Privacy Policy

1. Information We Automatically Collect

We may automatically collect certain technical data including:

• Device type, browser, operating system
• IP address, time zone, and geolocation
• Session activity and page usage
• Data from Facebook APIs (via permissions such as ads_read) with user consent

We use cookies to improve your experience. You can control cookies through your browser. See our Cookie Policy for more.

We do not honor Do Not Track (DNT) signals but minimize data use wherever possible.

2. Information You Provide to Us

You may provide Personal Information including:

• Email address (for login and communication)
• Name (optional, for personalization)
• Password (hashed, never stored in plain text)
• Login credentials (when signing in with Google)
• Any communication you send us
• Ad account details you authorize via Meta APIs

Some of this data may be optional, but without it we may be unable to deliver key features of our platform.

3. Use and Processing of Information

Important: We only use read-only access to your Meta ad data. We analyze your data to provide insights and reports, but we never modify, pause, or change your campaigns.

We use your Personal Information for the following purposes:

• To provide analytics, insights, and AI-powered reports based on your ad performance data
• To analyze platform usage and improve our Services
• To personalize your reports and dashboard views
• To communicate service updates and respond to your inquiries
• To comply with Meta's developer policies and applicable law
• To respond to legal requests or investigate misuse

We process data based on:

• Your consent
• Our contractual obligations
• Legal obligations
• Our legitimate interest to operate and improve our business

We may also generate aggregated or de-identified data that is not considered Personal Information.

4. User Control and Data Management

You can request deletion of your Personal Information or full account at any time by contacting us at privacy@adfynx.com. We will delete your data within 24 hours, unless legally required to retain longer.

You may also trigger automatic data deletion by removing Adfynx from your Facebook account. This invokes our data deletion callback, which removes associated data and returns a confirmation code.

Note: Some data may be retained for legal or compliance purposes (e.g., payment records for 7 years).

5. Disclosure of Information

We do not sell your Personal Information.

We may share it only with:

• Trusted third-party service providers
• Legal or regulatory authorities, if required
• Meta (via platform API interactions)

All third parties must meet strict confidentiality and security obligations.

6. Use of Data from Google and Meta APIs

Google API Services: Adfynx's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meta API Services: Our use of Meta (Facebook) APIs is governed by Meta's Platform Terms and Developer Policies. We only request read-only permissions to access your ad account data.

Data Segmentation: We differentiate how we use data based on its source:

• Public Website Data: Information collected from public visitors to our website (such as analytics data) may be used to improve our Services and website experience.
• Authenticated Platform Data: Data obtained through Google or Meta API services on our authenticated platform (such as your ad account data) is strictly limited to providing our Services to you and will not be used for advertising, analytics, or any other purposes beyond serving you directly.

Access Control: You can revoke Adfynx's access to your Google or Meta services data at any time through:

• Your Google Account permissions page: myaccount.google.com/permissions
• Your Facebook Business Settings: business.facebook.com/settings

7. Data Retention

We retain your Personal Information only as long as necessary to:

• Fulfill the services you request
• Meet legal, compliance or audit obligations
• Resolve disputes or enforce our agreements

Data may be securely deleted or anonymized when no longer required.

8. Data Transfers

We implement adequate safeguards to comply with data protection laws (e.g. GDPR). For questions about data transfers, email support@adfynx.com.

9. Your Data Protection Rights

If you are located in the EEA, UK, or under laws like the CCPA/CPRA, you have the right to:

• Access your Personal Information
• Request correction or deletion
• Object to or restrict data processing
• Withdraw consent at any time
• Request data portability (where applicable)
• File a complaint with a data protection authority

To exercise these rights, email privacy@adfynx.com with sufficient detail to verify your request.

Response Timeline: We will acknowledge receipt of your request within 2 business days. We will respond to your request within 14 days of receipt. If we require more time (up to 30 days), we will inform you of the reason and extension period in writing.

10. California Privacy Rights (CCPA/CPRA)

We do not sell or "share" Personal Information as defined under California law.

If you are a California resident, you may request:

• Disclosure of Personal Information categories collected and shared
• Deletion or correction of your Personal Information
• Details about sensitive personal data usage or profiling (if any)
• Confirmation that your rights will not affect service access

We do not collect biometric data or knowingly collect data from users under age 16.

11. Children's Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect data from children. If you become aware that your child has provided us data, contact us immediately at support@adfynx.com.

12. User Data and AI/ML

Your data is used only to serve you, not to train AI models.

We use artificial intelligence and machine learning technologies to provide you with insights, analytics, and recommendations about your Meta ad performance. However, we want to be clear about how we use your data:

• No Generalized AI Training: We do not use your ad account data, campaign information, or any personal data to develop, improve, or train generalized AI or machine learning models.
• Service-Specific Use Only: AI and ML technologies are used exclusively to analyze your data and provide you with personalized insights, reports, and recommendations within our Services.
• Your Data Stays Private: Your advertising data and business information remain confidential and are never shared with or used to benefit other users or third-party AI systems.
• Read-Only Analysis: Our AI analyzes your data in read-only mode to generate insights—it never modifies your campaigns or takes actions on your behalf.

If you have questions about how we use AI/ML technologies, please contact us at support@adfynx.com.

13. Third-Party Service Providers

We work with trusted third-party service providers to help us operate our Services. These providers may have access to your Personal Information only to perform specific tasks on our behalf and are obligated to protect your information.

Our third-party service providers include:

• Vercel: Frontend hosting and CDN
• Railway: Backend hosting and computing
• Supabase: Database and storage
• Stripe: Payment processing
• AWS SES: Email service
• Google Analytics 4: Website analytics

All third-party service providers are contractually required to maintain the confidentiality and security of your Personal Information and may only use it for the specific purposes we authorize.

14. Data Security

We take security seriously and implement:

• TLS 1.2+ encryption
• Role-based access control
• Secure server infrastructure
• Regular security audits
• Encrypted access token and credential storage

However, no transmission over the Internet is 100% secure. Please use our services with appropriate caution.

15. Data Breach Notification

In the event of a data breach affecting your Personal Information, we will:

• Notify you promptly via email or our Website
• Cooperate with law enforcement
• Take immediate remedial action to secure data

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you. Continued use of the Services after an update means you accept the new terms.

17. Contact Us

If you have questions or requests about this Privacy Policy or your Personal Information, please contact: