Who we are
Natives is an advertising research service. This policy applies when you use natives.ad or app.natives.ad, create an account, join a workspace, use the browser extension, contact us, or open a shared research link. Natives is responsible for the personal data described in this policy.
For legal, privacy, billing, or data-rights requests, email general@natives.ad. We may ask you to verify your identity before acting on an account or data request.
Data we handle
- Account data, including email address, display name, authentication method, workspace membership, and access role.
- Workspace data, including saved ads, notes, annotations, briefs, preferences, and research links you choose to share.
- Billing data, including subscription status, plan, Stripe customer and transaction references, invoices, and payment status. Natives does not receive or store full card numbers.
- Affiliate data, including applications, referral links and codes, clicks, attribution, referred subscription status, commission records, payout details, tax information, and compliance reviews.
- Technical and security data, including IP address, browser and device information, request logs, session data, and security events.
- Public advertising data collected from public ad libraries, advertiser pages, landing pages, and approved data providers.
Browser extension
The extension reads the active page only while its sidebar is open. Platform, product, technology, and page-timing signals are processed in your browser. If you connect a Natives personal access token, the extension sends the current site domain to Natives to find matching research. The token is stored in browser extension storage. The extension does not collect browsing history.
On Meta Ad Library pages, capture reads visible ad cards only after you select Capture to Natives. Captured material is sent to the Natives import screen for your review.
Optional product analytics
With your consent, we record page visits, navigation, feature use, search and save actions, media playback, sharing and export actions, sign-in outcomes, subscription steps, errors, and time spent using Natives. We use a random visitor and session identifier, broad device and referral categories, public ad and brand identifiers, and, when signed in, your account identifier to understand adoption and repeat use.
Analytics does not include private note or document text, form contents, passwords, payment details, full URLs, or recordings of your screen. We store these events in our own Supabase database. Detailed events are kept for up to 30 days and aggregate counts for up to one year. Collection limits can reduce coverage. Public advertising data and essential billing, security, and service records are handled separately.
Choose Allow analytics or Reject optional when prompted. You can reopen Privacy choices from the Cookies page or app Settings. Rejecting removes the analytics identifier and its detailed visitor events and stops future optional measurement in that browser. Anonymous aggregate counts already produced remain. We honour Global Privacy Control and Do Not Track signals for optional analytics.
Why we use it
- provide accounts, workspaces, research, exports, and support;
- authenticate users and protect accounts, workspaces, and links;
- process subscriptions, payments, cancellations, and invoices;
- operate the affiliate programme, attribute referrals, prevent fraud, calculate commissions, and make payouts;
- secure, operate, measure, and improve the service; and
- analyse public advertising material and produce research signals.
Our legal bases are performance of our agreement with you, legitimate interests in operating and protecting Natives, compliance with legal obligations, and consent where the law requires it.
Service providers and sharing
We use Vercel for hosting, Supabase for database, storage, and authentication, Stripe for payments and subscription management, and Resend for transactional email. We also use infrastructure, security, background-job, and public advertising-data providers needed to run the features you use. These providers receive only the data needed to provide their service.
Workspace content is visible to authorised workspace members. Anyone with an active research link can view the specific version you chose to share. We may disclose data when required by law, to protect users or the service, or in connection with a merger, financing, or sale. We do not sell personal data.
Sign-in and payments
You can sign in with email and password or an email link. If enabled, you can also choose a supported social sign-in provider such as Google or Apple. The provider receives the information needed to complete the sign-in flow and may provide us with your account identifier and email address.
Stripe processes card payments and manages subscription billing under its own privacy policy. Stripe may process payment and fraud-prevention data as an independent controller or service provider, depending on the processing involved.
If you join the affiliate programme, a payout provider may process identity, bank, tax, and transaction information needed to pay you. Referred customers do not receive the affiliate's payout or tax information. Affiliates receive reporting about attributed activity, not a referred customer's payment details or private workspace data.
International transfers, retention, and security
Some providers may process data outside the United Kingdom. Where required, we rely on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. You can request information about the applicable safeguard using the contact below.
We keep account and workspace data while the account is active and for a limited period afterwards for recovery, security, disputes, tax, and legal obligations. Saved research is retained until you remove it or ask us to close the workspace. Backups expire on their normal rotation. We use access controls, encryption in transit, private storage, tenant-level isolation, and security logging.
We retain affiliate payment and tax records for the period required by applicable accounting and tax law. Referral and fraud-prevention records may be retained for the programme term and a reasonable period afterwards to resolve disputes and enforce programme rules.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive your personal data, and to object to certain uses or withdraw consent where we rely on it. You can also complain to the UK Information Commissioner's Office. Contact us to make a request.
For legal, privacy, billing, or data-rights requests, email general@natives.ad. We may ask you to verify your identity before acting on an account or data request.
Automated analysis and children
Natives may automatically classify advertising material and estimate commercial signals. These outputs concern advertising material and are not used to make legal or similarly significant decisions about people. Natives is intended for people aged 18 or over.