DRAFT: placeholder product name and legal text, pending legal review. Not yet final.

Privacy Policy

Last updated: October 29, 2026

This policy explains what Multimeta Gestor Ads ("we"), operated by [Company legal name, to be confirmed], collects when you connect a Meta ad account, why, and how you can have it deleted.

What we collect

• Your app-scoped Facebook user ID (a number Meta gives our app; it is not your profile).
• An access token that Meta issues when you choose "Continue with Facebook". With the ads_read permission it lets us read the ad accounts you can access. If you also allow ads_management, it lets us make a change you confirm on our page (pause or resume an ad or ad set, change an ad set's daily budget), one change at a time, never on our own.
• The IDs of the ad accounts you pick.
• A record of each change you confirm: when, which ad or ad set, the value before and after, and Meta's answer. It is shown to you and kept as an audit record (see "How long we keep it").
• Standard access logs kept by our hosting provider: IP address, browser user agent, the page requested and the time.

We do not collect your name, email address, photo, friends, posts or messages, and we never ask for your Facebook password. Ad metrics (spend, impressions, clicks, purchases) are read live from Meta to show them to you; they are not stored.

How we use it

Only to show you your ad account's performance and to make the changes you confirm. We do not sell your data or use it for advertising. It is processed only by the providers that run the service: Vercel (hosting and access logs), Supabase (database) and Meta (the source of your ad data), under their terms that keep it confidential.

How we protect it

The access token is encrypted (AES-256-GCM) before it is stored; the encryption key is kept apart from the database. We never display the token again, never write it to our application logs and never send it to any AI model. All traffic uses HTTPS. During sign-in, the one-time code Meta sends back can appear in our hosting provider's request logs; it expires within minutes and cannot be used without our app secret.

How long we keep it

• Your token, user ID and account choice: until you disconnect or ask for deletion.
• Meta tokens expire on their own (usually after about 60 days). If you do not reconnect, we delete the connection 30 days after its token expired. A token Meta issues without an expiry date is kept while it works; once Meta rejects it, the same 30 days apply.
• Change records: kept for 24 months after each change, so we can answer if a change is ever disputed, and then deleted. If you disconnect or ask for deletion sooner, they stay until then but are unlinked from your Facebook user ID. They still hold the ad account, ad and ad set IDs, statuses, budgets and times, so they are pseudonymised rather than anonymous.
• Access logs: as long as our hosting provider keeps them (typically days to a few weeks).

Your choices and rights

• Disconnect at any time from the connect page: your token, user ID and account choice are deleted immediately.
• Remove the app in Facebook (Settings & privacy › Settings › Business integrations, or Apps and websites): Meta notifies us and we delete your data.
• Ask us to access, correct or delete your data by email; see Data deletion. We honor the rights given by Brazil's LGPD and the EU GDPR.

Contact

[Company legal name, to be confirmed] · privacy@example.com