Adpilot

Privacy Policy

Last updated 31 October 2026

This policy explains what information Adpilot ("we", "us") collects when you use our website and app, why we collect it, and the choices you have. We wrote it in plain English. If anything is unclear, contact us through the Support page in the app.

1. Information we collect

  • Account details: your email address, sign-in method (email, Google or Apple), chosen currency and plan.
  • Business details: business names, what they do, website links, profit margin and order value settings you enter.
  • Advertising data: when you connect Meta (Facebook & Instagram), we store your access token and read campaign settings and performance figures such as spend, clicks, impressions, results and regions.
  • Website events: if you add our tracking code, it reports sign-ups and purchases (event name, value, currency, page link and Meta browser identifiers) only after a visitor has consented to advertising cookies.
  • Support messages you send us, and a log of changes made in your account.

2. How we use it

  • To create, launch, pause and report on ads you ask us to manage.
  • To show your dashboard, recommendations, briefings and reports.
  • To forward consented website sales to Meta so your ads can be measured.
  • To answer support requests and keep the service secure.

We never sell your data, and we never use one customer's data to benefit another.

3. Meta (Facebook) data

We only use data from Meta's platform to provide the features you use in Adpilot, in line with Meta's Platform Terms. Access tokens are stored securely and are never shown in logs. You can disconnect Meta at any time from the Connections page, and you can also remove our access from your Facebook Business settings.

4. Who we share it with

  • Meta, to run your ads and receive the conversion events you choose to send.
  • Service providers that host our app and database, under contracts that protect your data.
  • Authorities, only where the law requires it.

5. How long we keep it

We keep your data while your account is open. When you delete your account, we delete your personal and advertising data within 30 days, except where we must keep records for legal or tax reasons.

6. Your rights

Depending on where you live (including under UK/EU GDPR and California law) you can ask to access, correct, export or delete your data, or object to how we use it. Send a request from the Support page and we will reply within 30 days. You can also complain to your local data protection authority (in the UK, the ICO).

7. Cookies

Our app uses essential storage to keep you signed in and remember preferences such as the business you're working on. The tracking code you place on your own website must only run after your visitors accept advertising cookies — you are responsible for your own site's cookie notice.

8. Security

Data is encrypted in transit, every account's data is isolated from other accounts, and two-step sign-in is available from the Security page.

9. Changes

If we make important changes we will tell you in the app before they take effect.