Privacy Policy

1. Introduction

Re;plus asia .ltd ("we", "our", or "the Company") operates AdEvaluation ("the Service"), an advertising creative review platform. This Privacy Policy describes how we collect, use, store, share, and protect your personal information and Google user data when you use our Service.

2. Data Accessed

Our Service accesses the following types of data:

• Account Information: Email address and name provided during registration for authentication purposes.
• Google User Data: We use Google OAuth 2.0 with the drive.file scope to access your Google Drive files. This scope only permits access to files that you explicitly select through the Google Picker interface. We do not access your entire Google Drive, contacts, emails, or any other Google account data.
• Review Data: The content of files you upload or select for review, and the resulting review outputs generated by our Service.

3. Data Usage

We use the data we access for the following purposes:

• Authentication: Your email address and name are used to create and manage your account.
• Advertising Creative Review: Files you select from Google Drive are downloaded and processed to perform advertising creative reviews. This includes analyzing images, videos, and PDF content for compliance with advertising guidelines.
• AI Processing: File content is sent to Google Gemini API for automated review analysis. The AI processes the content solely for generating review results and does not retain your data.

We do not use your Google user data for advertising, marketing, or any purpose unrelated to the core functionality of the Service.

4. Data Sharing

We do not sell, rent, or trade your personal information or Google user data to any third parties. Your data may be shared only in the following limited circumstances:

• Google Gemini API: File content selected for review is sent to Google Gemini API for AI-powered analysis. This data is processed solely for generating review results and is subject to Google's API Terms of Service.
• Infrastructure Providers: Our Service is hosted on Google Cloud Platform and uses Supabase for database services. These providers may process data as part of their hosting services, subject to their respective privacy policies and data processing agreements.
• Legal Requirements: We may disclose your data if required by law, regulation, or legal process.

We do not transfer Google user data to any other third parties beyond what is described above.

5. Data Storage & Protection

We implement appropriate technical and organizational measures to protect your data:

• All data in transit is encrypted using TLS/HTTPS encryption.
• All data at rest is encrypted using industry-standard encryption provided by our infrastructure providers (Google Cloud Platform and Supabase).
• Google OAuth tokens are stored in encrypted, HTTP-only cookies and are never exposed to client-side JavaScript.
• Access to production systems is restricted to authorized personnel only.
• File data uploaded for review is stored temporarily in secure cloud storage and deleted after processing.

6. Data Retention & Deletion

• Review Results: Review results are retained in your account for as long as your account is active so you can access your review history.
• Uploaded Files: Files uploaded or selected from Google Drive for review are processed temporarily and automatically deleted after the review is complete.
• Google OAuth Tokens: OAuth tokens are stored in session cookies and expire when the session ends. You may revoke access at any time through your Google Account permissions.
• Account Deletion: You may request deletion of your account and all associated data at any time by contacting us at sd@re-plus.asia. Upon receiving your request, we will delete all your personal data, review history, and any stored files within 30 days.

7. Google API Services Compliance

Our use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We only request the minimum scopes necessary to provide the Service's core functionality.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

9. Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your data rights, please contact us:

Re;plus asia .ltd
Email: sd@re-plus.asia