Privacy Policy

1. Information we collect

• Account data: your email address, name and company name, used to create and secure your AdPilot account.
• Meta Ads access tokens: when you connect Meta, we receive an access token with the ads_read and ads_management permissions only.
• Campaign data: campaign names, budgets, status, spend and performance metrics from the ad accounts you select.
• Automation records: your schedules, stop-loss rules and a log of every action AdPilot performs.

2. How we use it

• To pause, resume and scale campaigns strictly according to the rules you create.
• To show performance reports, AI audits and activity logs in your dashboard.
• To operate, secure and support the service.

We use Meta data only for user-authorized ad scheduling and auditing. We do not use it for advertising profiling or any other purpose.

3. How we protect your tokens

• Meta access tokens are encrypted with AES-256-GCM before storage and are never exposed to the browser.
• Tokens are only decrypted on our servers at the moment an authorized action runs.
• All traffic is encrypted in transit (HTTPS), and database access is restricted by row-level security.

4. Sharing

We never sell, rent or trade your personal data or Meta data. We share data only with infrastructure providers needed to run AdPilot (hosting, database, AI processing for audits), under confidentiality obligations, or when required by law.

5. Retention & deletion

We keep data while your account is active. You can disconnect Meta and delete all stored tokens, campaign snapshots, schedules and logs at any time — see our Data Deletion page.

6. Your rights

You may request access, correction or deletion of your data. Contact us at privacy@adpilot.app.

7. Changes

We may update this policy and will post the new date above.