DRAFT — to be reviewed by a qualified lawyer before use.

Privacy notice

This notice explains how [Business legal name] (“we”) handles information when you use BrightROAS, a tool for reading and managing Meta advertising accounts.

What we access

• Advertising performance data from the Meta ad accounts you connect: campaign, ad set and ad names and IDs, status, budgets, spend, impressions, clicks, and conversion counts and values.
• Ad account details needed to show account health: account status, balance, and spend cap.
• Details you enter: client names, targets, approver names, reasons for changes, and revenue figures you type in.
• We do not collect personal details of your customers or ad audiences. Meta does not give us that data through this tool.

Where data is kept

• Your Meta access token is kept only on the server that runs BrightROAS, in an environment setting. It is not stored in the browser or in the project files.
• Synced performance data, client settings and the activity log are kept in the browser on the device you use. Clearing browser data removes them.
• Server requests are made to Meta’s Marketing API over HTTPS. Requests time out after 25 seconds.

What we do with it

We use this data only to show reports and diagnostics, and to send changes you approve to Meta. We do not sell it, and we do not use it for advertising of our own.

Your rights and deletion

You can delete a client and its data at any time from the Clients page. To remove all data, clear this site’s browser storage and revoke the access token in Meta Business Settings. You can ask us to delete any data we hold by writing to [privacy email].

Security

The dashboard is protected by a password set by the account owner. Use a strong password, and do not share the link publicly.

Contact

[Business legal name], [registered address], [privacy email], [phone]. Grievance officer: [name, contact].

Last updated: [date]