Privacy Policy

1Who is responsible for your data

The administrator of the metaadsagency.com service decides why and how your personal data is processed. Requests about your data, including the rights listed below, go to [email protected] and are answered within one month.

When we manage advertising for a client, the client remains the controller of its customers' data held in its own ad account, Pixel, dataset and catalog. In that role we act on the client's instructions as a processor.

2Data we collect

• Free store audit. The website address you enter, your answers about business type, monthly ad spend and goal, the audit result, and a salted hash of your IP address used for the one-audit-per-day limit.
• Account. Email address, password stored only as a hash, the confirmation code we send to verify the address, your name and role if you add them.
• Client portal. Company details and brief, brand assets you upload, approvals, messages and attachments, team seats and activity logs.
• Ad account data. Identifiers of the assets you share as a partner and campaign performance figures such as spend, impressions, clicks, purchases and leads. These are aggregated statistics, not lists of your customers.
• Billing. Plan, invoices, payment status and the last digits and expiry date of your card. Full card numbers are handled by the payment operator and never reach our servers.
• Technical data. Server logs with IP address, browser type, time and requested page, kept for security and troubleshooting.

3Why we use it and on what legal basis

• To run the audit you asked for, create your account and deliver the agency service you bought, which is necessary to perform our contract with you or to take steps at your request before it.
• To bill you, keep accounting records and answer authorities, which are legal obligations.
• To keep the site secure, prevent abuse of the free audit, defend legal claims and improve the service, which are our legitimate interests.
• To send service emails such as confirmation codes, approval requests, weekly reports and billing notices, which are part of the contract. We do not send marketing newsletters.

4Automated tools in the audit

The audit reads the public pages of the website you enter and uses an AI language model to summarise the offer and suggest ad angles. Only the content of those public pages and your audit answers are sent for this purpose, never your password or payment data. No decision with legal or similarly significant effect on you is made automatically.

5Who receives the data

We do not sell personal data and do not share it for other companies' advertising. Data is passed only to service providers that help us run the service, each bound by a data processing agreement and allowed to use it only on our instructions.

• a hosting provider operating servers in the European Union
• a payment operator that processes card payments and subscriptions
• an email delivery provider that sends confirmation codes, reports and notices
• an AI model provider that processes audit content as described above
• Meta, when we act in your ad account with the partner access you granted, under your own agreement with Meta

Some providers may process data outside the European Economic Area. In that case the transfer relies on an adequacy decision or on the standard contractual clauses approved by the European Commission.

6How long we keep it

• Anonymous audits are deleted after 90 days unless you create an account and unlock them.
• Account and portal data is kept while you have an account and for 90 days after the plan ends, so you can download your files, then deleted.
• Invoices and payment records are kept for as long as tax and accounting law requires.
• Server logs are kept for up to 30 days, longer only when needed to investigate a specific incident.

7Your rights

You may ask for access to your data, a copy in a portable format, correction, deletion or restriction of processing, and you may object to processing based on our legitimate interests. Write to [email protected] from the email linked to your account.

You also have the right to lodge a complaint with the data protection authority in the country where you live or work.

8Security

Connections use HTTPS, passwords are stored only as hashes, card payments require 3D Secure, portal roles limit who sees what, and access to production systems is limited to the people who need it. We never ask you to send account passwords: access to your ad assets is granted as a partner from your own Business Settings and can be removed by you at any time.

9Cookies

The site uses only strictly necessary cookies and no advertising pixels. The full list is in the Cookie Policy.

10Age and updates to this policy

The service is meant for businesses and is not directed at anyone under 18. We update this policy when our processing changes and show the date of the current version at the top of the page. Significant changes are announced in the portal or by email.