Privacy Policy

Last updated: October 17, 2026

This policy explains what information AdsNow collects, why we collect it, who we share it with, how long we keep it, and how you can have it deleted. AdsNow (adsnow.studio) is operated by [LEGAL ENTITY NAME], [BUSINESS ADDRESS] ("AdsNow", "we", "us"). If you have a question, email hello@adsnow.studio.

The short version

• We use your information to build, publish and report on ads for you. We don't sell it, and we don't use it to advertise to you or anyone else.
• When you connect Facebook, we can see only the ad accounts, Pages and lead forms you already manage and choose to share with us, and we use that access only for the features you use.
• The access tokens Meta gives us, and any API keys you save, are encrypted before we store them.
• We don't store the names, emails, phone numbers or answers people submit in your lead forms. We fetch them from Meta when you view them.
• You can disconnect Facebook at any time and ask us to delete everything. See how to delete your data.

1. Information we collect

Your account

Your email address, your name, and your password. Passwords are handled by our sign-in provider (Supabase) and stored only as a secure hash. We never see them.

Billing

Stripe handles payments. Your card details go straight to Stripe and we never see or store them. We keep your Stripe customer and subscription IDs, your plan, its status, and your trial and renewal dates.

Your business and campaigns

• The website address you give us, and what we read from your public website when we scan it: text about your services and offers, your brand colors and fonts, your logo and images.
• Files you upload, such as photos, logos and existing ads.
• Campaign settings: business name, service area, targeting (locations, age, gender, interests), budget, schedule, call to action and lead-form questions, including the privacy policy link you give for your lead forms.
• What we create for you: ad copy, images, rendered videos and voiceovers.
• An optional webhook address (for example a Make.com URL) if you add one in Settings.

API keys you save

AdsNow's AI features run on your own Anthropic API key. You can also add an ElevenLabs key for voiceovers. We encrypt keys before storing them and use them only to make requests for your account. See AI processing and your API keys.

Facebook and Instagram

If you connect your Meta account, we receive the data described in section 2.

Technical information

Our servers log requests, including IP address, browser type, the page or feature requested and any errors, so we can keep the service secure and fix problems. We don't use analytics or advertising trackers.

2. Facebook and Instagram (Meta) data

When you click Connect with Meta in Settings, Facebook asks you to approve the permissions below. You choose which business portfolios, Pages and ad accounts to share. We use each permission only for the purpose listed.

Permissions AdsNow asks for, and why

• public_profile (always included by Facebook): reads your Facebook user ID so we can link the connection to your AdsNow account. We store the ID only.
• business_management: lists the business portfolios you manage, and the ad accounts and Pages in them, so you can choose where your ads go.
• ads_management: creates campaigns, ad sets, ads, and ad images and videos in the ad account you choose, and switches them on or pauses them, or changes their daily budget, when you ask. New campaigns are created paused.
• ads_read: reads your ad accounts and your campaigns' results (spend, impressions, clicks, click-through rate, leads and cost per lead) to show them in your dashboard.
• leads_retrieval: reads the leads submitted to lead forms on campaigns you created with AdsNow, so you can see them in your dashboard.
• pages_show_list: lists the Facebook Pages you manage so you can choose which Page your ads run from.
• pages_manage_ads: creates lead forms on your Page and runs ads in your Page's name.
• pages_read_engagement: reads basic details of your Page, such as its name and ID, and the Instagram account linked to it.
• pages_manage_metadata: requested so a Page can be subscribed to notifications about new leads. AdsNow doesn't use this permission today.
• instagram_basic: reads the ID and username of the Instagram professional account linked to your Page, so we can show it and use it for Instagram placements.
• pages_manage_posts: only for the optional organic posting feature, which is available to selected accounts. Posts a video you approve to your Facebook Page.
• instagram_content_publish: only for the optional organic posting feature. Publishes a Reel you approve to your Instagram account.

If you use the organic posting feature and connect an Instagram professional account directly through Instagram instead of Facebook, Instagram asks for instagram_business_basic (to read the account's ID and username) and instagram_business_content_publish (to publish Reels you approve).

What we store from Meta

• The access token for your Facebook connection and, where available, a Page access token and an Instagram access token. These are encrypted before they are stored.
• Your Facebook user ID, the ID of the ad account you choose, your Page's ID and name, the linked Instagram account's ID and username, and when your connection expires.
• The IDs of the campaigns, ad sets, ads, lead forms, images and videos AdsNow creates in your account, so we can show and manage them.

What we don't store

• Lead details. Names, emails, phone numbers and answers submitted to your lead forms are fetched from Meta when you open a campaign, shown only to you, and not saved in our database. They stay in your Meta account, where you can download them from Meta Business Suite.
• Campaign results. Spend, clicks and other results are fetched from Meta when you view them.
• Your Facebook password. Meta's login handles it and we never see it.

How we use and share Meta data

We use Meta data only to provide the features you use: publishing and managing your ads, and showing you their results and leads. We don't sell it, use it to build profiles, use it for any other advertising, or give it to data brokers. We share it only with the service providers in section 5 that host and run AdsNow for us, and as required by law. We follow Meta's Platform Terms.

