Privacy Policy

1. What we collect from you

When you sign up and set the agent up:

• Account information: your name and email address, handled by our authentication provider (Clerk).
• Your setup answers: what you sell, the page it sells from, who it is for, its price, roughly what you spend on ads today and what a customer costs you, which countries and currency you sell in, your goal (purchases or leads), and what frustrates you about ads. These shape the campaign the agent proposes; nothing else reads them.
• Agent settings: the daily and monthly spend caps, target cost-per-acquisition, and autonomy level you configure. These bound what the agent is allowed to do; we never invent or assume a default on your behalf.
• Brand guide: fonts, colors, tone, and logo rules, either typed by you or drafted by reading your website for you to confirm, used to keep generated creative on-brand.
• Your decisions: which creatives you approve or reject, which video scripts you approve, which budget changes and new ads you approve or decline, and any override you place on the agent.
• Email preferences: whether you want a summary after each cycle.
• Your own privacy policy URL, if you choose leads as your goal. Meta requires it on every lead form, and it is shown to the people who fill yours in.
• Contact messages: the email address and message you send through the contact page. They go to our support inbox and nowhere else.

2. Data from Meta

When you connect a Meta ad account through Facebook Login, we ask for the permissions the agent needs and no others. In Meta's terms they are ads_read, ads_management, business_management, pages_show_list, pages_read_engagement, pages_manage_ads, instagram_basic, and ads_mcp_management. In plain terms, they let us:

• Read your ad account: campaigns, ad sets, and ads by Meta's own ids, their budgets, and their performance (impressions, clicks, spend, and purchase conversions) for currently active ads over a short rolling window. We do not perform bulk historical exports of your account. We also read the account's currency and timezone, and its pixel, so conversions can be counted.
• List your ad accounts, including ones held by your Business Manager rather than by you directly, so you can pick the right one.
• See your Facebook Pages and connected Instagram accounts, so you can choose which ones new ads publish under.
• Write to your ad account, only within the caps you set: pause underperforming ads, shift budget toward winners, build your first campaign, upload images and videos, and publish new ads. Every write is recorded in your activity log, permanently.
• Create a lead form on your Page, if your goal is leads. The form carries your privacy policy. The people who fill it in are giving their details to you: Meta delivers those responses to your Page, and Zolvin never reads, stores, or sees them. We hold no permission that could.
• Use Meta's own ads tools (Meta's ads MCP server) for reads the ordinary API does not offer: whether your pixel is still reporting, how your account compares to Meta's industry benchmarks, and what other advertisers are running in Meta's public Ad Library. That last read is about the public ads of others, not about your data, and it is used only as context when drafting your next creative.

We use Platform Data from Meta only to provide Zolvin's service back to you. We do not sell it, use it for advertising outside your own account, or share it with data brokers. If you disconnect your account or delete your Zolvin account, we delete the stored access token and stop reading and writing to that ad account.

3. How we use it

Solely to operate the service you signed up for:

• Proposing your first campaign from your setup answers and the page you sell from, and building it in your ad account once you approve it. It stays paused until you press Go live.
• Deciding, on each cycle, whether to kill, scale, or hold an ad, and writing that decision to Meta on your behalf.
• Generating new ad creative that fits your brand guide, checking it against that guide before it reaches your review queue or your ad account, and publishing it within your caps.
• Learning which of your own past creative performed best, so the next creative for the same campaign builds on what already worked, never compared against or blended with any other customer's data.
• Showing you a plain-English, permanent log of every decision the agent has made and why, and emailing you about it (section 6).
• Billing you for your subscription, and pausing the agent if payment stops.

4. AI processing

Two AI providers process data as part of the service, each for a narrow, specific purpose:

• Anthropic (Claude) reads your setup answers and the text of the page you sell from to propose a campaign strategy and a first creative brief; drafts a brand guide from your website; reviews each generated image against your brand guide and writes the plain-English reason for a pass or fail; and proposes the next creative to test from your own past-performing creative. Anthropic's commercial terms state that it does not train its models on data sent through its API.
• Kie AI generates the creative images and videos themselves from a text prompt built out of your brand guide and product description. It receives that prompt and nothing else.

Neither provider is given ad account access, spend authority, or data beyond the specific prompt, image, page text, or brand guide needed for that one call. Some of this happens before you pay: the plan and sample ad shown at the end of setup are generated from your answers so you can see what the agent would do.

5. Who else sees it

We share data only with the vendors that run the infrastructure of the service itself:

Our servers and database are in the United States. If you are elsewhere, your data is transferred there to provide the service.

6. Emails we send

The agent acts while you are not watching, so it writes to you:

• Cycle summaries after each run, whether or not it made a decision. You can turn these off in Settings.
• Alerts when something needs you: an action blocked by a cap, a budget or ad waiting for approval, a failed connection, or a failed campaign build. These are always on while your account exists, because a silently stuck agent is worse than an unwanted email.
• One reminder if you start setup and stop, sent once.
• Billing emails from Stripe about receipts and failed payments.

Emails quote the agent's own reasons from your activity log. We do not send marketing email, and we do not share your address with anyone for that purpose.

7. Cookies and local storage

• Sign-in cookies from Clerk keep you signed in. They are strictly necessary and hold no tracking data.
• Your theme choice (light or dark) is kept in your browser's local storage and never sent to us.
• No analytics or advertising trackers. There is no third-party analytics script, no advertising pixel, and no cross-site tracking on this site or in the dashboard.

8. Security and retention

• Meta access tokens are encrypted at rest with AES-256-GCM envelope encryption, never stored or logged in plaintext.
• Every customer's data is isolated at the database level by row-level security. One customer's queries cannot read another's rows, enforced by Postgres itself, not application code.
• The decision log is append-only: once an action is recorded, it cannot be edited, by us or anyone else. It is the permanent record of what the agent did and why, for as long as your account exists.
• We retain your data for as long as your account is active. If you disconnect your Meta account, we stop syncing new data immediately and delete the stored access token. If you delete your account, everything in section 1 and section 2 is deleted with it, immediately and permanently, including the decision log. Stripe keeps the invoice records it is legally required to keep.

9. Your choices

• Disconnect your Meta account at any time from the dashboard, or revoke Zolvin from your Facebook settings. The agent stops acting on it from its next cycle.
• Review and override any decision the agent is about to make, or has made, from the activity log and review queue. Pause the agent, or stop it entirely with the kill switch, at any time.
• Turn off cycle summaries in Settings.
• Delete your account from the account menu. It takes effect immediately, with no grace period and nothing left to restore. If you would rather we did it, or you want a copy of your data first, email us.

10. Children's privacy

Zolvin is a business tool for managing advertising accounts and is not directed at, or knowingly used by, anyone under 18.

11. Changes to this policy

As the product changes, with new providers, new data we read from Meta, or new features, we will update this page and the effective date above. Material changes will be announced in the dashboard.

12. Contact

Questions about this policy, a data deletion request, or a request for a copy of your data can be sent to hello@zolvin.io or through the contact page. A person reads them.