect it. Your Apple Ads account’s name and ID, your role in it, and its campaigns, ad groups, keywords, blocked searches, bids and budgets. Daily results such as how often your ads were shown and tapped, downloads, spend, and the searches people typed. Whether your ads are showing and, if not, the reason Apple gives, such as a payment problem. We also keep the authorization Apple gives us when you connect, stored encrypted. We never see your Apple password or the card in your Apple Ads account.
• What AdSitter did. A record of every change AdSitter made or would have made in your Apple Ads account, and why.
• RevenueCat, if you connect it. Your project ID and the read-only key you create, stored encrypted. Daily totals of revenue, new trials and paying customers, broken down by campaign and keyword. These are totals, not details about the individual people who use your app.

Billing

• When you start a free trial or a plan, Stripe collects your card and billing details. We never see or store your full card number. From Stripe we keep your customer ID, your plan, its status, when your trial ends and when it renews, and a record of the billing emails we sent you. We also keep a record that you and your Apple Ads account had a free trial.

Things collected automatically

• Basic technical details. Vercel hosts the site and the dashboard. Like any web host, it processes the details every web request carries, such as your IP address, browser type and the page you asked for.
• Cookies. Clerk uses cookies to keep you signed in. The Chatwoot chat uses cookies and your browser’s storage to keep your conversation open between pages. These are needed for the Service to work. On the public website (not the dashboard), Google Analytics counts visits and which pages people read, using cookies. It is set up without advertising features, and in the EU, the UK and Switzerland it sets no cookies. We don’t use advertising trackers.
• Email delivery. Resend, which sends our emails, records whether each email was delivered.

2. How we use it, and why we are allowed to

If you live in the European Economic Area (EEA) or the UK, the law asks us to say which legal basis we rely on for each use. We show it in brackets.

• To run AdSitter for you: your account, reading your ads, making the changes you allow, writing notes, answering your questions, and sending alerts (to perform our contract with you).
• To bill you for your plan and keep tax records (contract, and legal obligation).
• To send account, billing and alert emails (contract), and launch updates and news about AdSitter, which you can unsubscribe from at any time (consent, or our legitimate interest where the law allows).
• To text you, only if you turned texts on (consent).
• To answer you when you write to us (contract and legitimate interests).
• To keep AdSitter secure, prevent fraud and abuse, and make sure free trials go one per person and one per Apple Ads account (legitimate interests).
• To understand how people find AdSitter, from your “how you heard about us” answer (legitimate interests).
• To follow the law and respond to lawful requests (legal obligation).

AdSitter makes automated decisions about your ads, because that is what you ask it to do. We don’t use automated decisions that have legal or similarly significant effects on you as a person.

3. How AI is used

• AdSitter’s judgments, notes and assistant run on AI models from Anthropic. To do that, we send Anthropic the information needed for each task, such as your ad results, your instructions and notes, your setup goal and experience, your conversation with the assistant, and the facts it remembers. We don’t send your card details.
• Anthropic processes this on our behalf. Under its commercial terms it does not train its models on this data. It may keep it for a limited time for safety and abuse checks, then delete it.
• We never use your data to train AI models, ours or anyone else’s.
• You can see and delete everything the assistant remembers on the Instructions page. Deleted facts are no longer used.

4. Who helps us, and who we share with

We share information only with the companies below, which help us run AdSitter. Each gets only what it needs for its job and must protect it.

• Clerk handles sign-in and stores your account details, your setup answers and your plan status.
• Vercel hosts the website and the dashboard, and processes web requests.
• Neon stores AdSitter’s database: your Apple Ads and RevenueCat data, AdSitter’s record of changes, your instructions, your text settings, and your conversations with the assistant.
• Resend sends our emails and stores the email addresses and names we send to.
• Stripe takes payments for AdSitter plans and holds your card and billing details. Stripe also uses payment data to prevent fraud, under its own privacy policy.
• Anthropic provides the AI behind AdSitter’s judgments, notes and assistant (see Section 3).
• Photon sends and receives our text messages, if you turn them on. It gets your phone number and the texts. Texts travel by iMessage, which Apple runs.
• Chatwoot runs the support chat and the Sitter support assistant, and gets your messages and the page and browser you chatted from.
• Google Analytics measures visits to the public website: pages viewed, the site you came from, rough location and device. It does not run in the dashboard.

Services you connect. When you connect Apple Ads or RevenueCat, AdSitter works with them on your behalf, under the permission you give. Apple receives the changes AdSitter makes in your Apple Ads account. Each of them handles your data under its own privacy policy.

