Privacy Policy

Who we are

AdStudio is a proprietary platform operated by Mediadrive Ltd, part of SN&CK Media Limited. References to "AdStudio", "we", "us" and "our" in this policy mean Mediadrive Ltd. You can contact us at info@mediadrive.co.uk.

1. Introduction

This Privacy Policy explains how AdStudio ("we", "us", "our") collects, uses, stores, and protects information when you use our platform. AdStudio is a software-as-a-service platform for managing ad campaigns, creating performance reports, serving ads, and managing creative assets.

By using AdStudio, you consent to the data practices described in this policy.

2. Information We Collect

Account Information

When your account is created, we collect your email address and a password. Passwords are securely hashed by Firebase Authentication and are never stored in plain text. We also store your assigned role (administrator or user), organisation assignment, and associated advertiser, publisher, or agency access.

Campaign and Advertising Data

You or your organisation may upload or sync campaign performance data including impressions, clicks, conversions, costs, creative names, placement details, site information, and geographic breakdowns. This data is uploaded via CSV files, synced from Google Sheets, or imported from Google Campaign Manager 360 (CM360).

Creative Assets

You may upload creative files including images, videos, HTML5 assets, PDFs, and documents. These files are stored in Firebase Cloud Storage and may be made accessible via public URLs for ad serving and sharing purposes.

Technical Data

We collect IP addresses solely for rate limiting purposes. This data is held in server memory only, is not persisted to any database, and is automatically cleared within 60 seconds of the rate limit window expiring. We use Firebase Authentication tokens (JWTs) for session management.

3. Information We Do Not Collect

• We do not set or use tracking cookies anywhere in the platform (the signed-in application)
• We do not use analytics of any kind within the platform — your activity in the application is not tracked or measured
• We do not track your browsing behaviour across other websites
• We do not collect personal information beyond your account email address
• We do not serve targeted advertisements to you within the platform
• We do not use advertising cookies, and we do not share data with Google for advertising purposes

4. Analytics on Our Public Website

Our public marketing pages — the homepage, our work (portfolio) pages, this privacy policy and our terms — use Google Analytics 4 to understand how visitors find and use the site. This applies to the public website only. It is not used anywhere in the signed-in platform.

Analytics cookies are set only if you accept them. We use Google Consent Mode with analytics storage denied by default, so no analytics cookies are placed on your device unless you choose “Accept” on the banner shown on your first visit. If you decline, Google Analytics receives an anonymous, cookieless signal that a page was viewed and nothing is stored on your device.

We do not enable Google Analytics advertising features, remarketing, or data sharing for advertising purposes. IP addresses are anonymised. You can change your choice at any time by clearing this site’s data in your browser, which will show the banner again.

5. How We Use Your Information

We use the information we collect to:

• Provide and maintain the AdStudio platform and its features
• Authenticate your identity and manage access to your organisation's data
• Process and store campaign data for reporting and analysis
• Sync data from connected third-party sources (CM360, Google Sheets)
• Generate performance reports and dashboards
• Store and serve creative assets for ad campaign management
• Enforce rate limits to protect the platform from abuse

6. Data Storage and Security

Your data is stored using Google Cloud Platform infrastructure:

• Firebase Authentication — securely manages user credentials with industry-standard password hashing
• Firebase Firestore — stores account profiles, organisation structures, report configurations, and project metadata
• Firebase Cloud Storage — stores uploaded creative assets and files
• Google BigQuery — stores campaign performance data for reporting and analysis

All data is transmitted over HTTPS (TLS encryption in transit). Access to data is controlled through role-based access control, with organisation-level data isolation enforced at the application layer. File uploads are validated for type, size (100 MB limit), and content integrity before storage.

7. Third-Party Services

AdStudio relies on the following third-party services to operate:

• Google Cloud Platform / Firebase — provides authentication, database, file storage, and data warehousing infrastructure. Governed by the Google Cloud Terms of Service.
• Google Campaign Manager 360 — when connected by your organisation, we access campaign, placement, and reporting data via the CM360 API using a service account authorised by your organisation.
• Google Sheets — when you link a published Google Sheet as a data source, we fetch its contents periodically (up to hourly) to keep your campaign data up to date.
• Google Analytics 4 — used on our public marketing pages only, and only with your consent, as described in section 4. It is not used within the signed-in platform.

We do not sell, rent, or share your data with any third parties beyond these service providers, which process data solely on our behalf to deliver the Service.

8. Data Retention

We retain your data as follows:

• Account data — retained while your account remains active. Upon account deletion, your profile data is removed from our systems.
• Campaign data — retained in BigQuery for the lifetime of the associated data source. Data is replaced when a data source is re-synced and removed when a data source is deleted.
• Creative assets — retained in Cloud Storage until explicitly deleted by an authorised user or upon project deletion.
• Rate limiting data — held in server memory only and automatically purged within 60 seconds.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Deletion — request deletion of your personal data and account
• Data portability — request an export of your data in a portable format
• Restriction — request that we limit how we process your personal data

To exercise any of these rights, contact us at info@mediadrive.co.uk.

10. Data Sharing

We do not sell your personal information. We share data only with the third-party infrastructure providers listed in Section 6, solely as necessary to operate the Service. We may disclose information if required by law, regulation, or legal process.

11. Children's Privacy

AdStudio is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. International Data Transfers

Your data is processed and stored on Google Cloud Platform infrastructure, which may involve transfer to servers located outside your country of residence. By using the Service, you consent to this transfer. We rely on Google Cloud's data processing agreements and standard contractual clauses to ensure appropriate safeguards for international data transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at info@mediadrive.co.uk.