Privacy Policy
Last updated: October 3, 2026
This policy explains what Blackmere Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States ("we", "us") collects when you use ReplicateAds: the website and web application at replicateads.com and the services behind them (together, the "Service"). We are the data controller for this data.
The short version
- You give us three things: a video ad to use as a reference, the address of your product's page, and photos of your product. We process them to analyse the reference, plan your ad and generate it.
- Generating an ad uses third-party AI providers. Frames and audio of the reference, text from your product page, your product photos and the script are sent to them to be analysed and to produce pictures, video, voice and music.
- We keep the minimum about you: the email and name you sign up with, what you bought, your credit balance and its history. Cards are held by Stripe; we never see them.
- We do not sell your data, do not show ads in the Service, and do not use your content to train models.
1. What we collect, and why
1.1 Your account
| Data | Where it comes from | Why | Legal basis (GDPR) |
|---|---|---|---|
| Email address, name, the sign-in method you chose, and session cookies | Clerk, when you create an account or sign in | To identify you and sign you in | Contract |
| Your credit balance and every movement of it (free credits, purchases, analyses, reservations, charges, refunds), with the Stripe payment identifiers | Stripe's notifications and our own ledger | To run the credit balance and keep the books | Contract; legal obligation (accounting) |
| Whether the account is suspended or is an administrator | Us | To administer accounts | Contract |
1.2 What you upload and what we make
| Data | Why | Kept for |
|---|---|---|
| The reference ad you upload (a video file) | To analyse it and to show it beside your ad | Until you delete the ad or close the account. An upload that is never used for an ad is deleted after 24 hours |
| The address of your product page, the text and images we read from it, and the brief written from them | To know what your ad may say and what your product looks like | Until you delete the product or close the account |
| Product photos you upload | So shots of your product are drawn from the real pack | Until you delete the photo, the product or the account |
| The analysis, the plan, the pictures, clips, voice and music made for an ad, and the finished video | This is the product | Until you delete the ad or close the account |
| Records of each ad: status, timing, what it cost, any error | To run the queue, charge credits and support you | With the ad; billing totals are kept as ledger rows (section 4) |
People in a reference ad. The analysis describes what it sees and hears: that a person is on screen, what they look like, what they say. It does not identify people by name, does not match faces against any database, and does not create face templates or voiceprints. The ad made for you uses a new presenter and a new voice, not the likeness or voice of anyone in the reference. You are responsible for having the right to upload the reference (Terms of Service, section 3).
1.3 Payments
Purchases are made on Stripe's checkout page. Stripe receives your card details, billing address and email; we receive a confirmation, the amount, and Stripe's identifiers for the payment. We never see or store your card number.
1.4 Logs
Our hosting providers record each request (IP address, browser, the page or API route, the time) so we can keep the Service running, find faults and stop abuse. Legal basis: legitimate interest.
1.5 Email and support
Clerk sends the emails needed to sign you in (verification codes). Stripe sends receipts. We may email the address on your account about your account, a change to the terms or a service issue. We send no marketing email unless you ask for it. If you write to us, we keep the correspondence so we can answer you and see the history of the account.
2. Who processes your data
Third parties that handle personal data or your content on our behalf, and what they get. Each is bound by its data processing terms to act on our instructions.
| Processor | What they process | Purpose | Location |
|---|---|---|---|
| Clerk, Inc. (clerk.com) | Email, name, sign-in method, sessions, sign-in emails | Authentication and account identity | United States |
| Stripe, Inc. (stripe.com) | Card details, billing address, email, purchase history, receipts | Payments | United States; Stripe's global infrastructure |
| Railway Corp. (railway.com) | Everything the Service stores: the account database, the queue, request logs, your uploads and the ads made for you | Hosting the API, the workers, the database and file storage | United States |
| Vercel, Inc. (vercel.com) | Request logs (IP address, browser, path) for the website and the web application | Hosting the website and the web application | United States |
| AI model providers | Frames and audio of the reference ad, text and images from your product page, your product photos, the script and the pictures made along the way | Analysing the reference, writing the plan, and generating pictures, video, voice and music | The United States and other countries where a provider operates |
We use several AI model providers and change them as the technology changes. Write to support@replicateads.com for the current list; we will send it. We add a new kind of processor to this table before it receives data.
3. Cookies
| Name | Set by | What for | Lifetime |
|---|---|---|---|
__session, __client_uat, __clerk_… | Clerk | Keeping you signed in | Up to 7 days |
__stripe_mid, __stripe_sid | Stripe, on its checkout page | Fraud prevention for the payment | 1 year, session |
These cookies are essential to signing in and paying. The Service sets no advertising cookies and no analytics cookies.
4. How long we keep things
| Data | Retention |
|---|---|
| Uploads never used for an ad | 24 hours |
| Reference ads, products, plans and finished ads | Until you delete them, or within 30 days of the account being closed |
| Account and balance | While the account is open, then deleted within 30 days of closure |
| Credit ledger and purchase records | 7 years after the transaction, for tax and accounting law, with the account reduced to what those records need |
| Request logs | At most 30 days |
| Support email | 3 years after the last message |
| Copies held by AI model providers | For as long as each provider's terms set for processing a request; we send your content to them to process, not to keep |
5. Where your data is, and international transfers
We are a US company and our hosting is in the United States. If you use ReplicateAds from the EU, UK or Switzerland, your data is transferred to the United States, and content sent to an AI model provider may be processed in another country where that provider operates. Where required, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) in each processor's data processing terms, and, where the processor is certified, on the EU-US Data Privacy Framework and its UK and Swiss extensions.
6. Your rights
Wherever you live, you can ask us to:
- see the data we hold about you, and get a copy;
- correct it;
- delete it. You can delete an ad, a product or a photo yourself in the Service; closing the account, and anything else, by writing to us;
- object to processing based on legitimate interest, and we will stop unless we have a compelling reason;
- restrict processing while a dispute is settled;
- port the data you gave us in a machine-readable form.
Write to support@replicateads.com from the email on your account. We answer within 30 days (one month under GDPR, 45 days under California law). You may complain to your data protection authority; in the EU that is the authority of your country, in the UK the ICO. We have not appointed a representative in the EU or the UK; write to us directly.
California residents. We do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes beyond what the CCPA allows. The categories collected in the last 12 months are those in section 1: identifiers, commercial information, internet activity, and audio and visual information (the files you upload and the ads made for you). We do not discriminate against you for exercising your rights. An authorised agent may act for you with written permission.
7. Security
Data moves over TLS everywhere. Cards never touch our servers. Files are stored privately and reached through links that expire after an hour. Access to the account database and the administration pages is limited to Blackmere Labs staff who need it. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the regulators the law requires, without undue delay.
8. Children
The Service is not for anyone under 18 (or the age of majority where they live), and we do not knowingly collect data from children. If you think a child has an account, write to us and we will close it.
9. Changes
When this policy changes materially we email the address on your account and note the date at the top. Continuing to use the Service after the change takes effect means you accept it; the previous version is available on request.
10. Contact
Blackmere Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. support@replicateads.com