1. Who we are
Adreport is operated by Werkslim AI, based in the Netherlands. We are the data controller for the personal data collected through this service.
Questions about this policy? Email us at hello@getadreport.com.
2. What data we collect
We collect the following information when you use the service:
- Email address — provided when you submit an upload or create an account. Used to deliver your report and send service-related messages.
- Uploaded files — CSV files and other advertising data exports you upload. Processed to generate your report.
- Client name and logo — optionally provided to personalize the report. Not used for any other purpose.
- Payment information — handled entirely by Stripe. We do not store card details on our servers.
- Usage data — basic technical logs such as error reports and page load times. Used to keep the service working correctly.
3. Why we process your data
We use your data for the following purposes:
- To generate and deliver your report (contractual necessity)
- To send you the report link and any follow-up related to your order (contractual necessity)
- To maintain and improve the technical functioning of the service (legitimate interest)
- To comply with legal obligations
We do not use your data for advertising, profiling, or sale to third parties.
4. How long we keep your data
- Uploaded files — deleted within 30 days of report generation.
- Generated reports — accessible via your report link for 90 days, then deleted.
- Email address — retained as long as you have an active account or subscription. Deleted upon request or account deletion.
- Payment records — retained for 7 years as required by Dutch tax law.
5. Who we share data with
We use a small number of third-party services to operate Adreport:
- Stripe — payment processing. Your payment data is governed by Stripe's privacy policy.
- Vercel — hosting and infrastructure. Files are processed on Vercel's servers.
- Resend — transactional email delivery (sending your report link).
- Anthropic (Claude API) — used to parse uploaded CSV files. File contents are sent to Anthropic's API for schema detection only. Anthropic does not use API inputs to train their models by default.
All processors are contractually bound to handle your data in accordance with GDPR.
6. Cookies
We use only functional cookies necessary for the service to work (such as session state). We do not use tracking or advertising cookies. No cookie consent banner is shown because we only use strictly necessary cookies.
7. Your rights under GDPR
If you are based in the EU or EEA, you have the following rights:
- Access — request a copy of the data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — ask us to delete your data (right to be forgotten)
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
To exercise any of these rights, email hello@getadreport.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
8. Data security
We take reasonable technical measures to protect your data, including encrypted connections (HTTPS) and access controls on stored files. No method of transmission over the internet is 100% secure, but we follow current industry standards.
9. Changes to this policy
We may update this policy when the service changes. If changes affect how we use your personal data, we will notify you by email. The date at the top of this page always reflects the latest version.