Your data in Adsprig
Updated October 5, 2026. Adsprig is operated by Greenlight Publishing.
What we store
Your account details, hashed password, sign-in sessions, saved campaign plans, spending records and action history are stored in Adsprig’s own Cloudflare D1 database. If you choose Google sign-in when it is available, Adsprig stores your Google email, basic profile information and Google account identifier with your account. Sign-in access and refresh tokens are encrypted before storage. Saved advertising service credentials are also encrypted on the server. Other users cannot access your workspace.
When information leaves your workspace
When you choose Google sign-in, Google receives an authentication request and returns your basic account information to Adsprig so we can sign you in. This sign-in requests basic identity details only; it does not request access to Google Drive, Gmail or advertising data. Analyzing a website requests its public pages. Connected search sends your query to the configured search provider. Connecting an advertising service sends your credential to that service to verify access. Submitting an approved campaign sends the reviewed campaign and budget to the advertising provider. Those services have their own privacy policies.
AdSprig connection for ChatGPT and other MCP clients
If you connect AdSprig to a compatible MCP client, the client receives the business details and budget you submit for a campaign preview, or the cash summary you request. Campaign preview inputs are processed to return a hypothetical plan and are not saved by that tool. Cash summaries contain minimized totals from your account’s user-recorded financial events and campaign holds; individual notes are not returned. The client receives the tool result so it can answer your request. AdSprig does not send this information to advertising platforms through these read-only tools. OAuth consent and access records are stored with your account to authorize and revoke this connection. You can disconnect it in Account settings; disconnecting revokes plugin access. The account data and history practices above continue to apply.
Billing
When you choose a paid subscription, Stripe handles checkout, payment details, invoices and cancellation. Adsprig sends Stripe an internal account identifier and the selected plan, and stores Stripe customer and subscription identifiers, payment status and the paid access period. Adsprig does not store your full card number. Stripe processes billing information under its privacy policy.
Research and account email
We store monthly research usage to enforce allowances and provider cost limits. Successful website reports are cached for up to 24 hours and integrated search results for up to 15 minutes, separately for each account. When account email is available and you request verification or password recovery, Cloudflare processes your email address and the time-limited account link to deliver the message.
History and control
Spending history is kept until account data is removed. Corrections append new entries so earlier spending decisions remain traceable. Export your plan or spending history from the workspace. Disconnect an advertising service to remove its stored credential. Disconnecting does not stop campaigns already running at the provider.
How long we keep information
Saved plans, spending and action history, account details, connected-service credentials, and billing identifiers remain in the active account until you request account data removal. Contact support to make a verified deletion request. Session cookies and server sessions expire after seven days; a daily cleanup removes expired sessions and verification records. Account verification links expire after 15 minutes. Website and competitor research cache entries expire after 24 hours and search results after 15 minutes; a daily cleanup removes expired cache entries. Research usage reservations older than three months are removed by the daily cleanup.
For the AdSprig MCP connection, access tokens stop working after five minutes and refresh tokens expire after 30 days. Consent remains recorded until you disconnect the client or revoke access. Disconnecting revokes access; OAuth token records are not removed by the scheduled cleanup and may remain after they expire or are revoked until associated account or client data is removed. The MCP tools do not save campaign-preview inputs or results. Rate-limit counters expire after roughly two minutes and are removed by the daily cleanup.
Cloudflare hosts the application and database and may process request metadata for infrastructure and security operations. AdSprig does not set a separate retention period for Cloudflare operational logs or backups; their handling depends on Cloudflare’s service and configuration. Stripe and other providers handle information they receive under their own policies. AdSprig stores Stripe customer and subscription identifiers and billing status while the account remains active; Stripe retains payment records under its own policy.
Cookies
We use essential cookies for authentication and workspace navigation. This launch does not include advertising trackers.
Optional newsletter
The newsletter link opens Ad Field Notes in Sprigpost. Creating an Adsprig account does not subscribe you or share your workspace with that publication. If you choose to sign up there, Sprigpost handles your consent, confirmation email and unsubscribe requests.
Requests and support
For account recovery assistance, data export or deletion requests, contact main@greenlight-publishing.com. Requests require verification of account ownership.