Privacy Policy

1. Introduction

AutoAdy (“we,” “our,” or “us”) is a Meta Ads management platform operated by Kristians Tiesnesis. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at autoady.io and related services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk).

Meta Platform Data

When you connect your Meta (Facebook) account, we access and store:

• Your Meta user ID and name
• Ad account IDs associated with your Meta account
• Ad campaign data, including campaign names, budgets, targeting, and performance metrics (impressions, clicks, spend, conversions)
• Ad creative content and metadata
• Page information associated with your ad accounts
• OAuth access tokens (encrypted at rest)

We access this data through the Meta Marketing API using permissions you explicitly grant during the OAuth consent flow.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, and actions taken.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. We receive and store your Stripe customer ID and subscription status.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our platform
• Display your Meta ad account data and performance metrics
• Generate AI-powered insights, recommendations, and reports
• Execute ad management actions you initiate (creating, pausing, or modifying ads)
• Send notifications and alerts about your ad performance (via Telegram, email, or in-app)
• Process payments and manage subscriptions
• Improve and develop new features
• Respond to support requests

4. Data Sharing and Disclosure

We do not sell your personal data. We share information only with:

• Meta Platforms, Inc. — To access and manage your ad accounts via the Meta Marketing API
• Clerk — For authentication services
• Stripe — For payment processing
• Supabase — For database hosting (data stored in EU region)
• Vercel — For application hosting
• Anthropic — For AI-powered features (ad data may be sent to Claude AI for analysis; no data is retained by Anthropic for training)

We may also disclose information if required by law or to protect our rights.

5. Data Storage and Security

Your data is stored on servers in the European Union (Frankfurt, Germany) via Supabase. We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Row Level Security (RLS) on all database tables
• OAuth tokens stored server-side, never exposed to the client
• Role-based access control for team features

6. Data Retention

We retain your data for as long as your account is active. When you delete your account or disconnect your Meta account, we delete your Meta access tokens and associated data within 30 days. Aggregated, anonymized analytics data may be retained indefinitely.

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing
• Request data portability
• Object to data processing
• Disconnect your Meta account at any time through Settings

To exercise any of these rights, contact us at contact@autoady.io.

8. Meta Platform Data Use

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. Specifically:

• We only request permissions necessary for the features we provide
• We do not sell Meta user data to third parties
• We do not use Meta data for purposes unrelated to our stated service
• Users can revoke access at any time through our Settings page or through Facebook’s app settings

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

10. Children’s Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

AutoAdy
Kristians Tiesnesis
Email: contact@autoady.io