This policy explains what Ad Reply does with personal data. Ad Reply is a tool for advertisers. It reads comments under Facebook and Instagram ads, and it replies to them, hides them, or counts them.
Who we are
Ad Reply is run by [company legal name], [company address] ("we"). To reach us, use the contact page or write to hello@adreply.io.
For your account, your audit request, and your messages to us, we decide how the data is used. For the comments under an advertiser's ads, the advertiser decides, and we act for them.
If you commented on an ad
A brand that uses Ad Reply connected its ad account, so we process comments under its ads. We receive your comment, your name, and your Meta ID, if Meta sends them. An automated system decides if your comment gets a reply, a like, or is hidden. A person at the brand can review and reverse this.
You can ask the brand about your comment. You can also write to us, and we will pass your request on or act on it.
What we collect
- Account data: your email address, and your workspace name and members.
- Meta connection data: your Meta user ID and name, the permissions that you gave, access tokens, and the names and IDs of your Pages, Instagram accounts, and ad accounts.
- Ad data: ad names and IDs, post IDs, spend, and results such as ROAS.
- Comment data: comment text, author name, author ID, the type we gave the comment, and what we did with it.
- Knowledge data: your website address, the knowledge text, and the searches made on your website.
- Notification data: the email addresses and Slack webhook that you add for alerts.
- Audit requests: the email address that you leave in the audit form.
- Contact messages: your name, email address, topic, and message.
Why we use it
- To run the product that you asked for: read comments, reply, hide, alert you, and show you reports. This is needed for our contract with you.
- To answer your audit request or message. This is our legitimate interest, or a step that you asked for before a contract.
- To keep the service safe and fix errors. This is our legitimate interest.
- To meet a legal duty, if one applies.
We do not sell personal data. We do not use it for advertising. We do not train our own AI models with it. We use data from Meta only to give you this service.
Automated decisions
AI systems read comments and write reply drafts. Our rules then decide the action. These decisions apply to public comments under ads, and they can be reversed. An advertiser can unhide a comment or review a reply. A commenter can ask for a person to check a decision through the brand or our contact page.
Who receives data
We share data with these vendors, only as needed to run the service:
- Meta
- Connects your accounts, and sends us ads and comments. We send replies, likes, and hide requests back to it.
- Supabase
- Runs our database, sign-in, and background jobs. It stores the data on this page.
- TypeSafe AI (Jev)
- Reads comment text and your product details, and gives each comment a type. It also checks drafts.
- Google (Gemini)
- Writes reply drafts from comment text and your knowledge text.
- Firecrawl
- Reads and searches the website that you add. It receives the website address and search terms from buyer questions.
- Resend
- Sends emails, such as complaint alerts, plan reminders, and copies of contact messages.
- Stripe
- Takes payments and keeps your card details. We never see your full card number.
- Slack
- Receives complaint alerts, only if you add a Slack webhook.
- Our web host
- Serves this website and the dashboard.
Replies and likes are public on Facebook or Instagram. We may also share data if the law requires it. Some vendors can process data outside your country. Where the law requires it, we use a legal safeguard for this, such as standard contract clauses.
How long we keep it
- Comment text, author names, and author IDs: deleted after 90 days. The counts stay, with no name attached.
- Comments that are not on an ad: dropped, and the text is not stored.
- Website search records: deleted after 30 days.
- Account, Meta connection, and knowledge data: kept while your account is open. Ask us, and we delete it.
- Audit requests and contact messages: kept while we need them to answer you. Ask us, and we delete them.
Cookies
We use only the cookies that keep you signed in. We do not use analytics cookies or advertising cookies.
Your rights
Depending on where you live, you can ask for a copy of your data. You can also ask us to correct it, delete it, limit its use, or move it. You can object to how we use it. You can complain to your data protection authority. We answer requests within 30 days.
How to delete your data
- Go to the contact page, and pick the topic "Privacy or data deletion".
- Tell us your email address, and your Page or ad account. If you are a commenter, tell us the ad and your comment.
- We delete the data and confirm by email. If the law makes us keep a record, we tell you.
To stop our access to your Meta data at once, remove Ad Reply in your Facebook settings, under Business Integrations. This stops new data. To delete the data that we already have, write to us.
Security
Meta access tokens and Slack webhooks are kept in an encrypted store. Data between your browser and the service is encrypted. Database rules limit each workspace to its own members. No system is perfectly safe, so tell us if you find a problem.
Children
Ad Reply is for businesses. It is not for people under 18.
Changes
If we change this policy, we change the date at the top. If a change is important, we tell account owners by email.