The short version
- This site sets no cookies and runs no analytics, ad pixels or trackers.
- We use what you send us only to answer you and, if you hire us, to make your ads.
- We never sell your data or use it for anyone else’s advertising.
- You can ask to see, correct or delete your data at any time: adpeakstudio@gmail.com.
Who we are
AdPeak Studio makes AI-produced video ads for e-commerce brands. We are based in Romania, and we are the controller of the personal data described on this page: we decide how and why it is used.
For anything about your data, write to adpeakstudio@gmail.com. We have not appointed a Data Protection Officer, because the GDPR does not require one for a business of our size and activity.
What we collect and why
We collect as little as we can. Here is all of it, situation by situation.
When you visit the site
- What
- The technical data every browser sends with a request: IP address, browser and device type, the page requested, the page you came from, and the date and time.
- Why
- To deliver the pages, keep the site secure and stop abuse. We don’t use it to identify you or to build a profile of you.
- Legal basis
- Our legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR).
- How long
- Our host, Vercel, keeps it in its server logs for a limited time under its own retention rules, then deletes it.
When you send a brief or email us
- What
- Your name, email address, the product or store link and the package you chose, your message, and anything you attach or add later in the conversation.
- Why
- To answer you, understand your product and send you a quote.
- Legal basis
- Taking steps at your request before a contract (Art. 6(1)(b) GDPR). For general questions, our legitimate interest in answering the people who write to us (Art. 6(1)(f)).
- How long
- Up to 24 months after our last exchange if you don’t become a client, so we can pick the conversation back up. Ask us and we delete it sooner.
The brief form on our home page doesn’t send anything by itself. It writes an email in your own email app, or in Gmail if you choose, addressed to us. Nothing reaches us until you press send, and the form itself stores nothing.
When you become a client
- What
- Contact and billing details, the product material you send us (photos, videos, links, product facts), project correspondence, and the ads we deliver.
- Why
- To make and deliver your ads, handle revisions, invoice you and keep proper records.
- Legal basis
- Performing our contract with you (Art. 6(1)(b) GDPR) and meeting our legal obligations, such as tax and accounting rules (Art. 6(1)(c)).
- How long
- Project material for as long as the project runs and up to 24 months after delivery, so we can make revisions or new versions. Invoices and accounting records for as long as Romanian tax and accounting law requires.
When we contact your business first
- What
- Business contact details you publish yourself, which we find on your online store or in public ad libraries: the contact email address, the store’s name and website, and the public ads we looked at.
- Why
- To send you a short, relevant offer of our services.
- Legal basis
- Our legitimate interest in offering our services to businesses (Art. 6(1)(f) GDPR). You can object at any time, and we stop.
- How long
- Until you ask us to stop, or 12 months with no reply. If you ask us to stop, we keep only your email address on a do-not-contact list, so it doesn’t happen again.
You don’t have to give us any data. We just need an email address to be able to answer you. We don’t ask for sensitive data, such as health information or political views, and we ask you not to send any.
Transfers outside the EU
Vercel and Google are based in the United States. Both are certified under the EU–U.S. Data Privacy Framework, which the European Commission recognises as giving personal data adequate protection. Where one of our AI production services is outside the European Economic Area, it receives only product material, not your contact details.
Your rights
Under the GDPR you can ask us to:
- show you the personal data we hold about you and give you a copy (access);
- correct it if it’s wrong or incomplete (rectification);
- delete it, unless the law requires us to keep it (erasure);
- limit how we use it while a question about it is being settled (restriction);
- give you the data you provided in a common, machine-readable format, or send it to someone else (portability);
- stop using it where we rely on legitimate interests (objection). You can object to our business outreach at any time, without giving a reason, and we will stop.
Email adpeakstudio@gmail.com. We answer within one month. For complex requests the law lets us take up to two more months, and we would tell you why. Requests are free unless they are clearly unfounded or excessive. We may ask you to confirm who you are before we hand over any data.
We don’t make decisions about you by automated means, and we don’t profile you.
Complaints
If you think we have mishandled your data, please tell us first so we can put it right. You also have the right to complain to a data protection authority. In Romania, that is:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 București, Romania
anspdcp@dataprotection.ro · www.dataprotection.ro
If you live or work in another EU country, you can also complain to the authority there.
Security
The site is served only over encrypted HTTPS, with strict security headers that block scripts from anywhere else. Access to messages and project files is limited to the people working on your project.
No system is perfectly secure. If a breach ever put your data at risk, we would tell you and the authority as the law requires.
Children
Our services are for businesses and are not aimed at children. We don’t knowingly collect data from anyone under 16.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters to you, for example a new kind of data or a new provider, we say so on this page.
This policy is based on Regulation (EU) 2016/679 (the GDPR), Romanian Law 190/2018 on its implementation, and Law 506/2004 on privacy in electronic communications.