Privacy Policy

1. Who we are

AdCrux AI ("we", "us", "our") provides AI-assisted creative generation and automated campaign management for advertisers running ads on Meta platforms (Facebook and Instagram). This Privacy Policy explains what we collect, how we use it, and the choices you have.

2. Information we collect

• Account data: email address and authentication identifiers when you sign up.
• Meta connection data: when you connect your Meta account via OAuth, we receive your Facebook user ID, the ad accounts, Pages, and Instagram Business accounts you grant access to, and a long-lived access token issued by Meta.
• Campaign data: the campaigns, ad sets, ads, creatives, insights, and audience configurations associated with the ad accounts you connect.
• Usage data: product interactions, error logs, and diagnostic data needed to operate and improve the service.

3. How we use your information

• To authenticate you and maintain your session.
• To create, read, update, and manage campaigns, ad sets, ads, and creatives in the Meta ad accounts you explicitly connect.
• To analyze ad performance and automatically optimize spend, pause underperforming ads, and refresh fatigued creatives.
• To provide customer support and respond to your requests.
• To detect, prevent, and address fraud, abuse, and security issues.

4. How we store and protect your data

Meta access tokens are encrypted at rest using authenticated AES-GCM encryption before being written to our database. Application data is stored in managed Postgres infrastructure with row-level security policies that scope every record to the workspace that owns it. All traffic between your browser, our servers, and Meta uses TLS.

5. Sharing and disclosure

We do not sell your personal information. We share data only with the service providers that power AdCrux AI — our hosting, database, and AI inference providers — and with Meta itself when making API calls on your behalf. We may disclose information if required by law or to protect the rights, safety, and property of AdCrux AI, our users, or the public.

6. Data retention and deletion

We retain your data for as long as your account is active. You may disconnect your Meta account at any time from the Connections page, which revokes our stored access token. You may request deletion of your account and all associated data by emailing us at the address below; we will process the request within 30 days. You can also revoke AdCrux AI's access directly from your Facebook account settings under Business Integrations.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

8. Children

AdCrux AI is not directed to children under 16, and we do not knowingly collect data from them.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by additional notice.

10. Contact us

Questions about this policy or your data? Email privacy@adcrux.ai.