Privacy Notice
Last updated: 2026-10-13
MadSlope is for businesses only. We offer MadSlope (app.madslope.com and www.madslope.com) only to businesses and to professionals who act for a business. We do not offer it to consumers. By using MadSlope, you confirm that you act for a business, trade or profession. You must be at least 18 years old to use MadSlope.
1. Who we are
Aluminum.io, Inc. ("MadSlope", "we") operates www.madslope.com and app.madslope.com. Address: 313 S State St, Dover, DE 19901, United States. Contact for privacy: the contact form at www.madslope.com/contact (topic "Privacy request (access/delete/correct)").
This notice describes the personal information that we collect when businesses and their staff use MadSlope, and when people visit www.madslope.com or contact us. Our Terms of Service say how we may use the inputs and output of the service.
2. Data we collect
| Category | What | Source |
|---|---|---|
| Google account profile | Name, first and last name, email address, profile picture URL, Google user ID, Google Workspace domain (the hd claim) | Google sign-in, when you sign in |
| Organization data | Company name, website, Workspace domain, ad brief, description, target audience, key message, members and roles | You and your team |
| Brand assets | Logos, images and other files that you upload | You |
| Briefs and settings | Ad text, edit instructions, aspect ratio, template, AI notice position | You |
| Generated media | Preview videos, paid files, still frames | Our video engine, from your inputs |
| Purchases | What you bought, price, date, status. Payment card data goes to Stripe; we do not receive or store your full card number | You, Stripe |
| Attribution data | UTM tags (source, medium, campaign, content, term), click IDs (gclid, fbclid, ttclid), landing page, referrer, time, and the ACM visitor ID (ahoy_visitor cookie value) | Your browser, Agent Content Management |
| Brief form (www.madslope.com) | Your name, work email, company, the run you picked, and your message | You |
| Contact form (www.madslope.com/contact) | Your name, email, organization, the topic, and your message | You |
| Form spam signals | How a form on www.madslope.com was filled in, for example timing and typing | Your browser (recorded by Agent Content Management) |
| Marketing-site visits | IP address, browser and device type, pages, referrer, campaign tags, approximate location (country/city) | Your browser (recorded by Agent Content Management for www.madslope.com) |
| Ad-account connection data | The platform, the connected login's display name and platform user ID, the granted permissions, IDs of the placement-provider profile and account, ad account IDs, names and currencies, YouTube channel ID and name. For a Google Ads (YouTube) or TikTok login that you connect directly, we store the login tokens, encrypted. For a login that you connect through our placement provider (Zernio), the provider holds the tokens | You, the ad platforms, our placement provider |
| Placement data | Ad and campaign IDs, budget, dates, audience settings, landing URL, special-category confirmation time, status, rejection reasons, ad metrics (spend, impressions, clicks, views) | You, the ad platforms through our placement provider |
| Feedback | Ratings and comments | You |
| Device and API access | Device codes and access tokens for the MadSlope command-line tool | You |
| Technical logs | IP address, request data, errors | Your browser and our servers |
| Enforcement records | Reports and complaints, our checks and investigation notes, the actions that we took, and the account, organization, ad and placement details involved | Our system, you, other people |
| Marks in generated media | We may add invisible marks or metadata (watermarks, provenance data) to the media that MadSlope makes, to identify it as AI-generated and as made by MadSlope | Our system |
3. Why we use it
| Purpose | Data | Legal basis (where the GDPR or the UK GDPR applies) |
|---|---|---|
| Answer your brief or contact message: contact you about your commercial needs or your request | Brief form, contact form | Steps before a contract; legitimate interest |
| Find spam in the forms (we use these signals for nothing else) | Form spam signals | Legitimate interest |
| Sign you in and run your account and organization | Profile, organization | Contract |
| Make, store and deliver your ads | Organization, brand assets, briefs, generated media | Contract |
| Take payment and keep financial records | Purchases | Contract; legal obligation |
| Place, pause, stop and report on ads you choose to place | Connection data, placement data, generated media | Contract |
| Measure which marketing channels bring sign-ups and purchases | Attribution data, site visits, cookies | Legitimate interest |
| Keep records of AI notices and platform flags | Placement data, notice settings | Legal obligation; legitimate interest |
| Security, abuse prevention and support | Logs, all categories as needed | Legitimate interest |
| Send service email (invitations, receipts, status) | Email, name | Contract |
| Improve MadSlope, and show examples of our work (Terms §11, §12) | Briefs, brand assets, generated media, feedback | Legitimate interest |
| Train, test and improve the AI models and systems that MadSlope uses or develops, including abuse detection (Terms §11.2, §11.3, §12.3). Not platform data or Google user data (sections 8A, 8B) | MadSlope data: inputs and settings, brand assets, generated media, feedback, and the account and organization that sent the inputs and how they use MadSlope (account, purchase, placement, log and enforcement records) | Legitimate interest |
| Prevent and investigate abuse and fraud; legal, tax and accounting duties; disputes | All categories as needed | Legitimate interest; legal obligation |
We do not sell personal information. We may use inputs and output to improve MadSlope and to train AI models, as the Terms of Service permit. We use data from the ad platforms only as section 8A says.
4. Who we share it with
We share data with service providers that help us run MadSlope (sub-processors). They use it only to provide their service to us. Our sub-processor list names each one, with its purpose and location. The categories are:
| Category | Purpose | Location |
|---|---|---|
| Cloud hosting and database | Run the app and its database | United States |
| File storage | Store brand assets and videos | United States |
| AI video and text providers | Make videos, ideas and company lookups from your brief and assets | United States, Japan, and as described in each vendor's terms |
| Payments | Process card payments | United States, and as described in the vendor's terms |
| Email delivery | Send service email | United States |
| Ad placement provider | Hold ad-account logins and send ads to the platforms | As described in the vendor's terms |
| Website and attribution | Host www.madslope.com, store form messages, record site visits and conversions | As described in the vendor's terms |
| Identity | Google sign-in | As described in the vendor's terms |
The ad platforms (Meta, TikTok, Google) receive your ad and its data when you place an ad. They act under their own terms with you, not as our sub-processors.
Google Fonts supplies the fonts of www.madslope.com. Your browser gets the fonts directly from Google, so Google receives your IP address.
We also share data when the law requires it, to protect rights and safety, to report abuse of our website, or with a buyer of our business.
5. Cookies
We use cookies to provide MadSlope, for security, and to measure which campaigns bring visitors, sign-ups and purchases (attribution). MadSlope is a service for businesses, not for consumers.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
ahoy_visitor | Agent Content Management, for www.madslope.com, on the domain madslope.com (so app.madslope.com can read it) | Recognize a browser across visits; link a sign-up or purchase to the visit | 2 years |
ahoy_visit | Agent Content Management, on the domain madslope.com | Group page views into one visit | 4 hours |
_madslope_session | app.madslope.com | Keep you signed in; security | Until you close the browser |
utm, utm_last | app.madslope.com | First and last campaign tags of a visit to the app (signed, httponly) | 90 days |
| Stripe cookies | Stripe, on its checkout page | Payment and fraud prevention | As described in Stripe's terms |
| Google Fonts request | Google (www.madslope.com) | Load fonts (Google receives your IP address; no cookie) | — |
www.madslope.com sets the ahoy_visitor and ahoy_visit cookies when you visit it. You can block or delete cookies in your browser. If you do, we cannot link your visits to a campaign, sign-up or purchase. If you block the session cookie of the app, you cannot sign in.
6. How long we keep data
MadSlope is a service for businesses. We keep account, organization, brief, brand asset, media, purchase, placement, attribution and log data, and messages that you send us, for as long as we have a business reason to keep them. Business reasons include:
- to provide and improve MadSlope;
- to prevent and investigate abuse and fraud;
- security;
- our legal, tax and accounting duties; and
- disputes and legal claims.
