Privacy policy

This Privacy Policy describes how Adsycom ("Adsycom", "we", "our" or "us") collects, uses and shares information when you use our web application available at adsycom.io and related services (collectively, the "Service").

1. Information we collect

We collect the following categories of information directly from you when you create an account or use the Service:

• Account information: email address, display name, password hash, organisation/team association.
• Product and creative data: products you create, creatives you upload, ads you save from the Facebook Ad Library via our Chrome extension, tags, notes and tasks.
• Facebook / Meta Ads data: if you choose to connect your Meta account, we store your Meta Ads access token, the ad account IDs you authorise, and we fetch campaign, ad set, ad and insights data on your behalf. We never request more permissions than ads_read and basic account metadata.
• Usage data: standard server logs (IP address, user agent, timestamps, pages visited) collected automatically by our hosting provider for security and debugging.

2. How we use information

We use the information we collect to:

• Provide, operate and maintain the Service.
• Fetch live ad performance metrics from Meta Ads on your behalf, when you have explicitly connected your account.
• Authenticate you and keep your data secure.
• Communicate with you about your account, security and product updates.
• Investigate and prevent fraud, abuse or violations of our Terms.

3. How we share information

We do not sell your personal data. We share information only with:

• Service providers who process data on our behalf, under confidentiality obligations:
  • Supabase: authentication and database hosting.
  • Vercel: application hosting and edge compute.
  • Meta Platforms: only when you explicitly request data from your connected Meta Ads account.
• Legal authorities, if required by law, court order or to protect the rights, property or safety of Adsycom, our users or the public.
• A successor entity, in connection with a merger, acquisition or sale of assets, in which case we will notify you before your data is transferred.

4. Data retention

We retain your account and product data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer (e.g. for accounting or fraud-prevention purposes). Meta access tokens are revoked and deleted immediately when you disconnect your Meta integration.

5. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), Row-Level Security in our database, scoped per-user access controls and limited token storage with restricted access. No method of transmission over the internet is 100% secure, but we work to protect your information using reasonable safeguards.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@adsycom.io. We will respond within 30 days.

7. Cookies

We use only the cookies strictly necessary to keep you signed in and to keep the Service secure. We do not use third-party tracking or advertising cookies.

8. International transfers

Adsycom is operated from Algeria. Our service providers (Supabase, Vercel, Meta) may process data in the European Union, the United States or other countries. By using the Service, you consent to such transfers.

9. Children

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and, for material changes, notify you by email or via the Service before the change takes effect.

11. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at: