This policy explains what data Ads Batch Creator (“the Service”, “we”, “us”) collects, why we collect it, who we share it with, and how you can have it deleted. It applies to the Ads Batch Creator web application and its marketing pages.
In short: we store the minimum needed to run your account and create ads on your behalf. We use your Meta access token only to perform actions you explicitly request. We do not sell your data, and we do not use your advertising data to train models or to build profiles.
1. Who we are
Ads Batch Creator is operated by the service operator identified in the “Contact” section below. If you have any question about this policy, that address is the fastest route to a person.
2. What we collect
| Category | What it includes | Why |
|---|---|---|
| Account | Name, email address, a bcrypt hash of your password (only if you registered with email), email-verification status, account creation date, last sign-in time | To create and secure your account |
| Meta connection | Your Meta user ID, the access token issued when you connect your Meta account, and the permissions you granted (ads_management, pages_read_engagement, pages_show_list, email) |
To read your ad accounts and create ads at your instruction |
| Advertising data | Ad accounts, campaigns, ad sets, ads and creatives you select, plus images and videos you upload for ad creation | To build the ads you ask us to build |
| Billing | Stripe customer identifier, subscription status, plan, trial start and end dates, any coupon used | To manage trials and subscriptions |
| Usage & diagnostics | A log of requests made to the Service (endpoint, timestamp), errors returned by the Meta API, and records of batch operations you run | To debug failures and support you |
| Marketing analytics | Meta Pixel identifiers (_fbp, _fbc) and Google Analytics events, on our marketing pages only |
To measure which pages bring people to the Service |
Payment card details
We never see or store your card number. Card data is collected and held by Stripe, our payment processor. We retain only Stripe’s customer identifier and your subscription state.
3. How we use your Meta access token
This is the most sensitive item we hold, so we want to be precise about it.
- The token is stored on our server and is used solely to call the Meta Marketing API on your behalf, for actions you initiate — listing your ad accounts, reading a template ad, uploading media, and creating ads.
- We do not use it to read data unrelated to those tasks, to post as you, or to access accounts you have not selected.
- It is never shared with third parties or exposed to other users of the Service.
- You can revoke it at any time from Meta: Facebook → Settings & Privacy → Settings → Apps and Websites, then remove Ads Batch Creator. Revoking immediately ends our ability to act on your behalf.
4. Legal bases for processing
Where the UK GDPR or EU GDPR applies, we rely on:
- Performance of a contract — account, Meta connection, advertising data and billing. Without these the Service cannot function.
- Legitimate interests — diagnostics and security logging, to keep the Service working and to investigate abuse.
- Consent — marketing analytics and cookies on our marketing pages. You may withdraw consent at any time.
5. Who we share data with
We do not sell your data. We share it only with the providers needed to run the Service:
- Meta Platforms — to read and create advertising objects at your instruction.
- Stripe — payment processing and subscription management.
- Google Analytics — aggregate traffic measurement on marketing pages.
- Our hosting and database providers — to store the data described above.
- Our email provider — to send transactional messages such as password resets.
We may also disclose data where we are legally required to do so.
6. International transfers
Some providers listed above process data outside the UK and EEA. Where that happens, transfers rely on the safeguards those providers offer, such as Standard Contractual Clauses or an adequacy decision.
7. How long we keep it
- Account and Meta connection data — for as long as your account is open.
- Advertising data and uploaded media — retained while needed to complete your requests and support you afterwards. Note that ads you create live in your Meta ad account and are governed by Meta’s own retention, not ours; deleting your data here does not delete ads you have published.
- Billing records — retained for as long as tax and accounting law requires, typically six years.
- Diagnostic logs — retained on a rolling basis for troubleshooting, then deleted.
When you delete your account, we erase your account record, your stored Meta token and your uploaded media. See the deletion page linked below.
8. Your rights
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, receive a portable copy, object to or restrict processing, and withdraw consent. To exercise any of these, contact us at the address below. We respond within one month.
If you are in the UK or EEA and are unhappy with our response, you may complain to your national data protection authority.
9. Deleting your data
You can delete your account and all associated data at any time. Full instructions are on the Data Deletion page.
10. Cookies
The application itself uses a session cookie to keep you signed in — it is required for the Service to work. Our marketing pages additionally set Meta Pixel and Google Analytics cookies, which you may decline without losing access to the Service.
11. Children
The Service is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.
12. Changes to this policy
If we make a material change we will update the “Last updated” date above and, where the change significantly affects you, notify you by email.
13. Contact
Questions, requests or complaints: djaoui@revenuegrowthagency.co.uk. We aim to reply within a few working days, and within one month for formal data requests.