When you close your account or ask us to delete data, we keep MadSlope data: our own records about the account, the organization and the people who used them (identity and account details, email addresses, IP addresses, inputs, generated media, purchase, placement, log and enforcement records, and messages). MadSlope data is not platform data (section 8A). We keep it to enforce our Terms of Service; to prevent and investigate fraud, spam and abuse, including the removal or change of an AI notice or other misrepresentation of AI output; for legal claims; and for our legal, tax and accounting duties. We may also use it to train and improve our systems, including our AI models and abuse detection (Terms §11.2, §11.3, §12.3). Data from the ad platforms follows section 8A, and data from Google APIs (including your Google sign-in email and ID) also follows section 8B.
You can ask us to delete data through the contact form at www.madslope.com/contact (topic "Privacy request (access/delete/correct)"). We will consider each request, and we delete data where the law requires us to. If your business needs different retention or deletion terms, contact us for enterprise terms through the contact form (topic "General").
7. Your rights
Depending on where you live, you can ask to access, correct, delete or get a copy of your personal information, to object to or restrict some uses, and to withdraw consent. California residents have the right to know, delete, correct, and opt out of sale or sharing, and not to be discriminated against for using these rights. People in the EEA or UK can complain to their data protection authority.
To use a right, use the contact form at www.madslope.com/contact (topic "Privacy request (access/delete/correct)"). We may ask you to confirm your identity. We answer privacy requests within 30 days, or sooner where the law requires.
8. Google user data
MadSlope's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use the Google sign-in data only to sign you in and to connect you to your organization. When you connect Google Ads and YouTube, we use the data from these APIs only as sections 8A and 8B say. Section 8B says what Google user data we access, how we use, share, protect and keep it, and how you can delete it.
MadSlope uses YouTube API Services to upload your ads to your YouTube channel and to read the channel's name. The Google Privacy Policy applies to Google's use of your data. In addition to our deletion process (section 8A), you can remove MadSlope's access to your Google data at any time on the Google security settings page. Questions or complaints about our privacy practices: the contact form at www.madslope.com/contact.
8A. Data from the ad platforms
What MadSlope uses. MadSlope is a service for businesses. It uses only the platforms' ad publishing and reporting APIs: the Meta Marketing API (through our placement provider), the TikTok API for Business, the Google Ads API, and the YouTube Data API to upload your ads to your YouTube channel. MadSlope does not access social data: it does not read profiles, friends or followers, posts, messages, likes, or personal data about the people who see your ads. MadSlope is not a consumer or social app.
"Platform data" is the data that we get from Meta, TikTok and Google Ads (YouTube) through these APIs when you connect an ad account or place an ad: login tokens, the login's name and platform user ID, ad account IDs, names and currencies, the YouTube channel ID and name, the platform IDs and status of your placed ads, rejection reasons, and ad metrics (spend, impressions, clicks, views). Our own records about your account, your organization and your use of MadSlope are MadSlope data, not platform data (section 6).
- Use. We use platform data only to place, manage and report on your ads for you, in your MadSlope account, as each platform's terms permit. We do not use platform data to train AI models. We do not sell it, use it for other advertisers, combine it with other customers' data, or use it to build profiles of people.
- Disconnect. Revoke (in your organization's Settings › Ad accounts) disconnects a login. For a directly connected Google Ads (YouTube) or TikTok login, it deletes the tokens at once and asks the platform to cancel them. You can also remove MadSlope in the platform.
- Deletion. You can ask us to delete platform data through the contact form at www.madslope.com/contact (topic "Privacy request (access/delete/correct)"). We delete the login tokens and the platform data. We answer within 30 days, and we delete data from YouTube within 7 days of your request or of a Revoke in MadSlope, and within 30 days after you remove MadSlope's access on the Google security settings page. We also delete platform data when we no longer need it to provide the service, when you no longer have an account, or when a platform's terms require it. Exception: if we have reason to suspect fraud, spam, abuse, or misuse of the AI notice (for example a notice that was removed or changed), we may keep the specific records that we need to investigate it, to act on it, and for legal claims; and we keep data where the law requires us to keep it. We keep only what is needed for that purpose, we restrict access to it, and we delete it when we no longer need it. Our Data Deletion Instructions say what we delete and what we keep.
