Scope and responsibility
This policy applies to agencies using the TruAds advertising operations platform, their authorized team members, and managed client accounts. Data is processed within the client scope authorized by the relevant agency.
Categories of data
- Session and user account information, including agency roles and authorization records.
- Client, brand, connection, and campaign configuration.
- Account, Page, Instagram account, ad account, and Pixel/Dataset identifiers and authorization status supplied by Meta after authorization.
- Campaign drafts, approvals, operation history, security events, and audit records.
Purposes and use
We use data to provide the service, enforce tenant isolation and authorization, synchronize advertising assets, carry out human-approved operations, secure the platform, and investigate technical issues.
Meta data is processed only for the authorized business purpose and under applicable platform rules. One client's data is not exposed to another client.
Providers, retention, and security
Hosting, database, observability, and integration providers may process data only as needed to operate the service. Authorizations remain server-side, with access restricted by role and client-scope checks.
Data is kept for as long as needed for service and contractual requirements, security, legal obligations, and dispute resolution, then deleted or de-identified.
Your choices and requests
You may remove app access through Meta Business Integrations and ask your agency administrator to disconnect TruAds. Submit access, correction, or deletion requests through the agency support channel in your authenticated TruAds workspace so your identity can be verified.
Changes
We may update this policy when the product, law, or our processing practices change. Material changes are announced in the service, and the revision date is shown here.