Privacy Policy

Last Updated: April 9, 2026

1. Data Controller

Social Manager Ads ("we", "us", "our") is the data controller responsible for processing your personal data.

• Company: Nube srl
• Address: Via Salvio Argiolas 23, Elmas, (CA) 09067, Italy
• VAT: IT04109560922
• Email: privacy@socialmanagerads.com
• Support Email: support@socialmanagerads.com

If you have questions or concerns about this Privacy Policy or our data practices, please contact us using the information above.

2. What Data We Collect

2.1 Registration Data

When you create an account, we collect:

• Full name
• Email address
• Password (stored securely using bcrypt hashing)
• Business name
• Business location (latitude and longitude, for ad targeting)

2.2 Facebook / Meta Data

When you connect your Facebook account through Facebook Login, we receive and store:

• Facebook User ID
• Access tokens (user token and page access tokens) for API interactions
• List of Facebook Pages you manage (page name, page ID)
• Page profile pictures
• Page access tokens for publishing and advertising

We use the following Facebook/Meta permissions: pages_show_list, pages_manage_posts, pages_read_engagement, instagram_basic, instagram_content_publish, ads_management, ads_read, and business_management.

2.3 Instagram Data

When you link an Instagram Business account (connected to your Facebook Page), we receive and store:

• Instagram Business Account ID
• Instagram username
• Published post IDs (for ad creative creation)

2.4 Payment Data

When you subscribe to a paid plan, payment processing is handled by Stripe. We store:

• Stripe Customer ID
• Stripe Subscription ID
• Subscription plan and status
• Trial end date (if applicable)

We do not store credit card numbers, CVVs, or full payment card details. All sensitive payment information is handled exclusively by Stripe in compliance with PCI DSS standards.

2.5 Content Data

When you create and publish posts through our platform, we store:

• Post captions/text
• Uploaded images and media files
• Facebook Post IDs and Instagram Media IDs (after publishing)
• Ad IDs associated with each post
• Publishing status and timestamps

2.6 Usage Data

We may collect basic usage information such as login timestamps and feature usage for service improvement purposes.

3. How We Use Your Data

We process your personal data for the following purposes:

• Publishing: To publish posts to your Facebook Page and Instagram account on your behalf, using pages_manage_posts and instagram_content_publish permissions.
• Advertising: To create and manage advertising campaigns on Meta Ads using your published posts as ad creatives, using ads_management permission.
• Analytics: To display engagement metrics and advertising performance data, using pages_read_engagement and ads_read permissions.
• Account Management: To display your connected Pages and Instagram accounts, using pages_show_list and instagram_basic permissions.
• Business Management: To access your business ad accounts for campaign operations, using business_management permission.
• Payments: To process subscription payments and manage your billing through Stripe.
• Support: To respond to your inquiries and provide customer support.
• Legal Compliance: To comply with applicable laws and regulations.

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: You provide explicit consent when connecting your Facebook/Instagram account through Facebook Login and granting permissions.
• Contract: Processing is necessary for the performance of our service agreement with you (Terms of Service).
• Legitimate Interest: We have a legitimate interest in improving our services and ensuring platform security.

5. Third-Party Sharing

We share your data with the following third parties, only as necessary to provide our services:

5.1 Meta Platforms, Inc.

We interact with Meta's Graph API to publish content to your Facebook Page and Instagram account, create advertising campaigns, and retrieve engagement and advertising performance metrics. Data shared with Meta is governed by Meta's own Data Policy and Platform Terms.

5.2 Stripe, Inc.

We use Stripe to process subscription payments. Stripe receives your payment information directly and processes it in compliance with PCI DSS. See Stripe's Privacy Policy.

We do not sell, rent, or trade your personal data to any third parties for marketing or advertising purposes.

6. Facebook / Meta Data Processing

When you connect your Facebook account to Social Manager Ads, we access and process data from Facebook and Instagram through Meta's official APIs. Specifically:

• We retrieve the list of Facebook Pages you manage to allow you to select which Page to use with our service.
• We store page access tokens to publish content and create ads on your behalf.
• We read engagement data (reactions, comments, shares) on your published posts to display analytics.
• We create advertising campaigns, ad sets, and ads in your business ad account.
• We read advertising performance data (impressions, reach, spend) to display campaign analytics.

All Facebook/Meta data is used exclusively for providing our service functionality as described above. We do not use Facebook data for any purpose beyond what is disclosed in this Privacy Policy and consented to by the user.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained while your account is active. Deleted within 30 days of account deletion or data deletion request.
• Content data (posts, media): Retained while your account is active. Deleted within 30 days of a deletion request.
• Meta access tokens: Retained while your account is connected. Immediately revoked upon disconnection or deletion request.
• Payment records: Retained for up to 7 years as required by tax and accounting regulations.
• Usage logs: Retained for up to 12 months for service improvement and security.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under GDPR:

• Right of Access: You can request a copy of all personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate personal data.
• Right to Erasure (Right to be Forgotten): You can request deletion of all your personal data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Object: You can object to processing based on legitimate interest.
• Right to Withdraw Consent: You can withdraw your consent at any time by disconnecting your Facebook account or deleting your account.

To exercise any of these rights, please contact us at privacy@socialmanagerads.com.

9. Data Deletion

You can request deletion of your data through any of the following methods:

• In-App: Use the "Request Data Deletion" button in the Data Management section of your dashboard.
• Email: Send a request to privacy@socialmanagerads.com.
• Facebook: When you remove our app from your Facebook settings, our Data Deletion Request Callback is triggered automatically.

We also implement Meta's Data Deletion Request Callback. When you deauthorize Social Manager Ads from your Facebook account settings, we automatically receive a notification and begin the data deletion process. You will receive a confirmation code and can track the deletion status on our Data Deletion Status page.

Data deletion is completed within 30 days of the request. A confirmation email is sent upon completion.

10. Cookies

We use only strictly necessary technical cookies to maintain your login session and store your preferences. We do not use profiling cookies, tracking cookies, or third-party advertising cookies.

The Facebook SDK may set its own cookies when you use Facebook Login. These cookies are governed by Meta's Cookie Policy.

11. Opt-Out of Personalized Advertising

Social Manager Ads does not serve personalized advertising to its users. The advertising campaigns we create are on behalf of our users (to promote their businesses), not targeted at our users.

If you wish to opt out of seeing ads created through our platform on Facebook or Instagram, you can adjust your ad preferences directly in your Facebook settings at facebook.com/adpreferences.

12. Children's Privacy (COPPA)

Social Manager Ads is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@socialmanagerads.com.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure password storage using bcrypt hashing
• Access tokens stored with encryption at rest
• Regular security audits and updates
• Access controls limiting data access to authorized personnel only

14. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area where our service providers operate (including Meta Platforms, Inc. and Stripe, Inc., both based in the United States). Such transfers are conducted in compliance with applicable data protection laws, including appropriate safeguards such as Standard Contractual Clauses.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a prominent notice in our application. The "Last Updated" date at the top of this page indicates when the policy was last revised.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@socialmanagerads.com
• Support: support@socialmanagerads.com