- Data at the platforms. Deleting data at MadSlope does not delete your ads, videos or data at Meta, TikTok, Google Ads or YouTube. Use the platform to delete them.
8B. How MadSlope handles Google user data
This section covers the data that MadSlope receives from Google APIs with the permissions that you grant: Google sign-in (openid, email), Google Ads (https://www.googleapis.com/auth/adwords), and YouTube (https://www.googleapis.com/auth/youtube.upload, https://www.googleapis.com/auth/youtube.readonly).
MadSlope's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data that we access
| Permission | Data |
|---|---|
| Google sign-in | Your Google account email address and Google account ID; your name, profile picture and Google Workspace domain when Google sends them |
| Google Ads | The IDs, names and currencies of the Google Ads accounts (customers) that your login reaches, and the manager account it reaches them through; for the campaigns that MadSlope creates for you: the campaign, ad group, asset and ad IDs, their status and policy review results, and their metrics |
| YouTube | Your YouTube channel ID and name; for the videos that MadSlope uploads for you: the video ID, the upload and processing status, and the privacy status |
From the Google Ads metrics we store daily totals for each placement: spend, impressions, clicks and views. We do not access other data in your Google account, your Google Ads accounts or your YouTube channel.
How we use it
We use Google user data only:
- to sign you in and to run your MadSlope account (for example to send service email and receipts to your address); and
- at your request, to upload your ad video to your own YouTube channel, and to place, manage and report on that ad in your own Google Ads account.
We do not use Google user data for advertising (including retargeting, personalized or interest-based ads), to build profiles of people, to decide credit-worthiness or for lending, or to train AI or machine learning models.
Who we share it with
We do not sell Google user data, and we do not transfer it to data brokers, advertisers or other information resellers. We transfer it only:
- to the service providers that run MadSlope for us, to provide these features: Build.io (hosting and database), Amazon Web Services (file storage), Mailer To Go (service email, your email address only) and Stripe (payments, your email address only), as listed on our sub-processor page;
- where the law requires it, for security (for example to investigate abuse), or with a buyer of our business after we get your consent.
The videos that we upload and the ads that we place go to Google, in your own YouTube channel and Google Ads account.
How we protect it
We send all data over encrypted connections (TLS). We store your Google login tokens encrypted (Active Record encryption) and never show or log them. Only the members of your organization can see your Google Ads and YouTube data in MadSlope, and only the person who connected a Google login can use or revoke it. Only MadSlope staff who need it to run, support or secure MadSlope can access the data.
How long we keep it, and how to delete it
We keep Google user data while you use the features that need it, and we delete it as section 8A says. Our Data Deletion Instructions say how to disconnect Google Ads and YouTube and how to ask us to delete the data. We delete data from YouTube within 7 days of your request or of a Revoke in MadSlope, and within 30 days after you remove MadSlope's access on the Google security settings page.
9. International transfers
We are in the United States. We and our vendors process data in the United States and the other countries listed on the sub-processor page.
10. Security
We use encryption in transit, access controls and limited staff access. No system is fully secure.
11. Children
MadSlope and www.madslope.com are for businesses. They are not for people under 18, and we do not knowingly collect data from people under 18.
12. Changes
We may change this notice at any time by posting the new version on this page with a new "Last updated" date. Please check this page for changes. We may also tell you of a change in the app or by email.
13. Contact
Online: the contact form at www.madslope.com/contact (topic "Privacy request (access/delete/correct)" or "Legal notice"). Written notices: Aluminum.io, Inc., 313 S State St, Dover, DE 19901, United States.