← Back to home

Privacy Policy

Last updated: 29 May 2026

What we collect

Account info from Meta: When you connect your Meta (Facebook / Instagram) ad account, we receive your name, email, and a long-lived access token scoped only to ad management. We do not access your personal posts, friends list, messages, or photos.

Ad performance data: We periodically read your campaigns, ad sets, ads, and insights (spend, clicks, conversions, frequency, CTR) from the Meta Marketing API to run optimization rules.

Account preferences: Your engine settings (which rules are enabled), email address for digests, and timezone.

What we don't collect

  • Your password (Meta handles authentication directly)
  • Your billing or payment details
  • Personal data of your customers or audiences
  • Anything beyond what the Meta Marketing API permissions allow

How we use your data

  • To run automated optimization rules on your ad account (e.g. pause an ad that has gone fatigued)
  • To generate the weekly AI-written digest summary you receive by email
  • To show you the dashboard, action log, and health score
  • To debug issues and improve the product

We never sell your data, share it with third parties for marketing, or use it to train external AI models.

Where data is stored

Application data is stored in PostgreSQL (Neon, AWS region us-east-1). Access tokens are encrypted at rest. Logs go to Vercel and are retained for 30 days.

We use Google's Gemini API to generate the natural-language portions of weekly digests. Only summary statistics (action counts, spend totals) are sent — never your individual ad creatives or audience data.

Your rights

You can disconnect your Meta account at any time from Settings → Disconnect. This stops all reads and writes to Meta and revokes our access token. You can request full deletion of your data by emailing us (see below).

You can also revoke our app's access directly from your Meta account atSettings → Business Integrations.

Cookies

We use a single first-party cookie to keep you logged in (a session JWT). We do not use third-party cookies, advertising pixels, or analytics trackers.

Contact

Questions, deletion requests, or anything else: email hello@adloop.ai.