Privacy Policy — UploadMetaAds

UploadMetaAds ("we", "us", or "our") operates the website at uploadmetaads.com and the application at app.uploadmetaads.com (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed password. If you are invited to a workspace, we collect your name and role within that workspace.

Meta Account Data

When you connect your Meta Business account via OAuth, we receive and store:

A Meta access token (encrypted at rest using AES-256-CBC)
Your Meta user ID and connected ad account IDs
Ad account names and associated metadata needed to manage your campaigns

We do not store your Meta password. Authentication is handled entirely through Meta's official OAuth flow.

Uploaded Content

When you upload video files through the Service, those files are temporarily stored in cloud storage (Cloudflare R2) to facilitate the transfer to Meta's servers via the Marketing API. Uploaded files are retained only for the duration needed to complete the upload to Meta, after which they are deleted.

Usage Data

We may collect standard usage data such as IP address, browser type, pages visited, and timestamps to improve the Service and diagnose issues.

2. How We Use Your Information

To provide and maintain the Service, including bulk uploading ads to your Meta ad accounts
To authenticate you and manage your sessions
To communicate with you about the Service (e.g., account-related emails)
To diagnose technical problems and improve the Service

3. Data Sharing and Third Parties

We do not sell your personal information. We share data only with the following third parties as necessary to operate the Service:

Meta Platforms, Inc. — to create and manage ads on your behalf via the Meta Marketing API
Cloudflare, Inc. — for hosting, content delivery, and temporary file storage (R2)
Database hosting provider — for storing account and workspace data

4. Data Security

We take data security seriously:

Meta access tokens are encrypted at rest using AES-256-CBC encryption
Passwords are hashed using bcrypt before storage
All data in transit is encrypted via HTTPS/TLS
Access to production systems is restricted to authorized personnel

5. Data Retention

Account data is retained for as long as your account is active
Meta tokens are retained until you disconnect your Meta account or delete your account
Uploaded video files are temporarily stored and deleted after the upload to Meta is complete
Usage logs are retained for up to 90 days

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (see our Data Deletion Request page)
Disconnect your Meta account at any time through the Service
Delete your account, which will remove all associated data

7. Cookies

We use essential cookies and local storage to maintain your authentication session (JWT token). We do not use third-party tracking cookies or advertising pixels.

8. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@uploadmetaads.com.

For data deletion requests, please visit our Data Deletion Request page or email data@uploadmetaads.com.