Privacy Policy
Last updated: 31 July 2026
JonnyAD is a marketing platform used by agencies and businesses to plan, write and publish their own content. This policy explains what we hold, why we hold it, and how to get rid of it. It is written to be read, not to be survived.
Who we are
JonnyAD is operated from Australia and serves customers internationally. For questions about this policy or about your data, write to privacy@jonnyad.com.
What we collect
Your account
Your email address and authentication details, handled by our authentication provider. If you sign in with Google or another provider, we receive your email address and name from them — we never receive your password.
The businesses you manage
For each client workspace you create: company name, industry, service area, website, brand colours, logo, brand voice, target audience, and any compliance rules you record. You choose what to enter; the platform uses it to write content that sounds like that business rather than like everyone else.
Content and design files
The campaigns and articles generated for you, the edits you make to them, and any files you upload — PSD templates, fonts, brand imagery. These are stored in private buckets. They are not public, not indexed, and not shared between customers.
Connected social accounts
When you connect Facebook, Instagram, LinkedIn or TikTok, we store the access token that network issues us, plus the account name and id so the interface can show you which account is connected. These tokens live in a table the browser cannot read at all — only our servers can, and only to publish what you have scheduled.
We use these tokens for one purpose: publishing the content you created, when you scheduled it. We do not read your inbox, your followers, your private messages, or anything else those permissions might technically allow.
Public web pages we read
To produce audits and competitor analysis, our servers fetch publicly available pages: your own website, and the competitor sites you list or that we propose. We read only what any visitor can see, identify ourselves honestly in our requests, and do not attempt to reach anything behind a login.
Usage records
How many campaigns you generate, which features you use, your coin balance and the transactions that moved it. This runs your billing and shows you where your credit went.
What we do not collect
- Payment card details. When billing is enabled, cards are handled entirely by our payment processor. We never see or store them.
- Passwords. Authentication is handled by our provider; we hold no passwords of yours.
- Your social media inbox, followers or private messages.
Artificial intelligence
JonnyAD uses third-party AI services to write copy, analyse designs and produce audits. To do that, the relevant parts of your brand profile and your brief are sent to those providers. We use their business APIs, under terms that prohibit training their models on our customers’ data.
The platform keeps its own record of what worked for each client — which suggestions you accepted, what you rewrote, what your competitors publish. That record belongs to your workspace, informs only your own future content, and is never pooled with another customer’s.
Who we share it with
We share data only with the services that make the product work:
| Who | What they receive | Why |
|---|---|---|
| Database & authentication provider | Account and workspace data | Storing it |
| File storage provider | Uploaded design files and generated artwork | Storing it |
| AI providers | Brand profile and brief, at the moment of generation | Writing and analysing |
| Social networks you connect | The post you scheduled | Publishing it |
| Hosting provider | Standard request logs | Running the site |
We do not sell your data. We do not share it for advertising. We disclose it otherwise only where the law compels us to.
Where it is held
Our infrastructure providers operate globally, so your data may be processed in countries other than your own, including the United States and the European Union. Where transfers are subject to law such as the GDPR or Brazil’s LGPD, we rely on our providers’ standard contractual clauses.
How long we keep it
- While your account is open — your workspaces, content and files stay as you left them.
- When you delete a client workspace — its brand profile, campaigns, templates, learned observations and uploaded files are deleted along with it. This cascades in the database; it is not a flag that hides them.
- When you close your account — everything above is deleted within 30 days, except records we are legally required to retain, such as transaction history for tax purposes.
- Disconnected social accounts — the token is removed immediately and cannot be recovered; reconnecting issues a new one.
Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, take it elsewhere, or object to how we use it. Australian customers have these rights under the Privacy Act; European customers under the GDPR; Brazilian customers under the LGPD.
Most of them you can exercise yourself: edit any brand profile in Settings, delete a client workspace from the client switcher, disconnect a social account under Social Accounts. For anything else — including a copy of everything we hold — write to privacy@jonnyad.com and we will respond within 30 days. See also our data deletion instructions.
Security
Data is encrypted in transit and at rest. Social publishing tokens are held in a table with no browser-readable access policy — reachable only by our servers. Every workspace is isolated: queries are filtered by workspace and ownership is proven on each request, so one customer’s data cannot be reached from another’s session.
No system is perfect. If we ever suffer a breach affecting your data, we will tell you and the relevant regulator as the law requires.
Children
JonnyAD is a business tool and is not intended for anyone under 16. We do not knowingly collect their data.
Changes
If we change this policy we will update the date at the top, and for material changes we will email account holders before the change takes effect.