Effective Date: January 20, 2026
Last Updated: January 20, 2026
1. Introduction
This Privacy Policy explains how AdsPilot (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you use our Facebook Ads automation platform and related services (the “Service”).
By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this policy, please do not use our Service.
2. Controller Information
AdsPilot operates the Service. For questions or concerns regarding this Privacy Policy or our data practices, please contact us at:
- Email: privacy@adspilot.dev
- Support Email: support@adspilot.dev
3. Information We Collect
3.1 Information You Provide Directly
We collect information you voluntarily provide when using our Service:
- Account Information: Name, email address, username, password, phone number, company name, job title, and timezone
- Organization Data: Organization name, project details, and team member information
- Payment Information: Billing address, payment card details (processed by our payment provider)
- Social Media Credentials: Facebook account credentials, Facebook Page access tokens, Instagram account IDs, and Facebook Ad Account IDs
- Creative Assets: Images, videos, and ad copy you upload for advertising campaigns
- Communications: Information provided through customer support inquiries, feedback, or other communications
3.2 Information Collected Automatically
When you access our Service, we automatically collect certain information:
- Device Information: IP address, device type, operating system, browser type and version
- Usage Data: Pages visited, features used, search queries, click patterns, and interaction timestamps
- Log Data: Server logs recording access times, referring URLs, and error information
- Cookies and Similar Technologies: Information collected through cookies, pixels, and similar tracking technologies
3.3 Information from Third Parties
We receive information from third-party services you connect to our platform:
- Facebook/Meta APIs: Ad account information, campaign data, audience insights, and performance metrics
- Authentication Providers: Information from social login providers if you choose to authenticate through them
4. How We Use Your Information
We process your personal information for the following purposes:
- Service Delivery: To provide, maintain, and improve our Facebook Ads automation platform
- Account Management: To create and manage your account, organizations, and projects
- Campaign Management: To create, manage, and optimize your Facebook advertising campaigns
- Payment Processing: To process transactions and manage billing
- Customer Support: To respond to inquiries and provide technical assistance
- Communication: To send service-related notices, updates, and marketing communications (with your consent)
- Analytics: To analyze usage patterns and improve our Service
- Security: To detect, prevent, and address fraud, abuse, and security issues
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
5. Legal Bases for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data based on the following legal grounds:
- Contractual Necessity: Processing necessary to perform our contract with you and provide the Service
- Legitimate Interests: Processing for our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security
- Consent: Processing based on your explicit consent, particularly for marketing communications
- Legal Obligation: Processing necessary to comply with legal requirements
6. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
6.1 Service Providers
We share data with third-party service providers who assist in operating our Service:
- Cloud Hosting: Infrastructure and data storage providers
- Payment Processing: Secure payment processors (e.g., Stripe)
- Analytics: Services that help us understand usage patterns
- Communication: Email and notification service providers
6.2 Facebook/Meta Platform
To provide our core functionality, we transmit necessary data to Facebook/Meta through their APIs to:
- Create and manage advertising campaigns
- Upload creative assets
- Retrieve performance metrics and analytics
Data obtained through Facebook APIs is used exclusively for providing the advertising automation service and will not be used for independent advertising purposes or shared with unaffiliated third parties.
6.3 Legal Requirements
We may disclose information when required by law, legal process, or government request, or when we believe disclosure is necessary to:
- Comply with applicable laws or regulations
- Protect our rights, privacy, safety, or property
- Respond to lawful requests from public authorities
6.4 Business Transfers
In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. When we transfer data outside the EEA, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers to countries with adequate data protection determinations
- Other legally approved transfer mechanisms
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide the Service and maintain your account
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Fulfill the purposes described in this policy
When your account is deleted or data is no longer needed, we securely delete or anonymize your information in accordance with our data retention procedures.
9. Your Rights
9.1 Rights for All Users
Regardless of your location, you may:
- Access your account information through your dashboard
- Update or correct your profile information
- Delete your account and associated data
- Opt-out of marketing communications
9.2 Rights for EEA, UK, and Swiss Residents (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data (“right to be forgotten”)
- Restriction: Request restriction of processing
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time for consent-based processing
- Lodge Complaint: File a complaint with your local data protection authority
9.3 Rights for California Residents (CCPA/CPRA)
Under California privacy laws, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Opt-out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
To exercise any of these rights, please contact us at privacy@adspilot.dev.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Secure access controls and authentication
- Regular security assessments and monitoring
- Employee training on data protection practices
While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.
11. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain session state and authentication
- Remember your preferences
- Analyze usage patterns and improve our Service
- Provide personalized experiences
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Service.
12. Third-Party Links and Services
Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access.
13. Children’s Privacy
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Updating the “Last Updated” date
- Sending email notification for significant changes
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@adspilot.dev
- Support: support@adspilot.dev
For EEA residents, you may also contact your local data protection authority if you have concerns about our data processing practices.