Privacy Policy

• Account data — your name, email, password hash, agency/company details, and plan.
• Meta advertising data — via your authorised connection: ad accounts, campaigns, spend, performance metrics, and creative data.
• Lead data — contact details (name, phone, email) and form responses for leads you import from Meta lead ads or messaging, and the CRM status you assign them.
• Billing data — processed by our payment provider; we store plan, transaction references, and credit balances, not full card numbers.
• Usage & device data — log data, IP address, and basic analytics needed to run and secure the Service.

• to provide, maintain, and improve the Service;
• to import and display your ad and lead data and generate analytics;
• to send conversion events to Meta's Conversions API on your instruction, using hashed identifiers;
• to generate AI-assisted content (creatives, copy, insights, reports) that you request;
• to process payments, prevent fraud, provide support, and send service communications;
• to comply with legal obligations.

We do not sell your personal data.

We share data only with service providers that help us run the Service, under appropriate safeguards:

• Meta Platforms — to read your ad/lead data and send conversion events you instruct.
• Cloud hosting & database (e.g. AWS, Supabase) — to store and serve your data.
• AI providers (e.g. OpenAI) — to generate the content you request. Lead PII is not sent for content generation.
• Payment processor — to bill subscriptions and credits securely.
• Email provider — to send transactional and report emails.

We may also disclose data where required by law or to protect our rights and users.

When you send a conversion event to Meta, personal identifiers (such as email and phone) are hashed (SHA-256) before transmission, in line with Meta's Conversions API requirements. We send only the fields needed to attribute the conversion.

We use essential cookies for authentication and session management. We do not use them for third-party advertising. You can control cookies through your browser, but disabling essential cookies may break sign-in.

We retain your data while your account is active and as needed to provide the Service. After account closure we delete or anonymise personal data within a reasonable period, except where retention is required by law or for legitimate business records.

We use industry-standard measures including encryption in transit, hashed passwords and conversion identifiers, and access controls scoped per agency. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location (including under the GDPR and similar laws), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. For lead data you imported, you act as the controller and are responsible for data-subject requests; we assist as your processor.

Your data may be processed in countries other than your own. Where required, we rely on appropriate transfer mechanisms to protect it.

The Service is not directed to children under 18, and we do not knowingly collect their data.

We may update this Policy. Material changes will be notified through the Service or by email, and the "last updated" date above will change.

Privacy questions or requests: support@go4relay.com · [Company Legal Name], [Registered Address].