Privacy Policy

Effective Date: 2026-03-24

1. Introduction

Adaptiv Ltd (“we”, “us”, or “our”) operates the Adverra platform (“the Platform”). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Platform. We are committed to protecting your privacy and processing your data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect the following categories of personal data:

3. How We Use Your Data

We process your personal data for the following purposes:

• Service delivery: To provide, maintain, and improve the Platform, including AI image generation, editing, and storage.
• Account management: To create and manage your account, authenticate your identity, and process your transactions.
• Communication: To send you service-related notices, including email verification, password resets, and important updates about the Platform.
• Security: To detect, prevent, and address fraud, abuse, and security issues, including bot protection via CAPTCHA verification.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to perform our contract with you (providing the Platform services).
• Consent: Where you have given explicit consent, such as accepting these terms at registration.
• Legitimate interests: Processing necessary for our legitimate interests, such as improving the Platform, preventing fraud, and ensuring security, where these interests are not overridden by your rights.
• Legal obligation: Processing necessary to comply with applicable law.

5. Third-Party Service Providers

We share your data with the following categories of third-party service providers, each of which processes data in accordance with their own privacy policies:

• Supabase: Provides authentication, database hosting, and file storage. Your account data, images, and application data are stored on Supabase infrastructure.
• Fal.ai: Provides AI image generation services. Your text prompts and uploaded images are transmitted to Fal.ai for processing when you use generation features.
• Google (Generative AI): Provides AI services for prompt enhancement and image analysis. Text prompts and image data may be sent to Google for processing.
• Stripe: Processes credit purchases and payment transactions. Your payment information is handled directly by Stripe and is not stored on our servers.
• hCaptcha: Provides bot protection during registration and login. hCaptcha may collect technical data such as your IP address and browser information.

6. AI Image Processing

When you use the Platform's AI features, your text prompts and any uploaded images are sent to third-party AI providers for processing. These providers may temporarily process this data to generate outputs but do not retain your data for their own training purposes under our agreements with them.

AI-generated images are stored in your account library and are accessible only to you (and to organisation members if you use organisation features). We do not use your images or prompts to train AI models.

7. Data Storage and Retention

Your data is stored on servers operated by our third-party hosting providers. We retain your personal data for as long as your account is active or as needed to provide you with the Platform's services.

If you delete your account, we will permanently delete your personal data, uploaded images, generated content, and associated records. Some data may be retained in backups for a limited period, after which it will be permanently deleted.

8. Your Rights

Under applicable data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data (available via the account deletion feature in your profile settings).
• Data portability: Request an export of your data in a portable format (available via the data export feature in your profile settings).
• Restriction: Request restriction of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@adverra.com or use the self-service tools available in your account profile.

9. Cookies

The Platform uses essential cookies and local storage to maintain your authentication session and store your preferences. These are strictly necessary for the Platform to function and cannot be disabled. We do not use advertising or tracking cookies.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom. Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data in accordance with applicable data protection law.

11. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Platform with a revised effective date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at support@adverra.com.

Adaptiv Ltd
Email: support@adverra.com