1. Who we are
This Privacy Policy explains how ADSflow collects, uses, stores, shares and deletes personal data. ADSflow is operated by KENZI HOTELS (registered address: Zone Touristique Agdal Avenue Mohamed VI, Marrakech, Marrakech 40 000, Morocco) ("ADSflow", "we", "us"). We are the controller of the personal data described here.
Questions or requests about privacy: privacy@adsflow.tech. Our data protection contact can be reached at the same address.
2. Scope
This policy covers the website at adsflow.tech, the ADSflow web application, and data we receive from Meta Platforms, Inc. ("Meta") when you connect your Meta account through Facebook Login for Business. ADSflow is a business tool: it is intended for marketing professionals acting for a business, not for consumers.
3. Data you give us
- Account data: your name, work email, a salted hash of your ADSflow password (never the password itself), workspace name, role and language preference.
- Team data: names and emails of colleagues you invite to your workspace.
- Content you create: launch settings, naming templates, automated rules, comment moderation rules, replies you write, and media files you upload to send to your ad account.
- Support correspondence: messages you send us and our replies.
- Technical data: IP address, browser user agent and timestamps in security and access logs, and a session cookie that keeps you logged in.
ADSflow never asks for, receives or stores your Facebook password, Facebook cookies or browser sessions.
4. Data we receive from Meta
ADSflow accesses your Meta (Facebook) data only after you connect your account via Facebook Login for Business and explicitly grant permissions in Meta's dialog. In that dialog you choose which Business portfolios, ad accounts and Pages ADSflow may access. We request only the permissions listed below, and each one is used by a visible feature of ADSflow.
| Permission | Data we receive or actions we perform | Why we need it |
|---|---|---|
public_profile | Your name and app-scoped user ID. | Identify the person who connects their Meta business assets to ADSflow (name and app-scoped ID). |
ads_management | Campaign, ad set, ad and creative settings (names, objectives, budgets, schedules, targeting, placements, statuses); images and videos you upload to the ad account. | Create paused campaigns, ad sets and ads, upload creatives, and pause, activate or change budgets of ads the user manages. |
ads_read | Ad account details (name, currency, time zone, status, spend cap, amount spent) and performance metrics: impressions, reach, clicks, CTR, CPC, CPM, spend, results and cost per result. | Read campaign structure and performance insights to show reports and evaluate the user's automated rules. |
business_management | Business portfolio names, IDs and verification status; the ad accounts and Pages owned by or shared with those portfolios. | List the business portfolios the user belongs to and the ad accounts and Pages owned by them. |
pages_show_list | Names, IDs and profile pictures of the Pages you manage, and the tasks you can perform on them. | Show the Pages the user manages so they can pick the Page that will run the ads. |
pages_read_engagement | Page details and the content of posts published by your Pages, including posts created for ads, with their engagement. | Read Page details and posts used as ad creatives, and engagement on those posts. |
pages_manage_ads | Page access to create ad creatives and the posts that back them. | Create ads that run on behalf of the selected Page. |
pages_read_user_contentcomment moderation | Comment text, comment ID, time, hidden status and the commenter name and ID as shown on Facebook. | Read comments people leave under the user's ads so the team can moderate them. |
pages_manage_engagementcomment moderation | Moderation actions on comments under your ads and Page posts, and replies published as your Page. | Hide, unhide, delete and reply to comments under the user's ads. |
pages_manage_metadatacomment moderation | Webhook subscription settings for your Pages. No additional personal data. | Subscribe the user's Pages to webhooks so new comments arrive in real time. |
In addition, Meta gives us an access token that lets ADSflow act within the permissions you granted. Tokens are encrypted at rest with AES-256-GCM, are never shared with third parties and are deleted when you disconnect.
People who comment on your ads. When you use comment moderation, we process comments that other people leave under your ads and Page posts (comment text, time and the commenter name and ID as shown on Facebook). We process this data on your behalf, only to display it to your workspace and to carry out the moderation actions you or your rules choose. We do not enrich, combine or profile commenters, and we do not contact them.
