Privacy Policy

Last updated: August 25, 2026

NOVELTY POINT TECHNOLOGY LIMITED ("we," "us," or "our") operates the AdsZera AI service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

AdsZera 插件与 MCP 数据说明

当你通过 ChatGPT、Codex 或其他兼容 MCP 的客户端连接 AdsZera 时,我们会使用 OAuth 验证身份,并仅在你的账户和组织权限范围内处理工具请求。工具可能返回你已授权的 Meta 广告账户、广告对象和效果指标,也可能在你明确确认后创建发布任务。

  • AdsZera 不通过 MCP 返回 AdsZera、Supabase 或 Meta 访问 Token。
  • 批量发布必须先生成预览,并在用户明确确认后才能创建任务。
  • 我们会记录工具名称、执行结果、耗时和去敏后的输入摘要,用于安全审计、限流和故障排查。
  • 发送给 AI 客户端的工具结果受对应客户端提供商的隐私政策和工作区设置约束。

1. Information Collection

We collect the following types of information:

  • Browser and Device Information: Browser type, IP address, access time, and device identifiers when you visit our website.
  • Account Information: Name, email address, and other information you voluntarily provide when registering an account.
  • Facebook/Meta API Data: Advertising account information, campaign data, audience data, and performance metrics retrieved through Meta's Graph API when you connect your Facebook ad accounts.
  • Usage Data: Pages visited, features used, and other interaction data within our service.
  • Agent Tool Data: MCP tool names, permission-scoped inputs, result status, duration, and redacted audit identifiers generated when you use AdsZera through an AI client.

2. Information Usage

We use the collected information for the following purposes:

  • To provide, maintain, and improve our services
  • To integrate with Meta/Facebook advertising platforms via Graph API
  • To analyze usage patterns and optimize user experience
  • To send service-related notifications and updates
  • To comply with legal obligations
  • To authenticate and fulfill user-requested MCP tool calls, enforce tenant permissions, rate limits, confirmations, and security audits

3. Information Sharing

We do not sell your personal information. We may share your information with the following categories of third parties:

  • Meta (Facebook): For advertising management functionality, in accordance with Meta's Platform Terms and Data Processing Terms.
  • Service Providers: Cloud hosting (Vercel), database (Supabase), and other infrastructure providers necessary for operating our service.
  • Legal Requirements: When required by law, court order, or government request.

4. Third-Party Services

Meta/Facebook

AdsZera AI uses Meta's Graph API to provide advertising management services. By using our service, you agree to Meta's Data Processing Terms and Platform Terms.

We do not use your Facebook advertising data for any purposes other than providing the AdsZera service to you.

Data Processing Agreements

We have signed data processing agreements with all service providers that handle personal data, as required by applicable data protection laws including GDPR.

5. Data Retention

We retain your information for the following periods:

  • Account Data: Retained for 90 days after account deletion, after which it is permanently removed from our systems.
  • Advertising Data: Subject to Meta's data retention policies. We retain cached data for up to 30 days for service functionality.
  • Server Logs: Retained for 90 days for security and troubleshooting purposes.

6. Cross-Border Data Transfers

Your information may be processed in Hong Kong and other regions where our service providers operate. When we transfer personal data outside of the European Economic Area (EEA), we ensure appropriate safeguards through Standard Contractual Clauses (SCCs) or other mechanisms recognized under applicable data protection laws.

7. Cookies Policy

We use cookies for the following purposes:

  • Essential Cookies: Required for session management and authentication. These cannot be disabled without affecting service functionality.
  • Analytics Cookies: Help us understand how visitors interact with our website. You may disable these via your browser settings.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may impair service functionality.

8. Data Security

We implement appropriate technical and organizational safeguards to protect your information, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Access controls and authentication requirements
  • Regular security reviews and updates
  • Fernet encryption for sensitive data storage

9. Children's Privacy

Our service is not directed to or intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

10. Your Rights

You have the following rights regarding your personal information:

RightHow to Exercise
AccessLog in to your account to view your personal information
RectificationUpdate your account settings or contact us
Deletion
Withdraw ConsentContact us at support@adszera.com
Data PortabilityContact us to request your data in a machine-readable format
Lodge ComplaintContact us or your local data protection authority

Data Deletion Request: To request deletion of your account and associated data, please send an email to support@adszera.com. We will process your request within 30 days.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

NOVELTY POINT TECHNOLOGY LIMITED

Email: support@adszera.com

Address: Rm 1602, Lucky Centre Wan Chai, Hong Kong

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. For significant changes, we will provide prominent notice through our website or email.