Security: how we protect your data

MakePerfectAds protects your data with encryption in transit, private per-user storage and database rules that keep each account's work separate. This page describes the security measures in place today and how to report a vulnerability responsibly. For what we collect and how long we keep it, see the privacy page; for processors, see subprocessors.

How we protect your data

We apply a small set of practical safeguards across the service.

• Encryption in transit. Traffic to the website and app is served over HTTPS.
• Private file storage. Files are stored in per-user folders, so your uploads and generated videos are kept separate from other accounts.
• Row-level security. The database uses row-level security, so each account sees only its own projects and assets.
• Server-side admission checks. Access is checked on the server for every page and request, not just in the browser.

How our AI processor handles paid requests

MakePerfectAds uses Google's Gemini API to plan ads and generate video, voice and music. Our generation runs on paid Gemini API quota, verified with real paid runs in October 2026.

Google's current Gemini API Additional Terms of Service state that for Paid Services, "Google doesn't use your prompts (including associated system instructions, cached content, and files such as images, videos, or documents) or responses to improve our products," and processes them under Google's data processor terms. The same terms say Google logs prompts and responses only for a limited period, solely to detect and prevent violations of its Prohibited Use Policy and to meet legal or regulatory requirements. This is distinct from Google's Unpaid Services, where submitted content may be used to improve Google's products (source: Gemini API Additional Terms of Service, checked: 2026-10-18).

Responsible disclosure

If you find a security vulnerability, please report it to us privately so we can fix it before it is disclosed. Email [[support email to be confirmed]](mailto:[support email to be confirmed]); this address is also listed in our /.well-known/security.txt. Please give enough detail to reproduce the issue, and allow us reasonable time to respond and remediate before any public disclosure.

A note on AI output

AI output is generated from what you provide, and you review it before publishing. The automatic checks on a finished video cover technical quality, facts and links, and language; they do not judge persuasiveness or legal compliance. Treat the result as a draft to approve, not a guarantee. See how it works for the review step.

Frequently asked questions

Is my data encrypted?

Traffic to the website and app is encrypted in transit over HTTPS. Files you upload and videos we generate are held in private per-user storage, and the database uses row-level security so each account can see only its own projects and assets. Access is also checked on the server for every page and request.

Does Google use my content to train its models?

We send generation requests to Google's Gemini API on paid quota. Google's current Gemini API Additional Terms of Service state that for Paid Services, Google does not use your prompts or responses to improve its products, and logs them only briefly to enforce its Prohibited Use Policy and meet legal requirements (checked: 2026-10-18). See the source terms.

How do I report a security problem?

Email [[support email to be confirmed]](mailto:[support email to be confirmed]), which is also published in our /.well-known/security.txt. Include steps to reproduce the issue and please allow us reasonable time to investigate and fix it before any public disclosure. For privacy and data-handling questions, the privacy page has more detail.