We may also share information:

• if the law, a court or a valid government request requires it;
• to protect the rights, property or safety of our customers, the public or us; or
• if our business is merged or sold, with the new owner, who must keep this policy’s promises. We will tell you first.

5. We never sell your data

We don’t sell your personal information, and we don’t share it for cross-context behavioral advertising, as California law uses those words. We haven’t done either in the past 12 months. We don’t use advertising trackers, and we don’t share your information with anyone for their own marketing.

6. How long we keep it

• While your account is open, we keep your account, setup answers, instructions, ad data, AdSitter’s record of changes, and your assistant conversations, so AdSitter and your dashboard keep working.
• When you disconnect Apple Ads or RevenueCat, we stop collecting new data from it straight away. The history we already have stays until you delete your account or ask us to delete it.
• Remembered facts stay until you delete them on the Instructions page or delete your account.
• When you delete your account, we delete or de-identify your personal information within 30 days. Copies in our providers’ backups are removed as those backups expire on their normal schedule.
• Some records we must keep longer, such as invoices and payment records for as long as tax and accounting law requires, and anything needed to settle a dispute or prevent fraud and abuse, including making sure free trials aren’t repeated.
• If you unsubscribe from emails or texts, we keep a note of that so we don’t contact you again.

7. How we protect it

• All traffic to AdSitter is encrypted in transit (HTTPS).
• Our providers encrypt the data they store for us.
• Your RevenueCat key and the authorization Apple gives us are encrypted again by AdSitter (AES-256-GCM) before they are stored, with a key kept separate from the database.
• Access to your data is limited to what the Service and our team need.

No system is perfectly secure, but we take reasonable steps to protect your information. If a breach affects your personal information, we will tell you and any regulator as the law requires, usually by email.

8. Where your data is stored

We are based in the United States, and our database is on servers in the United States. Our providers may process data in other countries too. When we transfer personal information from the EEA or the UK, we rely on safeguards such as the European Commission’s Standard Contractual Clauses and the UK’s equivalent.

9. Your rights and choices

Wherever you live, you can:

• ask what we hold about you, and get a copy in a format you can reuse;
• ask us to correct it, or change most of it yourself in Settings;
• ask us to delete your account and your data, by emailing hello@designspark.studio from the address you signed up with;
• disconnect Apple Ads or RevenueCat whenever you like, in Settings;
• turn off text alerts in Settings, or reply STOP to any text;
• unsubscribe from launch updates and news with the link in any of those emails (account, billing and alert emails keep coming while your account is open); and
• delete anything the assistant remembers, on the Instructions page.

To make a request, email hello@designspark.studio. We may need to confirm it is really you before we act. We reply within the time the law sets, usually one month for EEA and UK requests and 45 days for California requests, and we will tell you if we need longer where the law allows it. We will never treat you differently for using your rights.

If you live in the EEA or the UK

• DesignSpark Studio LLC is the controller of your personal information.
• You also have the right to restrict or object to our use of your information, to take it to another service, and to withdraw consent at any time. Withdrawing consent doesn’t affect what we did before.
• You can complain to your local data protection authority.

If you live in California

• In the past 12 months we collected these categories: identifiers (name, email, phone number, account IDs, IP address), commercial information (your plan and payments), internet activity (sign-in and web request details), professional information (your app, your ad account and its results), and the content of your messages to us and the assistant. The sources, purposes and recipients are in Sections 1, 2 and 4.
• You have the right to know, access, correct and delete your personal information. We don’t sell or share it (Section 5), so there is nothing to opt out of. We don’t use sensitive personal information beyond what the Service needs.
• You can use an authorized agent to make a request for you.
• We don’t share personal information with anyone for their own direct marketing, as California’s “Shine the Light” law uses those words.

If you live in another U.S. state with a privacy law

You have the right to confirm whether we process your personal information, to access, correct and delete it, to get a portable copy, and to opt out of targeted advertising, sale and certain profiling. We don’t do any of those three. If we turn down your request, you can appeal by replying to our answer. If you are unhappy with the result, you can contact your state attorney general.

Do Not Track and Global Privacy Control

We don’t use advertising trackers, so these browser signals have nothing to switch off on our site. Where the law requires it, we treat a Global Privacy Control signal as a request to opt out.

10. Children

AdSitter is a service for app businesses and is only for people aged 18 or over. We don’t knowingly collect information from anyone under 18. If we learn that we have, we will close the account and delete the information. If you think a child has given us information, email hello@designspark.studio.

11. Changes to this policy

If we change this policy, we will post the new version here with a new date at the top. For important changes, we will also email you before they take effect.

12. Contact us

For privacy questions and requests, email hello@designspark.studio, or write to us: