Privacy Policy
The short version: we collect what we need to run your marketing — nothing more. We don't sell your data. Your content is yours. You can delete your account and everything with it, any time.
Who we are
Adluma ("we", "us") is operated by BDKM LLC. Adluma is an AI marketing agent: it drafts posts, generates AI-creator video ads, publishes to channels you connect, and measures which content brings you users.
What we collect
- Account data — your email and login identifiers (we use magic links / OAuth; we never see or store passwords).
- Product context you give us — your product URL, descriptions, brand voice samples, and uploads you provide so the agent can write and film for you.
- Connected accounts — if you connect X, TikTok, Instagram, or YouTube, we store the OAuth tokens needed to publish on your behalf. We only post what you approve (or what you've explicitly put on autopilot).
- Usage & attribution data — clicks on your tracked links, referral codes, and conversions you report, so we can tell you which ad actually worked.
- Billing — payments are processed by Stripe. We never see or store your card number.
How we use it
- To generate your content — your product context is sent to AI providers (Anthropic for writing, fal.ai for video/voice) solely to produce your drafts and ads.
- To publish — posting to the channels you connected, when you approve.
- To measure — attributing clicks and signups to the content that earned them.
- To bill you and to keep the service working (quotas, abuse prevention).
What we don't do
- We don't sell your personal data. Ever.
- We don't train AI models on your private data.
- We don't post to your accounts without your approval setting.
- We don't run third-party ad trackers on this site.
AI-generated content
Video ads are generated with AI creators — synthetic people. Adluma automatically labels this content ("This creator is AI-generated") to comply with FTC guidance and platform rules. You're responsible for the truthfulness of claims about your own product in the scripts you approve.
Where your data lives
Data is stored with Supabase (Postgres + storage, hosted in the US) with row-level security so your data is only readable by you. Video renders run on Fly.io infrastructure and are stored in your private workspace.
Deletion & your rights
You can disconnect any channel at any time (we delete its tokens), and you can delete your account from Settings — this permanently removes your account data, content, and connected-account tokens. If you're in a jurisdiction with data rights (GDPR/CCPA), those rights apply to you and we'll honor them.
Changes
If we make material changes to this policy, we'll note it here with a new date. Continued use after changes means you accept them.