Privacy policy

2. What data we collect

The data falls into three groups. Each is stored separately and has its own retention period.

2.1. Account data

You enter these yourself when you register:

• first and last name
• email address
• phone number
• a cryptographic hash of your password (the password itself is never stored)
• your organisation's name and the list of staff invited to it

2.2. Data obtained through Meta

Once you have signed in with Facebook and granted access to your ad account, we read the following through the Meta Marketing API:

• the ad account's identifier, name, currency and time zone
• the Facebook Page's identifier and name
• the names, statuses, budgets and audience settings of campaigns, ad sets and ads
• statistics: amount spent, impressions, clicks, conversions and lead counts
• the structure of your lead forms and the questions in them
• the ad account's settings and limits

The access token Meta issues is stored encrypted. We have no access to your personal Facebook profile, your friend list, your private messages or the posts on your Page, and we do not ask for it.

2.3. Lead data

This is data about third parties who saw your ad and filled in a form on Facebook or Instagram. It includes:

• name
• phone number
• email address
• city or region, if the form asked for it
• answers to the extra questions the business itself added
• the date and time the form was submitted, and which ad the person came from

The owner of this data is the advertising business. We store and deliver it on that business's behalf only. Lead data is never sold, never rented out and never passed to third parties for advertising.

2.4. Technical data

When you use the service, the server logs record the request time, the page address, the browser type and the IP address. These logs are used only for security and troubleshooting, and are deleted after 12 months.

3. Why we collect it

Each group serves one specific purpose:

• Account data — to recognise you, let you into the system, track your subscription status and contact you.
• Meta data — to create ads, pause them, change their budgets and show you the result. From the statistics the system works out which ad performs better and makes suggestions.
• Lead data — to deliver the customer enquiry to you, show it in your dashboard and in Telegram, and let you export it.

We do not use your data to show you other companies' advertising, and we do not build profiles from it.

4. Legal basis

We process account data and Meta data in order to perform the contract with you: without that data the service cannot work. Connecting to your ad account rests on separate, explicit consent, which you can withdraw at any time from your Facebook settings.

For lead data we act as a processor: the owner of that data, and the party answerable for it, is the advertising business. Collecting and using it lawfully is their obligation.

5. How long we keep it

When the period ends the data is deleted automatically — you do not have to ask.

On its own side Meta keeps lead data for 90 days. That is why we run a reconciliation every day — so no enquiry is lost.

6. Who can see it

Each customer's data is separated in the database. Every query is filtered by organisation, so one customer cannot see another's ads or leads.

• You — see all of your organisation's data.
• The staff you invite — see what the access you granted allows. You can revoke it at any time.
• Our staff — only when you have raised a support request, and only the part needed to solve the problem. Every such access is written to a log.

7. Third parties

Your data goes to the services listed below and only for the purposes shown. It goes to nobody outside this list and is sold to nobody.

No personal data is sent to Sentry: names, phone numbers, emails and Meta access tokens are stripped out of error reports.

Only what the payment itself requires goes to the payment provider. Your bank card number never reaches our servers and is not stored by us.

8. Transfers outside the country

Meta's servers are located outside the Republic of Uzbekistan. The data exchange that manages your ads and collects your leads happens with those servers — that follows from how the service works.

All of that exchange runs over an encrypted channel (HTTPS). How Meta processes the data on its side is governed by Meta's own privacy policy.

9. Your rights

At any time you may ask to:

• see what data we hold about you
• correct data that is wrong
• delete your data
• download your data as a file
• withdraw the access granted to your ad account
• object to the processing

We answer your request within 30 days. To get in touch: Abdullamn1996@gmail.com.

10. Deleting your data

You can request deletion in two ways: through the form on this site, or by removing the app in your Facebook settings. Either way you are given a confirmation code and the request is completed within 30 days.

Send a deletion request

11. Cookies

The site uses only the cookies it cannot work without. There are no advertising or tracking cookies and no third-party analytics.

• a session cookie — to remember that you are signed in
• a language cookie — to remember the language you chose
• a CSRF cookie — to protect forms against forgery

Your light or dark theme choice is not kept in a cookie but in your browser's own storage (localStorage), and it is never sent to the server.

12. Age limit

The service is not intended for anyone under 18, and we do not knowingly collect their data. If we find that such data has reached us by mistake, we delete it.

13. Changes to this policy

When the policy changes we update the “last updated” date on this page. If a change materially affects you — a new type of data starts being collected, say, or a retention period grows — we tell you by email at least 14 days beforehand.

14. Contact

For any question, complaint or request about privacy, contact us:

• HUNTER SALLERS LLC, Tax ID 311 076 944
• 24 Kunchilar St., Shaykhantakhur District, Tashkent, Uzbekistan
• Abdullamn1996@gmail.com
• +998 97 130 01 23