Privacy Policy

Last Updated: June 12, 2026

1. INTRODUCTION

This Privacy Policy describes how XYZ AI Inc (“Claude Code Ads,” the “Company,” “we,” “us,” or “our”) collects, stores, uses, and shares (“processes”) your information when you use our services (the “Service”), including when you:

visit our website at claudecodeads.com or any website of ours that links to this Privacy Policy;
install or use the Claude Code Ads browser and editor extension (the “Extension”), which displays a single line of sponsored text in the Claude Code command-line interface and credits you a share of the resulting advertising revenue (if you do so, you are a “Publisher”); or
purchase advertising impressions through the Service (if you do so, you are an “Advertiser”).

We are a corporation registered in the United States with our registered office at 360 Central Ave, Suite 800, St Petersburg, FL, 33701. Claude Code Ads is an independent service. We are not affiliated with, endorsed by, or sponsored by Anthropic, PBC, the publisher of Claude Code, and we do not send your personal information to Anthropic or receive personal information about you from Anthropic.

Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use the Service. If you have any questions or concerns, contact us at legal@xyzai.io.

2. INFORMATION WE COLLECT

Information you provide to us

Account information.When you create an account, authentication is handled by our identity provider, Clerk. We receive and store your name (if provided), email address, and a unique account identifier. Your password and other login credentials are managed by Clerk and are never stored on our servers. You can review Clerk's privacy notice at clerk.com/legal/privacy.

Advertiser and payment information. If you purchase advertising, we collect the campaign details you submit (advertisement text, destination link, bid, and contact email). Payments are processed by Stripe. We never receive or store your full card number, CVC, or other payment instrument details; Stripe handles those directly and provides us only with transaction confirmations and limited billing metadata. You can review Stripe's privacy notice at stripe.com/privacy.

Payout information.If you are a Publisher and request a payout, we collect the PayPal email address you provide so that we can send your earnings. Payouts are delivered through PayPal, whose handling of your information is described in PayPal's privacy notice at paypal.com/us/legalhub/privacy-full.

Communications. If you contact us for support or otherwise, we collect the contents of your message and your contact details.

Information collected by the Extension

The Extension is designed to collect the minimum information needed to serve advertisements and credit your earnings. When you run the Extension, it transmits to our servers:

Ad delivery events — when a sponsored line is rendered, becomes viewable, remains visible (a “view tick”), or is clicked, together with the identifier of the advertisement and campaign involved, the surface it appeared on, the visible duration, and a timestamp;
A random device identifier generated locally by the Extension and stored on your machine, used to attribute impressions to an installation and to prevent fraud. It is not derived from your hardware and does not identify you personally unless you sign in;
Version information — the Extension version and a host environment label; and
Authentication tokensfor your account, if you sign in, which are stored in your editor's secret storage.

The Extension determines whether a Claude Code session is active by checking the file modification times of transcript files on your own machine. This check happens entirely locally: the Extension never reads, collects, or transmits your source code, your prompts, your AI conversations or output, or the contents of any of your files. It modifies only documented Claude Code configuration settings in order to display the sponsored line, and includes a restore function that reverts those settings and removes the files it created.

Information collected automatically

Like most online services, we automatically collect certain technical information when you visit the website or when the Extension communicates with our servers. This includes your IP address, browser and device characteristics, operating system, referring URLs, and the dates, times, pages, and endpoints accessed. This log and usage data is needed to operate and secure the Service, to detect and prevent fraudulent or invalid ad activity, and for internal analytics. We do not collect precise geolocation data, and we do not process sensitive personal information (such as racial or ethnic origin, health data, or biometric data).

3. HOW WE USE YOUR INFORMATION

We process your information for the following purposes, depending on how you interact with the Service:

To provide the Service — creating and managing accounts, serving advertisements through the Extension, operating the advertising auction, and displaying dashboards and campaign statistics;
To calculate and pay earnings — attributing qualifying impressions and clicks to Publisher installations, accruing revenue share, and processing PayPal payouts;
To process advertising purchases — handling Stripe checkout, activating paid campaigns, and managing refunds, disputes, and chargebacks;
To moderate advertising content — reviewing submitted advertisements with automated and human moderation before and after they go live;
For security and fraud prevention — detecting artificial, automated, or otherwise invalid impressions, clicks, or session activity, and protecting the Service, our users, and advertisers;
To communicate with you — responding to support requests and sending service-related messages such as payout notifications;
To improve the Service — analyzing aggregate usage trends and diagnosing problems; and
To comply with law — meeting our legal, tax, and accounting obligations and enforcing our Terms of Service.

We do not sell your personal information, and we do not use your personal information to build advertising profiles about you. The advertisements served through the Extension are not targeted using your personal information; campaign placement is determined by an open auction.

4. LEGAL BASES FOR PROCESSING

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar requirements, we process your personal information only when we have a valid legal basis to do so:

Performance of a contract — most of our processing is necessary to provide the Service you have signed up for, including serving advertisements, accruing earnings, processing purchases, and sending payouts;
Legitimate interests — we process limited technical and usage information to secure the Service, prevent fraud and invalid ad activity, and understand and improve how the Service is used, where those interests are not overridden by your rights and freedoms;
Legal obligations — we may process your information to comply with applicable law, such as tax and accounting requirements, or to respond to lawful requests from public authorities; and
Consent — where we rely on your consent for a specific purpose, you may withdraw it at any time by contacting us, without affecting the lawfulness of processing before the withdrawal.