All data received from Meta is processed solely for the purpose of providing ADSflow to you and is handled in accordance with the Meta Platform Terms, the Meta Developer Policies and applicable law.
5. How we use data
- Displaying your Business portfolios, ad accounts, Pages, campaigns and statistics.
- Creating and editing campaigns, ad sets, ads and creatives that you configure, and changing statuses and budgets when you or your automated rules request it.
- Evaluating the automated rules you create and recording what each run did.
- Showing comments under your ads and Page posts and carrying out the hide, unhide, delete and reply actions you or your moderation rules choose.
- Operating, securing and supporting the service: authentication, preventing abuse, logging API calls and actions in your workspace audit log, and answering your requests.
- Sending service emails, such as security notices and changes to these terms. We do not send marketing emails without your consent.
6. What we never do
- We do not sell, rent, license or trade Meta Platform Data or any other personal data.
- We do not use data received from Meta for advertising targeting or retargeting, inside or outside Meta.
- We do not build profiles of people, and we do not attempt to re-identify or de-anonymize anyone.
- We do not combine one advertiser's data with another advertiser's data. Each workspace is isolated, and data of each advertiser is kept separate.
- We do not use your data or Meta data to train machine learning models for other customers.
- We do not share access tokens or user IDs with anyone except the service providers that host ADSflow for us.
7. Legal bases
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (providing ADSflow); our legitimate interests (securing the service, preventing abuse, improving reliability), balanced against your rights; compliance with legal obligations (accounting, responding to lawful requests); and consent where we ask for it (you can withdraw it at any time). For comments by people who interact with your ads, you are the controller and we act as your processor.
9. International transfers
Our providers may process data outside your country. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions or the Standard Contractual Clauses (with the UK Addendum where applicable) and additional safeguards such as encryption.
10. How long we keep data
| Data | Retention |
|---|---|
| Meta access tokens | Until you disconnect, or until Meta revokes or expires them |
| Business portfolios, ad accounts, Pages, campaign structure | While the connection is active |
| Cached statistics (insights) | Up to 13 months |
| Comments under ads and Page posts | 90 days |
| Launch history, rule runs, audit log | While your workspace exists |
| API call log (technical) | Up to 90 days |
| Backups | Rotated; copies older than 30 days are destroyed |
| Your ADSflow account data | Until you delete your account |
| Invoices and payment records | As long as accounting law requires |
Everything received from Meta is deleted within 30 days after you disconnect Meta or delete your ADSflow account.
11. Security
Access tokens are encrypted at rest (AES-256-GCM, with the key stored outside the database) and in transit (TLS 1.2+). Every Graph API call is signed with appsecret_proof. Access to production systems is limited to authorized staff and is logged. Read more on our Security page.
12. Deleting your data and revoking access
You can request deletion of data we received from Meta at any time, in any of three ways:
- In ADSflow: Settings → Connections → Disconnect and delete data.
- In Facebook: Settings & privacy → Settings → Business Integrations, select ADSflow, choose Remove, then in the Removed tab open View details and press Send Request.
- By email to privacy@adsflow.tech with the subject "Data deletion".
You will receive a confirmation code and can follow progress on the deletion status page. Deletion is completed within 30 days. Step-by-step instructions are on our Data Deletion page.
You can also revoke ADSflow's access at any time in your Facebook settings under Business Integrations. Removing ADSflow there stops all access immediately; content already published on Facebook (for example, a reply you posted) stays on Facebook until you delete it there.
13. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent. To use any of these rights, write to privacy@adsflow.tech. We answer within one month. You can also complain to your local data protection authority.
California residents: we do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information.
15. Children
ADSflow is a business service for people aged 18 and over. We do not knowingly collect data from children.
16. Changes to this policy
We will post any change on this page with a new "Last updated" date. If a change is material, we will notify workspace owners by email at least 14 days before it takes effect.
17. Contact
KENZI HOTELS (registered address: Zone Touristique Agdal Avenue Mohamed VI, Marrakech, Marrakech 40 000, Morocco)
Privacy: privacy@adsflow.tech · Support: support@adsflow.tech
ADSflow is not affiliated with, endorsed or sponsored by Meta Platforms, Inc.