AdAI Image Ads: MCP privacy supplement

Effective 22 October 2026. Service operator: AdAI, Inc.

This supplement explains how the AdAI Image Ads connection for Claude and ChatGPT handles data. Read it with the AdAI Privacy Policy and Terms of Use. It applies to accounts on adclone.joinad.ai.

Data sent to AdAI

Your assistant sends the tool arguments needed for your request. These can include a product brief, required copy, brand rules, supplied images, project identifiers, and requested changes. The tools do not request a complete chat transcript. Tool arguments can contain information from your conversation. Do not include personal or confidential information that is not needed for the creative.

AdAI uses your account ID and email to authenticate the connection. We store OAuth client details and callbacks, hashes of authorization codes and tokens, connection records, and request receipts. Receipts contain an argument fingerprint and linked identifiers used to prevent duplicate jobs and enforce usage limits.

Use, processing, and results

We save briefs, supplied assets, image projects, revisions, job results, and previews to provide editing, job recovery, and exports. Generation uses AdAI's configured creative model providers. Application hosting, account and database services, storage, and job orchestration also process the data needed to operate the service. These include Microsoft Azure and Supabase. The connected assistant is provided by Anthropic or OpenAI under its own terms.

Requested project details, job status, previews, and export links are returned to your assistant. Your connection can access only projects owned by the signed-in AdAI account. Read access permits project inspection and exports; write access also permits new ads and variations. The consent page displays the requested access and lets you approve or cancel.

Retention and deletion requests

Saved projects and service records persist to support saved work, job recovery, security, and usage controls. This MCP beta has no scheduled automatic purge of project, OAuth, or request records. Token expiration is an access limit, not a record-deletion schedule.

For a data-access or deletion request, contact kevin@joinad.ai from your account email and identify the account or projects concerned. We verify ownership before handling the request. Do not send passwords, access tokens, or private export links. Deletion requests require support handling; revocation alone does not delete saved work. This supplement does not promise an immediate purge of backups or records that must be retained for security or applicable legal obligations.

Connection and export controls

You can revoke access at MCP connections. Revocation blocks future use of that connection and its export links. It does not delete the projects it created.

Authorization codes last five minutes, access tokens one hour, and rotating refresh tokens 30 days. Export links last 15 minutes and permit at most three download attempts. Anyone with an active export link can use it. Editable JSON exports can include embedded source assets. Keep private links and downloaded files private.

Service limits and support

The connection creates editable still-image design assets. It does not publish ads, buy media, manage campaigns, or create video. Generation uses AdAI provider credits; a Claude or ChatGPT subscription does not cover those costs. Review generated copy and designs before use and supply only assets you have permission to use.

For product, privacy, or security help, contact kevin@joinad.ai, or AdAI, Inc., 30 Irving Pl, New York, NY 10003. See the connection guide for setup and limits.