Privacy Policy

1. Who we are

Nexbhullah LLC operates AdBreakdown OS and is responsible for the personal information described in this policy. References to “AdBreakdown OS,” “we,” “us,” or “our” refer to Nexbhullah LLC and the AdBreakdown OS service.

2. Information we collect

• Account information: your name, email address, authentication records, account role, and profile settings.
• Purchase information: purchaser name and email, amount, currency, Stripe customer and Checkout Session identifiers, purchase status, refunds, disputes, and entitlement status. Stripe processes payment-card details. We do not store your full card number.
• Product information: saved items, preferences, generated work, downloads, and other actions needed to provide your workspace.
• Pakistan payment evidence: local payment method, sender details you provide, transaction reference, claimed amount and time, uploaded receipt image or PDF, file hashes, automated extraction, risk flags, reviewer notes, and the final human decision. We do not ask for or store your wallet PIN, bank password, or one-time code.
• Communication choices: whether you agreed to receive promotional email and when that choice was recorded or changed.
• Technical information: security, server, and diagnostic data such as IP address, browser or device details, and timestamps when generated by our hosting and authentication providers.
• Advertising measurement information: page views, selected ad previews, checkout activity, completed purchases, account registrations, referral URLs, Meta browser identifiers, campaign parameters, IP address, browser details, and hashed contact information used for advertising measurement.

3. How we use information

We use personal information to:

• Create and secure accounts and match purchases to buyers.
• Activate, maintain, refund, or revoke product access.
• Send receipts, access, refund, dispute, security, and support messages.
• Remember saved items and product preferences.
• Prevent fraud, abuse, unauthorized sharing, and security incidents.
• Meet accounting, tax, legal, and regulatory obligations.
• Send product news, research updates, or offers when you have chosen to receive them or when otherwise permitted by law.
• Measure advertising performance, attribute visits and purchases, create advertising audiences, and improve campaigns.

4. Legal reasons for processing

Depending on where you live, we rely on one or more legal grounds: performing our contract with you, complying with legal obligations, pursuing legitimate interests such as security and product operation, and your consent for optional marketing. You may withdraw marketing consent at any time without affecting earlier lawful processing.

5. Service providers and sharing

We share only the information needed for trusted providers to perform services for us. These currently include Stripe for payment processing, Supabase for authentication and data storage, Vercel for hosting and delivery, Resend for product and transactional email, and Meta for optional advertising measurement. Meta may receive browser events through Meta Pixel and server events through Conversions API when you use the public website, create an account, or complete a purchase. These providers process information under their own terms and privacy commitments. We may also disclose information when required by law, to protect legal rights, or as part of a business transaction with appropriate safeguards.

We do not sell personal information or marketing-consent lists.

When Pakistan receipt extraction is configured, OpenAI processes the uploaded evidence to organize visible fields for a reviewer. Requests are sent with model-response storage disabled. Automated extraction never grants access and every local payment decision is made by a human.

6. Retention and security

We retain account and product data while your account is active and for a reasonable period afterward. Billing, refund, dispute, fraud, and tax records may be kept longer when required for legal or operational purposes. When information is no longer needed, we delete, anonymize, or securely isolate it. We use reasonable administrative and technical safeguards, but no internet service can guarantee absolute security.

Local payment receipts are stored in a private bucket and delivered only through short-lived authorized links. We retain them only as long as reasonably needed for payment verification, fraud prevention, accounting, disputes, and legal obligations.

7. International processing

Our providers may process information in countries other than the one where you live. Where required, we and our providers use recognized contractual or legal safeguards for international transfers.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also withdraw consent and complain to your local privacy regulator. Some information may be retained where the law requires it or where it is needed to establish, exercise, or defend legal claims.

You can change your marketing preference in the Account section of your dashboard. See our Marketing Consent explanation.

9. Cookies, Meta Pixel, and Conversions API

AdBreakdown OS uses essential storage and cookies for authentication, security, and core product operation. We also use Meta Pixel in your browser and Meta Conversions API on our server to measure page visits, selected previews, checkout starts, account registrations, and completed purchases.

Browser and server copies of the same event may share a unique event identifier so Meta can recognize one conversion rather than counting it twice. Contact information sent for matching is normalized and cryptographically hashed before transmission. Meta browser identifiers and technical request information may also be included when available.

You can use your browser controls or privacy tools to block or delete cookies and similar technologies. Blocking them may reduce advertising attribution but does not prevent you from purchasing, creating an account, or using the product. Email marketing consent is a separate choice.

Product usage measurement

For paid dashboard members, we measure estimated active time, section visits and daily usage linked to the account email. Both card and local-payment customers are included, independently of email-marketing preferences. This helps the administrator understand which product areas are being used. Only administrators can view customer-level usage reports.

Measurement ignores hidden tabs and stops after 60 seconds without interaction, except while a video is playing in the focused tab. We do not capture typed text, passwords, screenshots, receipt contents or private campaign text. These first-party records are not sent to Meta. OpenAI may process aggregate section totals and user counts for an administrator-requested review, with model-response storage disabled and without customer names, emails or account IDs.

You can disable measurement in Dashboard, Account, Product usage privacy. Disabling it stops collection and deletes your stored usage records without affecting membership. Reports cover the last 30 days; older records are removed during subsequent usage collection or report refresh. Aggregate AI snapshots may remain until replaced, but do not identify customers. This preference is separate from promotional email consent.

10. Children

The service is intended for adults and is not directed to anyone under 18. Please contact us if you believe a minor provided personal information without appropriate authorization.

11. Changes to this policy

We may update this policy when our product, providers, or legal obligations change. The effective date above identifies the latest version. Material changes may also be communicated through the product or by email where appropriate.