Privacy Policy

Plain English: we collect the minimum we need to send you your free first batch and run the service, we never sell your data, and you can have it deleted at any time.

1. Who we are

AngrySheep ("AngrySheep", "we", "us", "our") operates the website angrysheep.ai and the AngrySheep ad-creative service. The service is operated by MB "Angry Sheep Solutions", a private limited partnership (mažoji bendrija) registered in the Republic of Lithuania, European Union. For any privacy question or request, contact us at hello@angrysheep.ai. We are the data controller for early-access and marketing contact data. For your brand inputs and the advertising-account performance data you authorize us to read, we act as a data processor on your behalf and process that data only on your instructions to provide the service.

2. What we collect

When you request early access

• Your email address (required), so we can contact you and deliver your free first batch.
• Your brand's website (optional), so we can research your brand and prepare that batch.

When you use the service

• Brand inputs you provide: product photos, brand assets, descriptions, and any ad-account performance data you choose to share or authorize us to read. Ad-account access is limited and paused-first: we read performance data to strategize, and when you ask us to, we create draft campaigns that start paused and spend nothing. We never activate campaigns, never change your live campaigns, budgets, or settings, and never spend your money. You review and activate campaigns yourself.
• Generated outputs: the creatives we produce for you, kept so you can retrieve them.

Automatically

• Basic technical data your browser sends (IP address, browser type) and server logs, used for security and to keep the site running. We do not use tracking or advertising cookies on this site today (see section 7).

3. Why we use it, and our legal basis (GDPR Art. 6)

• To send early-access updates and your free batch, on the basis of your consent, which you give by submitting the form. You can withdraw it anytime.
• To provide and improve the service you ask for, on the basis of performance of a contract and our legitimate interests in operating and securing the product.
• To comply with the law, where we have a legal obligation.

4. Who we share it with

We do not sell your personal data. We share it only with service providers ("processors") that help us run AngrySheep, and only as much as each needs:

• Formspree, which receives early-access form submissions (email, brand URL) on our behalf.
• Hostinger, which hosts this website and stores server logs.
• AI generation providers: Anthropic, OpenAI, Google, BytePlus, and ElevenLabs, which receive the brand inputs needed to generate your creative. We do not send them your contact details. We do not use your brand inputs or generated outputs to train our own models, and we do not grant these providers any rights to your data beyond generating your assets; each processes what it receives under its own API terms.
• Meta: when you connect or share an ad account, we read performance data through Meta's API to strategize and, when you request it, create paused draft campaigns in your ad account.

Each provider listed above may use the data we share only to perform services for us, at our direction, and for no other purpose, and must delete it when we stop using them.

If your business requires a data processing agreement covering our role as processor of your ad-account data and brand inputs, email hello@angrysheep.ai and we will put one in place with you.

Some of these providers are based outside the EU (e.g. in the United States). Where that's the case, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

4a. Meta platform data (Limited Use)

When you connect a Meta (Facebook/Instagram) advertising account, we read advertising-performance metrics (such as impressions, reach, clicks, spend, and conversions) through Meta's Ads Insights / Marketing API, and when you request it we also create draft campaigns in your ad account. Every campaign we create starts paused and spends nothing until you activate it: we never activate campaigns, never modify your live campaigns or budgets, and never spend your money. Our Meta app requests only the permissions these features need, such as managing draft campaigns and reading performance data (ads_management) and listing your Facebook Pages so you can choose which Page your ads run under (pages_show_list); the exact list is shown on Meta's consent screen when you connect, and you can revoke access at any time in your Meta Business settings. Our use, storage, and sharing of any data obtained through Meta's APIs complies with the Meta Platform Terms and Developer Policies, including the Limited Use requirements: we use Meta platform data only to provide and improve the AngrySheep strategy and creative service you request, and for no other purpose. We never sell, license, rent, or transfer Meta platform data, never use it to build or augment user profiles, and never attempt to re-identify de-identified data.

How to delete your Meta data. To delete the Meta platform data we hold, email hello@angrysheep.ai or disconnect your ad account in AngrySheep. Disconnecting your account, or closing your AngrySheep account, automatically triggers deletion of your Meta platform data. We delete it within 30 days. Full instructions: angrysheep.ai/data-deletion.

5. How long we keep it

We keep early-access contact details until you unsubscribe or ask us to delete them, and at most 2 years after our last contact with you. Brand inputs and generated outputs are kept while your account or engagement is active, deleted on request, and in any case deleted within 90 days after your account closes. Server logs are kept up to 30 days for security.

Meta platform data is deleted when you disconnect the account, when you ask us to delete it, or when your account is closed, and in any case within 30 days of such a request.

6. Your rights

Under the GDPR you have the right to: access your data; correct it; have it erased; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). To exercise any of these, email hello@angrysheep.ai and we'll respond within one month; if your request is complex we may extend this by up to two further months, and we will tell you within the first month if we need to. You also have the right to lodge a complaint with your local supervisory authority. In Lithuania, that is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).

7. Cookies & analytics

This website currently uses no advertising or tracking cookies and no third-party analytics that profile you. If we add analytics or a Meta advertising pixel in the future, we will update this policy and, where required, ask for your consent first.

8. Security

We use reputable providers and reasonable technical measures to protect your data. No system is perfectly secure, but we work to keep what you share with us safe and to limit what we collect in the first place.

We protect access tokens and app credentials, and we never sell, transfer, or solicit Meta user IDs, access tokens, or app secrets.

If a security incident affects your personal data or your connected ad account, we will notify you by email without undue delay after becoming aware of it, tell you what happened and what data was affected, and explain what we are doing about it. Where the incident involves Meta platform data, we also follow Meta's incident reporting requirements.

9. Children

AngrySheep is a business tool and is not directed to anyone under 18. We do not knowingly collect data from children.

10. Changes

If we change this policy we'll update the date above and, for material changes, let early-access subscribers know by email.

11. Contact

Questions or requests: hello@angrysheep.ai.