Privacy Policy

The short version: we collect what you give us and a little about how you use the site, we use AI providers to power some features, we do not sell your information, and you can ask us to delete what we hold. The rest of this page is the detail behind that.

1. Who we are

Ad Zombies, LLC (“Ad Zombies,” “we,” “our,” or “us”) operates adzombies.com and the tools on it. We are the controller of the personal information described here. Reach us at .

2. What we collect

Information you give us

• Contact details — name, email, phone, company, and whatever you write in a form, a booking, or an ad request.
• Assessment answers — your responses to the Reanimation Assessment and the email address you give to see your result.
• Chat and voice — what you type to the assistant on this site, or say to it in voice mode.
• Uploads — product photos, logos, reference images, and files you attach to an ad request.
• Billing details — handled by Stripe. We see your email, what you bought, and the last four digits and card brand. We never receive your full card number.

Information collected automatically

• Basic request data — IP address, browser and device type, pages viewed, and timestamps, kept by our hosting provider for security and reliability.
• Which page you had open when you used the chat assistant, so a conversation makes sense in context.
• A random visitor ID for chat, stored in your browser only if you accept the cookie banner (see Section 4A), and sign-in cookies for tools that require an account.

Information about a website you ask us to scan

If you give the assistant a URL, we fetch that page and request a performance score for it. We store the result against that address for up to seven days so the same site gives the same answer, and so we are not re-running a heavy test needlessly. This looks only at publicly visible pages.

3. How we use it

• To answer you, book calls, prepare proposals, and deliver the work.
• To run the self-serve tools, including generating ads from what you upload.
• To take payment, manage subscriptions, and handle failed payments.
• To send marketing email, where you have opted in. Every one has an unsubscribe link, and we honor it.
• To review chat transcripts, while we still have them, so the assistant gets better, and to spot where it gave a wrong or unhelpful answer. Transcripts are deleted after 15 days (see Section 4A).
• To keep the site secure, prevent abuse, and meet our legal obligations.

Where the GDPR or UK GDPR applies, we rely on: contract (to deliver what you bought), consent (marketing email and non-essential cookies), legitimate interests (security, improving the service), and legal obligation (tax and accounting records).

4. AI processing — what actually happens

Several features send your input to AI providers, and we would rather be specific about it than vague:

• The chat assistant sends your messages to Anthropic to produce a reply. We also store the transcript in our own content system so we can review how the assistant is performing.
• Voice mode streams your speech to Google (Gemini) to be understood and spoken back.
• One Take sends your uploaded photos and brief to OpenAI and Anthropic to generate the ad image and copy.

These providers process this data to return a result to us. Under our agreements with them, they are not permitted to use it to train their general-purpose models. Even so, please do not type passwords, card numbers, health details, or anything else genuinely sensitive into the chat assistant — it is a sales assistant on a public website, not a secure channel.

4A. Zach, our chat assistant: what we save

Zach is the chat assistant on this site. You can type to Zach or talk to Zach. Here is what we keep from those conversations.

• Transcripts: we save your conversation as written text. If you talk, your voice is turned into text first. We delete the raw transcript automatically after 15 days.
• A summary: when a conversation ends, an automated summary is made of what you needed and any details you chose to share. We keep the summary for up to 90 days, then delete it.
• A random visitor ID: if you accept the cookie banner, we store a random ID in your browser for up to 90 days. It lets Zach recognize you when you come back and pick up the conversation. It works on this site only, and we do not use it to track you on other sites.
• If you ask us to contact you: if you give an email address or phone number and ask to be contacted, we pass the summary to the Ad Zombies team as a lead. It is kept with your contact record.
• Where it is kept: transcripts and summaries are stored with our content provider, Sanity (see the table in Section 6).

Your choices. If you do not accept the cookie banner, no visitor ID is stored and Zach will not remember you. The chat still works. If you did accept, clear this site’s data in your browser and the random ID is removed. You can also ask us to delete your chat data. Email .

5. Cookies and tracking

We use a small number of cookies. Essential ones keep you signed in and remember your cookie choice; the site does not work properly without them, so they are always on. The random ID that lets Zach remember you when you come back is not essential. It is stored only if you accept the cookie banner (see Section 4A).

We use Google Tag Manager to run Google Analytics 4, and only if you accept the cookie banner. Nothing from Google loads, and no request goes to Google, until you say yes. If you say no, it never loads. If you say yes and change your mind later, choose “Cookie Settings” in the footer and select “No Thanks”: the tracker stops immediately and we clear its cookies.

