1. Who this policy covers
This policy covers gptad.io, gptad.com.au, gptad.vn and gptad.com.vn, public brand-report requests, website enquiries and demo bookings handled by GPTAd. Nudgen LLC operates GPTAd and is responsible for the personal information described in this policy. Business address: 8 The Green, Dover, DE 19901, United States. Contact us at [email protected].
It does not describe every data flow in an authenticated GPTAd console, an advertising account or a client engagement. Separate service notices or a data-processing agreement may apply to those activities. Third-party websites have their own privacy policies.
2. Information we collect
Information you provide: your email address, website URL, target region and optional research focus when requesting a report; your name, contact details, booking details and messages when arranging a demo or contacting us. Please do not send passwords, payment-card details, sensitive personal information or confidential material through public tools.
Information generated during use: report results, research sources, job status and email-delivery status. Our hosting and technical providers may process IP addresses, browser and device details, request times and security logs. Where Google Analytics is enabled, it collects website usage information such as pages viewed, interactions, referral information and online identifiers.
Public information: we retrieve content from the website you submit and research data from search, AI-answer and domain-information services. Public website content may contain personal information, such as the names or business contact details of staff.
3. How and why we use information
We use information to prepare and deliver reports, respond to enquiries, arrange meetings, provide requested services, understand website use, troubleshoot problems, prevent abuse and meet legal obligations. A report email is sent because a report was requested for that address.
Where consent is required, we seek it for the relevant purpose. In other cases, processing must have a basis permitted by applicable law, such as fulfilling your request or meeting a legal obligation. This policy is an explanation, not blanket consent to every form of processing. We will not treat a report request as permission for unrelated marketing; where required, marketing needs separate consent and you can ask us to stop.
4. Service providers and disclosures
When internal report notifications are enabled, we send the submitted email address, website URL, target country and request time to a private team channel through Discord so our team can monitor report requests. These messages are stored separately and are not removed by the report’s seven-day cleanup.
Providers help us deliver the website and requested services. These include hosting and infrastructure providers; Google Analytics for usage measurement when enabled; Cal.com for demo scheduling; DataForSEO for search, AI-answer and domain research; OpenSEO for keyword metrics when enabled; and Mermail for sending report emails and attachments.
The information shared depends on the task: research providers receive website or domain details, research queries and region settings; email providers receive the recipient address and message or report; scheduling providers process booking and contact details. Public content included in research queries may be processed by AI systems. Check the relevant provider’s privacy policy for its own processing practices.
We may also disclose information where required by law, to protect legal rights or security, or to professional advisers who need it for their work. We do not offer personal information collected through these website tools for sale.
5. International processing
Our providers may process information in countries other than where you live, including through international infrastructure and support teams. The actual locations depend on the provider and service configuration. Contact us for the available details relevant to your request.
Where applicable law requires safeguards, transfer procedures or specific consent for overseas processing, those requirements still apply. Using this website does not waive your privacy rights or by itself constitute consent to an otherwise unlawful transfer.
7. Report links and sharing
Online reports use a hard-to-guess link, but anyone who has the link can view the report without signing in. Treat it as private and avoid posting it publicly. Reports and their PDFs can contain information about the submitted website and its business.
Report links normally expire after seven days. This does not mean all copies of the information are deleted after seven days: email messages, downloaded PDFs, technical logs and backup copies may remain separately. Recipients control copies they download or forward.
8. Retention and security
Report records expire after seven days. Expired records and files are deleted during routine cleanup, which may happen after expiry. Expiry prevents normal online access while cleanup is pending.
Other information is retained according to the purpose for which it was collected, the need to respond to requests or disputes, applicable record-keeping requirements and provider or backup retention. Contact us to request deletion or ask about the records relevant to you. We do not promise a single deletion period for every system.
We use measures designed to restrict access and protect service operation, but no online system or email transmission is completely secure. If an incident affects your information, we will take the steps required by applicable law, including notification where required.
9. Your choices and privacy rights
Depending on applicable law, you may have rights to know about processing, access or obtain a copy of your data, correct inaccurate information, request deletion, restrict or object to processing, withdraw consent, complain or seek compensation. Withdrawal does not make earlier lawful processing unlawful. Some requests may be subject to legal exceptions or record-keeping obligations.
Email [email protected] with your request and enough information to identify the relevant interaction. We may ask for proportionate verification to protect your information; do not send identity documents unless requested through an appropriate channel. We will respond within the period required by applicable law and explain any lawful refusal or limitation.
Providing information is voluntary, but we need a website and email address to generate and email a report, and contact details to respond or arrange a meeting. If you decline necessary processing, we may be unable to provide that feature.
10. Children’s information
Our business services are intended for adults and are not directed at children. If you believe a child has provided personal information through our website, contact us so we can review the situation and take appropriate action.
11. Contact and complaints
For privacy questions, requests or complaints, email [email protected] and describe the issue. We will review it and respond under applicable legal requirements. You may also contact the competent data-protection authority or seek a remedy available under local law.
In Australia, where the Privacy Act applies, you can raise a complaint with the Office of the Australian Information Commissioner (OAIC), generally after first giving us an opportunity to respond. In Vietnam, you may contact the competent personal-data protection authority under the Ministry of Public Security. Contacting us does not limit those rights.
12. Policy updates and language
We will update this policy when our practices or relevant requirements change and revise the date above. Where required, we will provide additional notice or obtain fresh consent before processing information for a new purpose.
The English and Vietnamese versions are intended to explain the same practices in natural language. If anything is unclear or appears inconsistent, please contact us. Your mandatory rights under applicable law remain unchanged.