Privacy Policy

1. Introduction

Adalyzer ("we," "us," or "our") is operated by Little Thread Co. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Adalyzer web application and related services (collectively, the "Service"). By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, and password when you create an account.
• Organization details: company or team name and role information you provide when setting up an organization.
• Payment information: billing details processed by our third-party payment processor. We do not store full payment card numbers on our servers.
• Communications: information you provide when you contact us for support or send us feedback.

2.2 Information from Meta (Facebook) Integration

When you connect your Meta (Facebook) account through Facebook Login, we receive and store the following data in accordance with Meta Platform Terms:

• Authentication tokens: OAuth access tokens that allow us to access your authorized Meta advertising data on your behalf.
• Ad account information: ad account IDs, names, and account status.
• Campaign and ad data: campaign names, ad set names, ad creative content (text, images, videos), and performance metrics (impressions, clicks, spend, conversions, CTR, CPC, CPM, ROAS).
• Basic profile information: your Facebook user ID and name, as required by Facebook Login.

We only request the minimum permissions necessary to provide the Service. You can review and revoke these permissions at any time through your Facebook Business Integrations settings.

2.3 Automatically Collected Information

• Usage data: pages visited, features used, and actions taken within the Service.
• Device and browser information: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: we use essential cookies for authentication and session management. See Section 8 for details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and operate the Service: display your ad performance data, generate analytics, and produce creative and copy analysis.
• Authentication and security: verify your identity, maintain session security, and protect against unauthorized access.
• Improve the Service: analyze usage patterns to improve features, fix bugs, and optimize performance.
• Communicate with you: send service-related notices, respond to support requests, and provide updates about changes to the Service.
• Comply with legal obligations: meet applicable legal requirements, enforce our terms, and protect our rights.

We do not sell your personal information or your Meta advertising data to third parties. We do not use your Meta data for purposes other than providing the Service to you.

4. How We Share Your Information

We may share your information only in the following circumstances:

• Within your organization: other members of your Adalyzer organization can view shared ad data and analytics as configured by your organization's administrators.
• Service providers: we use trusted third-party providers for hosting (Vercel), database services (Supabase), and payment processing. These providers are contractually bound to protect your data and only process it on our behalf.
• Legal requirements: we may disclose information if required by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

We do not share Meta user data with third parties for their own independent use, advertising, or data brokerage. All Meta data is processed solely for the purpose of delivering the Service to you.

5. Meta Platform Data Use

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. Specifically:

• We only request permissions that are necessary to provide our Service.
• We do not sell, license, or otherwise transfer Meta data to any ad network, data broker, or other monetization-related service.
• We do not use Meta data to build or augment user profiles for advertising purposes.
• We do not use Meta data to conduct surveillance or track individuals.
• We store Meta access tokens securely and encrypted in our database. Tokens are only used to fetch advertising data you have explicitly authorized.
• Upon disconnection of your Meta account or deletion of your Adalyzer account, we delete all stored Meta data, including access tokens, within 30 days.
• You may request deletion of your Meta data at any time by contacting us or disconnecting your Meta account through the Service settings.

6. Data Retention

• Account data: retained for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except as required by law.
• Meta advertising data: retained only while your Meta account is connected. When you disconnect your Meta account or delete your Adalyzer account, all synced Meta data is deleted within 30 days.
• Usage logs: retained for up to 12 months for security and operational purposes, then deleted or anonymized.
• Backups: residual copies in encrypted backups are overwritten within 90 days of deletion.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Row-level security (RLS) in our database to ensure strict multi-tenant data isolation — your data is only accessible to authorized members of your organization.
• Secure storage of Meta access tokens with restricted access.
• Regular security reviews and updates of our infrastructure and dependencies.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use strictly necessary cookies to operate the Service, including authentication session cookies. We do not use third-party tracking or advertising cookies. We may use privacy-respecting analytics to understand how the Service is used, but we do not track you across other websites.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data and Meta data. See our Data Deletion Instructions for step-by-step guidance.
• Data portability: request your data in a structured, machine-readable format.
• Withdraw consent: revoke consent for data processing where consent is the legal basis.
• Disconnect Meta: revoke Adalyzer's access to your Meta data at any time through your Service settings or Facebook Business Integrations settings.

To exercise any of these rights, contact us at privacy@adalyzer.com.

10. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

12. Third-Party Links and Services

The Service may contain links to third-party websites or services, including Meta/Facebook. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where required, providing additional notice (such as an in-app notification or email). Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, your data, or your rights, please contact us:

• Email: privacy@adalyzer.com
• Company: Little Thread Co