Privacy Policy
Effective: November 11, 2026
Information and purposes
AdPilot is an advertising management workspace. After you authorize AdPilot through Meta, we use your access token to retrieve your name, authorized ad accounts, campaign settings and aggregate advertising performance such as spend, impressions and clicks. We also display the business portfolios and Pages you select during Meta consent, including Page name, ID and aggregate Page like count. We use this data to show your connected assets, provide campaign reports and let you export CSV files. We do not collect individual follower records.
The current integration requests ads_read, ads_management, business_management, pages_show_list and pages_read_engagement, together with the basic profile information required for login. Meta permissions and access to each asset are determined by your consent and Meta's access controls. You can explore synthetic sample data without connecting a Meta account; it is labeled separately.
Campaign actions
The reviewer login can create a PAUSED campaign in an ad account authorized by its own Meta connection. It cannot activate campaigns, create ad sets or publish creatives. Pausing an existing campaign is available only when an operator has separately enabled that account in the server's permitted write scope. It is disabled in the current review deployment.
Storage and retention
Meta access tokens and session activity are held in server memory, not in browser storage or application activity logs. Your browser uses an HttpOnly session cookie. Sessions expire after eight hours and are also cleared when the service restarts. Signing out removes that session. Downloaded CSV reports remain on your own device until you delete them. Server request logs may contain connection metadata such as IP address, request path and timestamp for operating the service. This version does not use third-party analytics or advertising trackers.
Service providers and location
The service is hosted by Alibaba Cloud in Hong Kong. Cloudflare provides domain registration and DNS. Authorizing the integration and requesting advertising data involves communication with Meta. We use these providers to operate the service, and do not sell the Meta data we receive or use it for unrelated advertising.
Your controls and requests
In Accounts & permissions, select Clear connection data to remove the current session's Meta token, user information, cached permissions and activity history. You can separately revoke AdPilot in Facebook's Business integrations settings. Clearing AdPilot data does not delete advertising assets held by Meta. Contact Techboloy at niqiao1111@163.com for privacy questions or requests concerning your data. Do not email passwords or access tokens.
Current availability
AdPilot is available as an invite-only review and testing service. Workspace passwords are stored as salted hashes, the website uses HTTPS, and each session must connect its own Meta identity. Meta advanced access has not yet been approved; customer self-registration is unavailable.