This Privacy Policy describes how Plainworks ("we", "us", or "our") collects, uses, and protects information when you use AdPilot, our AI-powered Meta ads management service ("Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect information that you provide directly and information generated through your use of the Service:

• Account information: Your name, email address, business name, and Telegram user ID when you register.

• Meta credentials: Meta API access tokens and Ad Account IDs that you provide to connect your advertising accounts. These are stored encrypted and used solely to manage your campaigns.

• Campaign data: Ad creatives, campaign settings, performance metrics, and budgets retrieved from the Meta Marketing API on your behalf.

• Telegram messages: Messages sent to the AdPilot bot are logged to enable conversation context and campaign history. Message logs are associated with your account only.

• Usage data: Feature usage, bot interactions, and error logs for service improvement.

2. How We Use Your Information

• To create, manage, and optimise your Meta ad campaigns on your behalf

• To send you automated daily performance reports via Telegram

• To monitor campaign performance and make automated budget decisions within your defined limits

• To generate AI-assisted creative variations from images you provide

• To provide our operator dashboard for account management

• To diagnose issues and improve the Service

• To comply with legal obligations

3. Meta Platform Data

AdPilot accesses your Meta advertising data (campaigns, insights, creatives, spend) using the Meta Marketing API with permissions you explicitly grant. We use this data exclusively to provide the Service and do not sell, share, or use it for advertising purposes unrelated to your own campaigns.

We comply with Meta's Platform Terms and Data Policy. Access tokens are stored encrypted and rotated upon your request. You may revoke our access at any time via your Meta Business Settings.

4. Data Sharing

We do not sell your data. We share your information only in the following limited circumstances:

• Meta Platforms: API calls made on your behalf to manage your ad account

• Legal requirements: Where required by law or to protect our rights

5. Data Retention

We retain your account data for as long as your account is active. Campaign logs and chat history are retained for up to 12 months. You may request deletion of your data at any time (see Section 7).

Meta access tokens are deleted immediately upon account termination or at your request.

6. Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. Access tokens are stored encrypted and never logged in plaintext. No employee or contractor has access to your Meta credentials beyond automated service functions.

7. Your Rights & Data Deletion

You have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your account and associated data

• Withdraw consent for data processing

• Export your data in a portable format

To exercise these rights, visit our Data Deletion page or email admin@plainworks.io. We will respond within 30 days.

8. Cookies

Our operator dashboard uses session cookies for authentication. We do not use tracking or advertising cookies. The public landing page does not use any cookies.

9. Children's Privacy

AdPilot is a business service intended for users aged 18 and above. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via Telegram or email at least 14 days before changes take effect. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

For privacy enquiries, data requests, or concerns:

• Email: admin@plainworks.io

• Website: plainworks.io