Privacy Policy

1. Introduction

Welcome to Easy Ad Flow. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application and services.

By using Easy Ad Flow, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and business name provided during registration or waitlist signup.
• Facebook Integration Data: When you connect your Facebook account, we access your Facebook Pages, Ad Accounts, and Lead Forms solely to enable campaign creation and management on your behalf. We do not store your Facebook access tokens beyond what is necessary to operate the service.
• Campaign Data: Ad copy, images, campaign names, and configuration details you input into the application.
• Usage Data: Information about how you interact with our application, including actions taken and features used.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Easy Ad Flow service
• Publish ad campaigns to Facebook Ads Manager on your behalf
• Send you service-related communications (e.g., beta access confirmation)
• Improve and personalise your experience with our application
• Respond to your enquiries and provide customer support
• Monitor and analyse usage patterns to improve our service

We do not sell, trade, or rent your personal information to third parties.

4. Facebook Data Usage

Easy Ad Flow integrates with the Facebook Marketing API to allow you to manage and publish advertising campaigns. When you connect your Facebook account:

• We access your Facebook Pages, Ad Accounts, and Lead Forms solely to perform actions you explicitly request within the app.
• We do not post to your Facebook profile or Pages without your direct instruction.
• We do not share your Facebook data with any third parties outside of what is necessary to operate the service.
• Your Facebook access token is stored securely and used only to communicate with the Facebook API on your behalf.
• You may revoke our access to your Facebook account at any time via your Facebook Settings > Security and login > Business integrations.

Our use of Facebook user data is limited to what is necessary to provide the service and is compliant with Facebook's Platform Policy.

Facebook data we store

• Your app-scoped Facebook user ID.
• Your Facebook access token (from Facebook Login for Business).
• The IDs of the business portfolio, ad account and Facebook Pages you select or use in the app.
• The campaigns, ads and lead forms you create through Easy Ad Flow, and their performance (insights) data such as impressions, reach, clicks, spend and results.
• Technical logs of our calls to the Meta API (time, endpoint, success or error code), kept for reliability and security.

This data is used only to create, launch and show your own campaigns and results inside your Easy Ad Flow account. It is never used for anything else, never sold, and never combined with other users' data.

Background sync: about every 4 hours, a scheduled job uses your stored token to refresh your own ad account, campaign and results data so your dashboard stays up to date. It only reads data from your own connected account.

Disconnect and deletion: when you click Disconnect Meta in Settings, we ask Meta to revoke Easy Ad Flow's access and we delete your stored access token, Facebook user ID, saved business and ad account links, and cached ad account and performance data. If you remove Easy Ad Flow under Facebook Settings > Security and login > Business integrations, Meta notifies us and we delete the same data. If you send a data deletion request through Facebook, we automatically delete the same Facebook data right away, and delete the rest of your data within 30 days at the latest. Campaign records you created in Easy Ad Flow stay in your account until you delete them or request full account deletion on our Data Deletion page (completed within 30 days).

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. You may request deletion of your data at any time by contacting us at privacy@easyadflow.com. We will respond to deletion requests within 30 days.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

To report a security vulnerability, please email me@elishahong.com.

7. Third-Party Services

Our application may use third-party services including:

• Facebook (Meta): For ad campaign management via the Marketing API.
• Base44: Our application hosting and backend infrastructure provider.
• OpenAI: Generates ad copy and ad images from the prompts, product details and campaign text you enter (using our key or your own OpenAI key if you add one).
• Base44's built-in AI (which may use providers such as OpenAI): powers some AI writing and image features, such as social posts, Messenger and carousel creatives and optimisation tips.
• fal.ai: Generates AI video ads when you use the video builder.

We send these AI providers only the text and images needed for the content you ask for. We never send them your Facebook access token.

Each of these services has its own privacy policy governing the use of your information.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw consent for data processing at any time
• Lodge a complaint with a relevant data protection authority

To exercise any of these rights, please contact us at privacy@easyadflow.com.

9. Children's Privacy

Easy Ad Flow is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: