Privacy Policy

FixAds connects to your Meta ad account with read-only access to diagnose your campaigns. We never change your account, we encrypt your access token, we never sell your data, and you can delete everything from the app at any time.

The data controller is Noesis AI, a non-profit association established under Italian law and based in Italy, which operates FixAds. For any privacy matter, contact noesisai.it@gmail.com.

With your permission, Facebook Login for Business and the Marketing API provide your name, email address, Meta user ID, accessible ad accounts and the campaign, ad set, ad and performance data for the account you select. The requested permissions are read-only (ads_read, business_management, email and public_profile): FixAds cannot create, edit, pause or delete anything in your account.

Stripe collects and processes billing information. FixAds never sees or stores your card number.

Only after your separate marketing consent, campaign measurement may process the page URL and referrer, timestamp, browser or device information, your real client IP and user agent, Meta identifiers (_fbp and _fbc, including an _fbc derived from fbclid when present), and conversion event names. For server-side matching, your normalized email and stable internal user ID are SHA-256 hashed before transmission. Meta access tokens and raw ad-account performance data are never included.

We process account data to provide the service you request: run the diagnostic, produce the report and dashboard, and answer questions about your account (performance of a contract, Article 6(1)(b) GDPR). We process limited technical logs to keep the service secure (legitimate interest, Article 6(1)(f)). We do not use your advertising data to train models or build profiles for third parties.

If you consent, we use Meta Pixel and the Meta Conversions API to measure, attribute and improve FixAds advertising campaigns (consent, Article 6(1)(a)). Withdrawing marketing consent stops future Meta marketing events and removes the retained Meta attribution context linked to your FixAds session or account.

Your Meta access token is encrypted at rest with AES-256-GCM. Account data is isolated per account and stored in the European Union (Frankfurt, Germany). We retain service data while your account exists. Optional Meta attribution data is retained only while the relevant consent remains in force and is removed on withdrawal or account deletion. Backups roll off within 30 days.

We use service providers and recipients needed to operate FixAds: Vercel (hosting), Supabase (database in the EU region), OpenAI (AI processing for in-product answers), Stripe (payments), and, only after marketing consent, Meta Platforms Ireland Limited (advertising measurement through Pixel and Conversions API). Where applicable, international transfers rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision. We do not sell personal or Platform Data and do not share Meta access tokens or raw ad-account performance data for advertising measurement.

Strictly necessary storage supports secure sign-in, language, checkout and essential product functions. Analytics and Marketing are separate optional choices. First-party analytics helps us understand FixAds usage; Marketing enables Meta Pixel, Conversions API and campaign attribution. Refusing either optional category does not restrict the product, and Meta marketing tracking does not start before Marketing is accepted.

You can accept all, use necessary storage only, choose categories separately, or change and withdraw your choice later from “Privacy choices” in the footer or dashboard settings.

Under the GDPR you can access, rectify, export, restrict, object to the processing of, and erase your personal data. You can delete everything from Settings, use the data-deletion instructions linked below, or contact us. You may also lodge a complaint with your supervisory authority. Data deletion.

If we materially change this policy, we will update this page and its date and, where appropriate, notify you in the product.