Privacy Policy

Updated 10/29/2026

This translation is provided for your convenience. In the event of any discrepancy, the Vietnamese version prevails.

This policy explains what personal data SpyWinAds collects, the purposes for which it is used, and your rights, in accordance with the Law on Personal Data Protection No. 91/2025/QH15.

Data controller

ATT ECOMMERCE COMPANY LIMITED (enterprise code 0109788572), Số 26A Lê Đức Thọ, Phường Mỹ Đình 2, Quận Nam Từ Liêm, Thành phố Hà Nội, Vietnam. Data inquiries: support@spywinads.com.

What SpyWinAds collects

• Account: email and password. Only a one-way encrypted version of the password is stored; no one can read the original password.
• Your computer: a random machine ID generated by the app, IP address, operating system and app version, used to pair the computer with your account and to prevent fraud.
• Public ad data that the app sees in the Facebook Ad Library while scanning: ad IDs, Pages, links, ad text and video fingerprints.
• How you use the service: keywords scanned, videos you watch, notes and marks.
• Free clone tool: the email you choose to enter, and a one-way hash of your IP address to count daily uses. Product links you paste are not stored.
• API and MCP (when you connect ChatGPT, Claude or another tool to SpyWinAds): the email you used to get a key, hashes of your API keys and sign-in tokens, the names of connected apps, daily call counts, and which tool was called by which app. We do not receive or store the questions you ask your AI assistant.

What SpyWinAds does not collect

• Your Facebook account, cookies or password. The scanning browser uses a separate profile and is never logged in to Facebook.
• Your main Chrome, your browsing history, or personal files outside the app's folder.

How data is used

• To run the features you use: the video dashboard, daily history, Watchlist, Deep dive and Winning stores.
• Shared library: public ads the app sees while scanning are added to the SpyWinAds shared library so that all users get more accurate counts. The shared library does not link ads to your name. Your keywords, marks and account remain private.
• To send necessary emails: verification codes, password resets and account notices.
• To improve the product. We do not sell your personal data.

Legal basis for processing

You give consent when you create an account and when you click Agree in the app. You may withdraw consent at any time (see Your rights).

Who we share data with

Only with providers that help operate the service, under contract and only to the extent necessary: Cloudflare (network, domain, email forwarding), Resend (email delivery) and our hosting provider. Some providers host servers abroad, so data may be transferred outside Vietnam. We provide data to government authorities when required by law.

Payments are processed by Stripe; we never store your card number. Usage data is processed by PostHog (see Usage analytics).

How long we keep data

• Account data is kept for as long as the account exists, including after the trial ends.
• If you request account deletion, your account data, computer data and marks are deleted within 30 days. Public ads already in the shared library are not linked to your name and are therefore retained.
• API and MCP: sign-in tokens expire after 1 hour, refresh tokens after 30 days, and stop working as soon as you disconnect the app in Settings. Product CSV files created through the API are deleted after 24 hours. API keys are kept until you revoke them.

Your rights

• To be informed, to access, to correct, to obtain a copy, to request deletion of your data, and to withdraw consent: email support@spywinads.com. We respond within the period required by law.
• To stop sending data immediately: quit the app and uninstall it.

Cookies

SpyWinAds uses 3 cookies, all set by spywinads.com itself:

• Login cookie: keeps you signed in after you log in. It ends when you log out or the session expires.
• sw-lang: remembers the language you chose, for 1 year.
• sw-ref: set only when you arrive from a partner referral link. It stores the referral code so the referrer can be credited if you sign up, for 60 days.

SpyWinAds does not use advertising cookies and does not use cookies to track you on other websites.

Usage analytics

We measure page views and product steps (sign-up, scans, payments) with PostHog to learn what to improve. Public pages are measured without cookies. We never send your email, scanned keywords or shop names to PostHog; your account is identified only by a hashed ID. Analytics data is stored on PostHog servers in the United States.

Marketing emails: Newsletters and announcements sent from tin.spywinads.com contain a small image and links routed through Resend's tracking server, so we know whether an email was opened and which links you clicked, with the time and browser type. We do not store your IP address. Verification-code and account emails are not tracked. You can block open tracking by turning off images in your email app.

Data protection

HTTPS-encrypted connections, one-way hashed passwords, and verification codes that expire after 10 minutes and lock after 5 incorrect attempts.

Users under 18

SpyWinAds is intended for sellers and is not intended for anyone under 18 years of age.

Changes

When this policy changes, we update the date at the top of the page and notify you by email of any material changes.