Last updated: 27 October 2026.
Publisher: Christian Pol Peligrino
Contact: christianpolpeligrino1234@gmail.com
Applies to InstaAd - AI Ad Generator, version 1.0.4.
InstaAd handles the OpenAI API key you provide, brand answers and notes, brand and product URLs, selected reference images and nearby ad text, product and logo images, public website text and styles, research sources, editing instructions, generated copy and images, and local creative history. Content you enter or select may contain personal information. InstaAd does not track your general browsing.
InstaAd uses this information to research your selected brand and products, create and revise ad drafts, make mobile adaptations, display saved work, and provide backup and recovery. It does not publish advertisements or manage ad accounts.
Before brand entry or ad capture, InstaAd explains local storage and selected-image capture and asks for your agreement. Ad scanning and capture stay off until you agree to local data use. OpenAI features require a separate, unchecked agreement explaining the data sent and API charges. Opening InstaAd or connecting a key does not start generation. After you enable AI, future captures can start paid generation. You can pause AI and withdraw that consent or remove your key in Settings. Requests already sent may finish and incur charges.
Workspace content, saved API credentials and application settings are encrypted in your Chrome profile with AES-256-GCM. InstaAd automatically generates and manages the local encryption key. Derived key material is stored locally with access restricted to trusted extension contexts. Setup does not require a workspace passphrase, and InstaAd opens automatically after Chrome restarts. Anyone with access to this Chrome profile can open the saved workspace. Encryption does not protect against someone who can access both the profile data and its local encryption key. Older passphrase-protected workspaces retain their encryption key; users may need their previous passphrase once to enable automatic access. An unrecoverable missing key requires restoration from an external backup.
Encryption does not hide all metadata. Encryption parameters and consent versions, file names, file sizes, and browser-managed directory permissions and folder names can remain visible. Extension page content is decrypted while the workspace is unlocked. Existing browser records are migrated and verified before their old active plaintext copies are cleared. An interrupted migration retains its source for a later retry.
After your separate agreement, InstaAd sends relevant reference images and ad text, brand answers, product details and images, researched website content and editing instructions directly to OpenAI over HTTPS. The API key authenticates these requests. Text Responses requests use store:false. That setting does not eliminate all provider retention. OpenAI's applicable terms and data policies govern its processing. API usage is billed through your OpenAI account.
Capturing an ad may fetch its selected image from its source website. Research requests public pages and related assets for the brand and product URLs you choose. Those websites may record network information, including your IP address, under their own policies. Website requests omit cookies and authorization headers. Website scripts are not executed. A temporary redirect listener is limited to an exact request made by the extension and does not monitor unrelated tab traffic.
New workspace ZIP backups and connected folder archives encrypt their content using a separate backup password chosen when saving the file or connecting the folder. This password is required to restore files on another computer. There is no backup-password reset service. The extension retains archive encryption material inside the encrypted local workspace so ongoing folder saves do not require repeated password entry. Older encrypted exports remain readable using their original workspace passphrase. Workspace exports exclude API keys, local workspace and archive encryption keys, browser folder grants and AI consent. Downloaded ad images are ordinary image files for you to use. Older exported backups or folder files are not changed or erased and may be unencrypted. Importing a legacy unencrypted export requires a separate acknowledgment. Imported content is encrypted in the destination workspace. Older unencrypted archive folders are disconnected during migration; choose a new folder for encrypted copies.
Saved data remains in your Chrome profile until removed. Deleted jobs or shared assets may remain for Undo, recovery or other saved work that still references them. Removing a job does not necessarily remove shared research or images. Disconnecting an archive or removing local records does not delete previously exported files. You control those external files separately. Removing local data does not erase provider-held records or completed provider charges.
This extension has no publisher application backend, analytics service, advertising-personalization service or cloud workspace synchronization. InstaAd does not sell user data, use it for unrelated purposes, or use it to determine creditworthiness or make lending decisions. Transfers are limited to the features described above and the purposes you approve. InstaAd follows the Chrome Web Store User Data Policy, including its Limited Use requirements, when using or transferring user data. If you email support, the information you send is used to respond to your request.
For privacy questions, email christianpolpeligrino1234@gmail.com.