We share personal information only as described below. Each service provider processes information on our behalf under its own contractual and legal obligations:

Clerk — authentication and identity management for the website and the Extension sign-in flow;
Stripe — payment processing for advertising purchases; Stripe receives the payment details you enter at checkout;
PayPal — delivery of Publisher payouts to the PayPal email address you provide;
Hosting and infrastructure providers — the Service is hosted on Vercel, and our database is hosted on Supabase, both in the United States;
Moderation providers — the text of submitted advertisements (not Publisher data) is sent to an automated moderation service before a campaign can go live;
Email delivery providers — we use a transactional email service to send operational messages, such as payout request notifications.

We may also disclose personal information:

For legal reasons — if required to do so by law or in response to valid requests by public authorities, or where disclosure is necessary to enforce our Terms of Service, protect our rights and property, or protect the safety of our users or others;
In business transfers — in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company; and
With your consent — for any other purpose disclosed to you at the time we collect the information.

For clarity: we do not share your personal information with Anthropic, PBC, and we do not share Publisher personal information with Advertisers. Advertisers see only aggregate delivery statistics for their campaigns.

6. COOKIES AND SIMILAR TECHNOLOGIES

The website uses cookies and similar technologies that are necessary for the Service to function — primarily the session cookies set by Clerk to keep you signed in and to protect your account. We do not use third-party advertising or cross-site tracking cookies on the website.

Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies, but if you do, parts of the Service that depend on being signed in may not work.

7. DATA RETENTION

We keep your personal information only for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). In general:

account information is retained for as long as your account is active;
ad event and earnings records are retained for as long as needed to calculate, audit, and pay revenue share and to investigate invalid activity; and
transaction and payout records are retained as required by tax and accounting law.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if that is not possible (for example, because it is stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

8. HOW WE KEEP YOUR INFORMATION SAFE

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the personal information we process, including encryption of data in transit, access controls, and delegation of credential and payment handling to specialized providers (Clerk and Stripe). However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that hackers, cybercriminals, or other unauthorized third parties will never be able to defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from the Service is at your own risk.

9. CHILDREN'S PRIVACY

The Service is intended for users who are at least 18 years old, and we do not knowingly collect data from or market to anyone under 18 years of age. By using the Service, you represent that you are at least 18. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from anyone under 18, please contact us at legal@xyzai.io.

10. YOUR PRIVACY RIGHTS

Depending on where you live, you may have some or all of the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you;
Correction — request that we correct inaccurate or incomplete information;
Deletion — request that we delete your personal information and close your account;
Restriction and objection — request that we restrict, or object to, certain processing of your information; and
Portability — where applicable, request your information in a structured, commonly used, machine-readable format.

To exercise any of these rights, email us at legal@xyzai.io from the email address associated with your account, or contact support@claudecodeads.com. We may need to verify your identity before acting on a request, and we will respond in accordance with applicable data protection laws. We will not discriminate against you for exercising your privacy rights. Note that we may retain certain information after an account deletion where necessary to prevent fraud, complete pending transactions, resolve disputes, enforce our Terms of Service, or comply with legal requirements.

You can also stop the Extension's data collection at any time by disabling or uninstalling it; its restore function reverts the Claude Code settings it modified and removes the files it created on your machine.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority.

11. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), provides you with specific rights regarding your personal information, including the rights to know, access, correct, and delete personal information we have collected about you, exercisable as described in Section 10 above.

In the preceding twelve (12) months, we have collected the following categories of personal information as described in Section 2: identifiers (such as name, email address, IP address, account identifiers, and the Extension's random device identifier); commercial information (advertising purchases, earnings, and payout records); and Internet or other network activity (log data and ad delivery events). We collect this information directly from you and automatically through your use of the Service, and we disclose it to the service providers described in Section 5 for business purposes only.

We do not sell or share (as those terms are defined in the CCPA) personal information, and we have not done so in the preceding twelve (12) months. We do not use or disclose sensitive personal information, and we do not knowingly collect personal information of consumers under 16 years of age.

California's “Shine The Light” law (Civil Code Section 1798.83) permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. You may submit requests under this section to legal@xyzai.io. You may designate an authorized agent to make a request on your behalf; we may deny a request from an agent who does not submit proof of valid authorization.

12. INTERNATIONAL USERS AND DATA TRANSFERS

The Service is operated from, and our servers are located in, the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Service, you acknowledge this transfer. Where required by applicable law, we rely on appropriate safeguards for such transfers, and our service providers maintain their own compliance programs for international data transfers.

13. DO-NOT-TRACK SIGNALS

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized, and we do not currently respond to DNT browser signals. If a standard that we must follow is adopted in the future, we will inform you about that practice in a revised version of this Privacy Policy.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last Updated” date at the top of this page and will be effective as soon as it is accessible. If we make material changes, we may also notify you by prominently posting a notice on the Service or by sending you a notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. CONTACT US

If you have questions or comments about this Privacy Policy, or if you would like to review, update, or delete the personal information we hold about you, contact us at:

XYZ AI Inc
360 Central Ave, Suite 800
St Petersburg, FL, 33701
United States

Privacy and legal: legal@xyzai.io
Support: support@claudecodeads.com