Privacy Policy

Last updated June 2026

This is a starter privacy policy for Greads. Review it with legal counsel before relying on it commercially.

What we collect

Your email address (for sign-in), the brands and projects you create, generated assets and uploads you store, and your credit/usage history.

API keys you provide

If you connect your own provider API keys, they are encrypted at rest with AES-256-GCM and used only to run generation on your behalf. We never display them again and never share them.

Third-party processors

We use Supabase (auth, database, storage), Vercel (hosting), and AI providers (Anthropic, Google, Kling, ElevenLabs, HeyGen) to deliver the service. Your prompts and brand data are sent to these providers to generate your ads.

Data retention & deletion

You can delete brands, projects and uploads at any time. To delete your account and all associated data, contact us.

Contact

Questions about privacy? Email the address listed on our site.