3. How we use information

• To run AdsNow: scan your website, write ad copy, create images and videos, publish campaigns to your Meta ad account, and show you results and leads.
• To bill you through Stripe.
• To send emails about your account, such as sign-up confirmation, password resets, billing and important changes.
• To keep AdsNow secure, prevent abuse, and fix problems.
• To meet legal obligations.

We don't sell personal information, and we don't use your data to train AI models.

4. AI processing and your API keys

AdsNow's AI writing and website analysis run on Claude, made by Anthropic, using your own Anthropic API key. When you scan a site or create ads, we send the content needed for that task (for example text from your website, your business details, your campaign brief and images to analyze) to Anthropic under your key. Anthropic processes it under its own terms and your account with Anthropic, and bills you directly for what you use.

If you add an ElevenLabs key (optional), the script for a video is sent to ElevenLabs to create the voiceover, and ElevenLabs bills you directly. Settings may also show a Google AI key field from an earlier version. AdsNow doesn't currently send anything to Google with that key, and we'll update this policy before that changes.

5. Who we share information with

We use these service providers to run AdsNow. They may process your information only to provide their service to us.

• Supabase: database, sign-in and file storage.
• Railway: hosting for the AdsNow app and servers.
• Stripe: subscriptions and payments.
• Anthropic: AI writing and analysis, through your own API key.
• ElevenLabs: voiceovers, only if you add your own key.
• Amazon Web Services (AWS): video rendering.
• Cloudflare: the bot check (Turnstile) on the sign-in, sign-up and password reset pages.
• Google Fonts: the fonts on our website. Your browser loads them from Google, which sees your IP address.
• Deepgram or OpenAI: speech-to-text, used only if you upload an existing video ad for us to analyze.
• Meta: to publish and manage ads in your account, at your direction.

Some services receive no personal information: stock media libraries (Pexels and Pixabay) receive search words, and OpenStreetMap receives the place names you target so we can find them on a map.

If you add a webhook address (for example Make.com), we send it the campaign's name and ID, your business name, your service area and the Meta campaign and lead-form IDs when you publish. We don't send lead details.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply. We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

6. Cookies

• A sign-in cookie keeps you logged in for up to 30 days.
• A short-lived cookie (about 10 minutes) protects the connection while you connect Facebook or Instagram.
• Cloudflare's bot check and Stripe's checkout page may use their own cookies under their own policies.

We don't use analytics, advertising or tracking cookies.

7. Security

All traffic to AdsNow uses HTTPS. Meta access tokens and API keys are encrypted (AES-256-GCM) before they are stored, with the encryption key kept separately from the database. Each account can reach only its own data. No system is perfectly secure, so if a breach affects your information, we'll tell you as the law requires.

8. How long we keep information

• Account, business and campaign data: while your account is open. When you ask us to delete your account, we delete it within 30 days.
• Your Meta connection (tokens, Page and Instagram details, ad account ID): removed from AdsNow as soon as you click Disconnect in Settings. Meta's tokens also stop working when they expire, after about 60 days, or when you remove AdsNow in your Facebook settings.
• Lead details and campaign results: not stored by AdsNow.
• Billing records: Stripe keeps payment records, and we keep basic billing records for as long as tax and accounting law requires.
• Server logs: kept by our hosting provider for no more than 30 days.
• Backups: deleted data can remain in database backups until those backups expire and are replaced.

Cancelling your subscription does not delete your account. If you want your data deleted, ask us.

9. Your choices and rights

• See or get a copy of your information: email us.
• Correct your information: update it in Settings or email us.
• Delete your account and data: see how to delete your data.
• Disconnect Facebook at any time in Settings, or remove AdsNow in your Facebook settings.
• Object or withdraw consent to any processing that relies on it.

Depending on where you live, for example in the EU, the UK or California, you may have more rights under laws such as the GDPR and the CCPA. We'll respond to requests within 30 days and won't treat you differently for making one. You can also complain to your local data protection authority.

10. Deleting your data

Email hello@adsnow.studio from the email address on your AdsNow account and ask us to delete your data, or remove AdsNow in your Facebook settings to stop our access right away. Step-by-step instructions, and what gets deleted, are on our data deletion page.

11. If you filled out a form on an ad made with AdsNow

Businesses use AdsNow to create Facebook and Instagram lead ads. If you submitted your details through one of those forms, the business that ran the ad decides how your information is used, and its own privacy policy applies. AdsNow does not store your form answers. It shows them to that business when it views its leads. To access or delete your information, contact the business named in the ad. Meta's own handling of your data is covered by Meta's Privacy Policy.

12. Where information is processed

AdsNow and its main service providers process data in the United States. If you use AdsNow from outside the US, your information is transferred to and processed in the US.

13. Children

AdsNow is for businesses and isn't meant for anyone under 18. We don't knowingly collect information from children.

14. Changes to this policy

When we change this policy, we update the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.

15. Contact

[LEGAL ENTITY NAME], [BUSINESS ADDRESS]
Email: hello@adsnow.studio