Privacy policy

2. What data we collect

The data falls into four groups. Each is stored separately, and for each one the exact fields we record are listed below.

2.1. Account data

You enter these yourself when you register:

• first and last name
• email address
• a cryptographic hash of your password (the password itself is never stored)
• the language you read the dashboard in

When you fill in your business profile, additionally:

• the business name and its category
• the country, currency and time zone

When you prepare an ad:

• images and videos you upload for your ads - kept on our server only until they reach Meta
• the text you write about the images and videos: what you offer, the price, the address

2.2. Data obtained through Meta

Once you have signed in with Facebook and granted access to your ad account, we read the following through the Meta Marketing API:

• your Meta account's identifier and the list of permissions you granted us
• the ad account's identifier, name, currency, time zone, status and spending limit
• images and videos in the ad account's media library: name, link, size and which ads use them
• the Facebook Page's identifier, name and the location given in the Page's own settings
• the identifier and username of the Instagram professional account linked to your Page
• the posts on that Instagram account: caption, type, image or video link, thumbnail, post link, date posted and whether Meta allows the post to be advertised
• the posts on your Facebook Page: text, image, link and date posted
• the pixel's identifier, name and the time of its last event
• the names, statuses, budgets and audience settings of campaigns, ad sets and ads
• statistics: amount spent, impressions, clicks, conversions and lead counts
• the structure of your lead forms and the questions in them
• the ad account's settings and limits
• the raw form of the notification Meta sends — the technical message announcing that a new lead has arrived

Access to this uses two access tokens: one for the ad account, one for the Page. Both are stored encrypted in the database and are decrypted only while a request to Meta is being sent. We have no access to your personal Facebook profile, your friend list or your private messages, and we do not ask for it.

Instagram posts are shown while you create an ad, at the step where you choose an image: the post you choose becomes the ad. Granting access to your Instagram data is optional — without it, your posts will not appear at that step, and the rest of the service works as usual. We do not ask for access to your Instagram comments, insights or private messages (Direct).

Images and videos you upload for your ads are placed in your ad account's Meta media library and can be used in later ads too. The «Delete» button on the picture step removes a file from the library; a file an ad is using is never deleted. Files in the library belong to your ad account: if you stop using the service they stay at Meta, and can be deleted in Ads Manager.

2.3. Lead data

This is data about third parties who saw your ad and filled in a form on Facebook or Instagram. It includes:

• name
• phone number
• email address
• city or region, if the form asked for it
• answers to the extra questions the business itself added
• the date and time the form was submitted, and which ad the person came from

The owner of this data is the advertising business. We store and deliver it on that business's behalf only. Lead data is never sold, never rented out and never passed to third parties for advertising.

2.4. Technical data

When you use the service, the server logs record the request time, the page address, the browser type and the IP address. These logs are used only for security and troubleshooting. They rotate by size: older entries are replaced by newer ones and drop out on their own.

2.5. Information received through Google

Only if you turn on writing leads to a Google Sheet yourself. When you sign in with your Google account we receive two things: your email address - to show which account is connected - and one permission - to write only to the sheet we created.

This permission does not let us see, read or change any other file in your Google Drive: we only see the «TargetologAI — Customers» sheet we created. New leads' name, phone, email, city, form answers and the ad they came from are written to it.

3. Why we collect it

Each group serves one specific purpose:

• Account data — to recognise you, let you into the system, track your subscription status and contact you.
• Meta data — to create ads, pause them, change their budgets and show you the result. From the statistics the system works out which ad performs better and makes suggestions.
• Lead data — to deliver the customer enquiry to you and show it in your dashboard.
• Google information - to write leads to the Google Sheet you connected and to show which Google account is connected.

We do not use your data to show you other companies' advertising, and we do not build profiles from it.

4. Legal basis

We process account data and Meta data in order to perform the contract with you: without that data the service cannot work. Connecting to your ad account rests on separate, explicit consent, which you can withdraw at any time from your Facebook settings.

For lead data we act as a processor: the owner of that data, and the party answerable for it, is the advertising business. Collecting and using it lawfully is their obligation.

5. How long we keep it

Data is kept for as long as your account exists. There is no schedule that erases it once a period runs out — deletion happens on request, and section 10 explains how to ask. The two exceptions are marked in the table below: those really do disappear on their own.

On its own side Meta keeps lead data for 90 days. That is why we run a reconciliation every day — so no enquiry is lost.

Leads written to your Google Sheet stay in your file: it lives in your Google Drive and we do not delete it. Even if you disconnect the sheet or the data is erased on our side, the sheet stays with you - you manage it yourself.

6. Who can see it

Each customer's data is separated in the database. Every query is filtered by the account owner, so one customer cannot see another's campaigns or leads.

• You — you see all the data in your own account. The service currently works for a single user: there is no way to invite anybody else into an account.
• Our staff — only when you contact support, and only the part needed to resolve the problem. Any change they make is written to the log.

7. Third parties

Your data goes to the services listed below and only for the purposes shown. It goes to nobody outside this list and is sold to nobody.

Leads are sent to Google only after you connect a Google Sheet, and only to be written to that sheet. You can withdraw the permission at any time in the cabinet or in your Google account settings. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No personal data is sent to Sentry: attaching user information to error reports is switched off in the settings.

Only the data needed to prepare and analyse your ads is sent to Anthropic: your business profile, the text you write about your images and videos, ad statistics, targeting settings, post texts and the questions you write to the AI yourself. The images and videos themselves are not sent. The names, phone numbers and other personal data of your leads are not sent.

8. Transfers outside the country

Meta's servers are located outside the Republic of Uzbekistan. The data exchange that manages your ads and collects your leads happens with those servers — that follows from how the service works.

All of that exchange runs over an encrypted channel (HTTPS). How Meta processes the data on its side is governed by Meta's own privacy policy.

For the AI features, the data listed in section 7 is also sent over an encrypted channel to Anthropic's servers (USA). Its processing is governed by Anthropic's own terms.

If you connect a Google Sheet, lead data is also sent over an encrypted channel to Google's servers (USA) to be written into that sheet. Its processing is governed by Google's own privacy policy.

9. Your rights

At any time you may ask to:

• see what data we hold about you
• correct data that is wrong
• delete your data
• download your data as a file
• withdraw the access granted to your ad account
• object to the processing

We answer your request within 30 days. To get in touch: abdullamn1996@gmail.com.

10. Deleting your data

You can request deletion in two ways: through the form on this site, or by removing the app in your Facebook settings. In both cases the request is recorded and you are given a confirmation code. The deletion is carried out by a member of our team, by hand, within 30 days. You can check the state of your request by that code at any time.

Send a deletion request

11. Cookies

The site uses only the cookies it cannot work without. There are no advertising or tracking cookies and no third-party analytics.

• a session cookie — to remember that you are signed in
• a language cookie — to remember the language you chose
• a CSRF cookie — to protect forms against forgery

Your light or dark theme choice is not kept in a cookie but in your browser's own storage (localStorage), and it is never sent to the server.

12. Age limit

The service is not intended for anyone under 18, and we do not knowingly collect their data. If we find that such data has reached us by mistake, we delete it.

13. Changes to this policy

When the policy changes we update the “last updated” date on this page. If a change materially affects you — a new type of data starts being collected, say, or a retention period grows — we tell you by email at least 14 days beforehand.

14. Contact

For any question, complaint or request about privacy, contact us:

• HUNTER SALLERS LLC, Tax ID 311 076 944
• 24 Kunchilar St., Shaykhantakhur District, Tashkent, Uzbekistan
• abdullamn1996@gmail.com
• +998 97 130 01 23