Privacy policy

1. Why we process data

• Operating the service: creating your account, building and publishing campaigns, running the automation rules you configure.
• Syncing Meta data: retrieving performance figures (spend, results, ROAS) for the ad accounts you have connected.
• Sending notifications: budget alerts, automation-rule outcomes, payment status.
• Analysing and improving the product from aggregated usage data, never sold to third parties.

2. What Adly collects

• Account details: name, email, phone number, organisation or shop name.
• Meta access tokens: encrypted with AES-256-GCM before storage and never written to logs unencrypted.
• Advertising data: the campaign configuration you create in Adly, and the performance figures synced back from Meta for connected accounts.
• Payment data: processed through our payment partners (PayOS/SePay/VNPay); Adly does not store card numbers or full bank account details.

3. How Adly protects data

Each organisation's data is isolated by row-level security at the database layer — one organisation cannot query another's data even if the application layer has a bug.

Media (photos and videos) is stored in private storage and served only through short-lived signed URLs when it needs to be displayed; it is never made public.

4. Sharing data with third parties

• Meta Platforms: to publish campaigns and sync figures, strictly within the permissions you granted when connecting.
• Payment partners (PayOS, SePay, VNPay): to process transactions and issue invoices.
• Infrastructure providers: solely to operate the service, bound by data protection agreements.

5. Your rights over your data

You may access, correct, export or request deletion of your personal data at any time — see the Data deletion page for details.

6. Contact

For any question about how personal data is processed, please contact hotro@adly.asia.