When it is on, Google Analytics records the pages you view, how you arrived (for example a search or a link), your approximate location, and your device and browser, using two first-party cookies (_ga and _ga_RJWHS05758). It also records that certain things happened: that a form was sent, a call was booked, checkout was opened, or a phone number or email link was clicked. It records that the action happened, not what you typed. We strip personal details out of the page address before it is sent, keeping only campaign parameters such as utm_source. We have turned off Google signals and ad personalization, so this data is not used to build advertising profiles.

We also run the Meta (Facebook/Instagram) advertising pixel, and only if you accept the cookie banner. Unlike Google Analytics, its purpose is advertising: it tells Meta which pages you viewed and which actions you took on this site, so we can measure and target our own ads on Facebook and Instagram. It sets its own cookies (_fbp, and _fbc if you arrived by clicking one of our Meta ads) and shares the events described above with Meta for that purpose. Because ad blockers often stop the pixel, our server sends Meta the same event as well, with your IP address and browser type, and the two are marked with a shared ID so Meta counts them once. When you send a form or book a call, the server also sends Meta a one-way hashed (scrambled) version of the name, email address and phone number you entered, so Meta can match the event to an ad account without receiving the readable values. This is cross-context behavioral advertising sharing under California law — see “California residents” below for how to opt out. Choosing “Cookie Settings” in the footer and selecting “No Thanks” stops it, the same as Google Analytics.

Neither tracker is ever loaded on the private pages you reach by a personal link, such as proposals, the admin area, and account downloads.

6. Who we share it with

We do not sell your personal information. The one exception to sharing it for advertising purposes is the Meta pixel described in Section 5, which operates only if you accept the cookie banner and which you can opt out of at any time through it. We use the service providers below to run the business. Each handles data only to provide its service to us.

Provider	What it does for us
Vercel	Website hosting and delivery
Sanity	Content management; stores chat transcripts and summaries, proposals, scan results
Neon	Database for One Take accounts, subscriptions, and generation history
Stripe	Payments, subscriptions, and billing management
Anthropic	AI for the chat assistant and ad copy
OpenAI	AI image generation for One Take
Google (Gemini)	Voice mode — live speech recognition and synthesis
Resend	Sending transactional and marketing email
Google	Calendar booking, and page-performance scoring for scans
Google (Tag Manager and Analytics)	Measuring which pages are visited and which actions are taken, only if you accept cookies
Meta (Facebook/Instagram)	Measuring and targeting our advertising, only if you accept cookies
Zoom	Creating the meeting link for a booked call

We may also disclose information if the law requires it, to protect our rights or someone’s safety, or to a buyer if the business is sold — in which case this policy continues to apply until it is replaced and you are told.

7. How long we keep it

• Chat transcripts (text, and voice turned into text): deleted automatically after 15 days.
• Chat summaries: up to 90 days, then deleted. If you asked us to contact you, the summary is also kept with your contact record.
• Zach’s random visitor ID: stored in your browser for up to 90 days, and only if you accepted the cookie banner.
• Website scan results — up to 7 days.
• Ad requests and uploads — for the life of the engagement plus 12 months.
• Account and generation history — while your account is active, plus 12 months after it closes.
• Marketing contacts — until you unsubscribe, plus a permanent record of the unsubscribe itself so we do not email you again by mistake.
• Billing and tax records — as long as the law requires, generally 7 years.

8. Security

Everything is served over HTTPS. Sign-in uses signed session cookies and codes sent to your email rather than stored passwords. Payment card data never touches our servers. We limit who internally can see client data. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects you, we will tell you as the law requires.

9. Your rights

Wherever you live, you can ask us to access, correct, delete, or export the personal information we hold about you, and you can opt out of marketing email at any time. Email and we will respond within 30 days. We will not treat you differently for asking.

California residents. Under the CCPA/CPRA you have the right to know what we collect and why, to delete it, to correct it, to opt out of sale or sharing, and to limit the use of sensitive personal information. We do not sell personal information. We share it for cross-context behavioral advertising only through the Meta pixel described in Section 5, only if you accepted the cookie banner, and you can opt out of that sharing at any time by choosing “Cookie Settings” in the footer and selecting “No Thanks.” We do not knowingly share information for anyone under 16. You may use an authorized agent.

EEA and UK residents. You additionally have the right to object to or restrict processing, to withdraw consent at any time, and to complain to your data protection authority. Our providers are largely in the United States; those transfers rely on Standard Contractual Clauses or an equivalent safeguard.

10. Children

This site is meant for businesses and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has given us information, write to and we will delete it.

11. Changes to this policy

When we change this policy we update the date at the top. If a change is significant — a new category of data, a new purpose, or a new kind of sharing — we will say so on the site before it takes effect.

12. Contact

Ad Zombies, LLC
1410 West Auto Drive, Tempe, Arizona 85284
Privacy: · Everything else: