Privacy policy

This policy describes what data the service collects when you connect a Facebook ad account, why it is collected, how long it is kept and how you can stop the processing or delete the data.

How we handle the data received from Meta through Facebook Login and the Marketing API — permissions, recipients, revoking access — is described in detail in the privacy policy for Facebook data.

1. Data we collect

Facebook profile. When you log in with Facebook we receive your Facebook profile identifier, your name and, if you allow it, your e-mail address. The e-mail address is used only for service messages such as replies to support requests and confirmation of deletion.

Advertising statistics. For every ad account you select we read, through the Facebook Marketing API with the ads_read permission, aggregated daily statistics: spend, impressions, clicks, reach, conversions and conversion values, together with the names, identifiers and statuses of campaigns, ad sets, ads and creatives, placement breakdowns and account settings such as currency and timezone.

What we do not collect. The service does not read or store data about the people who saw or clicked your ads, lead-form submissions, custom or lookalike audiences, messages, page content or any other end-user data. The service has read-only access and cannot change ads, budgets, pages or posts.

Technical data. Server logs record the IP address, browser type, requested pages and the time of each request, as well as the calls the service makes to Facebook. These logs are used for security and troubleshooting.

2. Why we collect it

• to show you the statistics of your ad accounts, compare periods and detect deviations such as spend without results;
• to produce text summaries, explanations and answers to your questions about the numbers;
• to share the statistics of selected accounts with an organization, but only after your explicit consent (see section 4);
• to keep the service secure, enforce usage limits and answer your support requests.

3. How long we keep it

• Advertising statistics are kept while the ad account stays connected to your profile. When you disconnect an account its statistics are no longer collected and are removed in the ordinary course of operation.
• When you request deletion of your account (see section 6), your profile, tokens and all collected statistics are deleted within 24 hours.
• Server and access logs are kept for 90 days.
• Access tokens issued by Facebook are stored encrypted and are removed when they expire, when you disconnect, or when you remove the app in Facebook.

4. Sharing with organizations

If you connect an account through a link issued by an organization, or accept a request from an organization, the statistics of the selected accounts are delivered to that organization's system. This happens only after a consent screen that names the organization and lists the shared fields: spend, impressions, clicks, reach, conversions, and the names and identifiers of campaigns, ads and creatives, by day. Your other ad accounts are not affected, and the organization never receives access to your Facebook account or tokens.

Every active sharing is listed under Settings → Sharing, where you can stop it at any time. After you stop sharing no new data is delivered; data delivered earlier remains in the organization's system and is governed by that organization's own policies.

5. AI model provider

Text summaries, explanations and answers are produced with the help of a third-party AI model provider, OpenRouter, which passes each request to the developer of the selected model. Only aggregated statistics and the names of your advertising objects are sent to the provider; no profile data, tokens or end-user data are included. The provider does not use this data to train its models. Every generated text is checked against the calculated numbers before it is shown.

6. Your choices: stopping and deleting

• Stop collection for an account: open the account settings and choose "Disconnect account".
• Stop sharing with an organization: Settings → Sharing → "Stop sharing".
• Delete everything: Profile → "Delete account", or remove the app in your Facebook settings, or follow the instructions on the data deletion page. Deletion is completed within 24 hours and you receive a confirmation code with a status page.

7. Security

Data is transmitted over HTTPS and stored on servers with restricted access. Facebook tokens are encrypted at rest. Access to the operator panel is limited to named operators and is logged.

8. Changes and contact

We may update this policy; the current version is always available at this address. Questions about privacy can be sent through the support form.