Privacy Policy

English version:

AdBuddy ("we," "us," or "our") operates the website adbuddy.polsia.app (the "Site") and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site.

Information We Collect:

We collect personal information that you voluntarily provide to us when you register on the Site, express an interest in obtaining information about us or our products and services, or otherwise when you contact us. This includes: name, email address, phone number, business name, product descriptions, ad copy, and images you generate using our AI tools. We also automatically collect certain technical information when you access the Site, including your IP address, browser type, operating system, referring URLs, and pages viewed.

Meta / Facebook Platform Data:

When you connect your Meta Business account to AdBuddy (via Facebook Login or the Meta Marketing API), we access the following data on your behalf:

• Ad Account data (ads_read, ads_management) — campaign names, budgets, spend, impressions, clicks, CTR, and conversion metrics necessary to display your campaign dashboard and allow you to manage (pause, edit, duplicate) campaigns through AdBuddy.
• Business Assets (business_management) — your Business Manager account ID and linked ad accounts, used solely to enumerate which ad accounts you have permission to manage.
• Facebook Pages (pages_read_engagement, pages_manage_ads) — page identity and engagement data used to attach your Page to ad creatives and to submit Ad Preview requests.

How we store Meta data: Meta access tokens and API responses are stored in our Neon PostgreSQL database, encrypted at rest. We store only the minimum data needed to render your dashboard and fulfill your ad management requests. We do not share your Meta data with third parties beyond the infrastructure providers (cloud hosting, database) required to operate the service.

Retention of Meta data: Ad performance data synced from Meta is retained for up to 90 days to support historical trend views. Access tokens are stored only for the duration of your active session and purged on disconnect. If you request data deletion (see below), all Meta-derived data associated with your account is removed within 30 days.

Scope limitation: We only request the permissions listed above. We do not access your personal Facebook profile, friends list, messages, or any data outside your Business Manager and ad account scope.

How We Use Your Information:

We use the information we collect to: provide, operate, and maintain our Site; improve, personalize, and expand our services; understand and analyze how you use our Site; develop new products, services, features, and functionality; communicate with you for customer service, updates, and marketing purposes; detect and prevent fraud and abuse; and fulfill any other purpose for which you provide consent.

Sharing Your Information:

We do not sell your personal information. We may share your information with third-party service providers who assist us in operating our Site and conducting our business. We may also share information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Third-Party Processors:

We work with the following named third-party processors, each acting as a separate data controller under their own privacy policy:

• Polsia (polsia.com) — Infrastructure, hosting, and AI orchestration. The Site is hosted on Polsia's platform (adbuddy.polsia.app is a Polsia-hosted subdomain).
• OpenAI (openai.com) — AI-generated ad copy and image concepts via the OpenAI API. Your input (product descriptions, ad copy prompts) is processed by OpenAI subject to OpenAI's Privacy Policy.
• Stripe (stripe.com) — Subscription payment processing for the /managed tier (Starter, Growth, Pro plans). Stripe handles card data and billing. Subject to Stripe's Privacy Policy.
• Postmark (postmarkapp.com) — Transactional email delivery for order confirmations, magic links, and account notifications. Subject to Postmark's Privacy Policy.
• Render (render.com) — Cloud hosting provider for our application servers. Subject to Render's Privacy Policy.
• Neon (neon.tech) — PostgreSQL database hosting via Neon (a serverless Postgres platform by Analog Studios, Inc.). Subject to Neon's Privacy Policy.

Data Retention:

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Your Rights:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information ("Right to be Forgotten").
• Objection: You may object to certain processing of your data.
• Data Portability: You may request a copy of your data in a machine-readable format.

Cookies and Tracking Technologies:

We use cookies and similar tracking technologies to operate our Site and collect usage data. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Site may not function properly without cookies.

Data Security:

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Third-Party Links:

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We encourage you to read their privacy policies before providing any personal information.

Changes to This Privacy Policy:

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us: