Privacy policy

AdBuild helps you prepare ad creatives and publish paused campaigns to Meta ad accounts that you control. This page explains what we collect, why we collect it, and how to remove it.

1. Who we are

AdBuild is a small independent product operated from the United Kingdom. You can reach us at [email protected] for any privacy request.

2. Data we collect

Account data: your name, email address, password hash (or the identity returned by our authentication provider, Neon Auth), workspace name, and session records.
Meta authorisation data: if you connect a Meta account, we receive OAuth access tokens and the ad accounts, Facebook Pages, and ad sets you choose to share. Tokens are stored encrypted at rest.
Creative content: images and copy you upload or enter in the builder, together with the campaign settings you configure.
Usage data: limited technical logs such as request path, status code, timestamp, and the user ID associated with a request. We do not run third-party advertising trackers in the app.

3. How we use it

To create and operate your workspace and keep you signed in.
To read the Meta ad accounts and Pages you authorise, so the builder can show real destinations.
To upload your creatives and create paused campaigns in the ad account you select. AdBuild does not activate or spend budget on campaigns.
To diagnose errors, secure the service, and meet legal obligations.

4. Legal bases

We process account and creative data to perform our contract with you, Meta authorisation data on the basis of your consent when you connect an account, and security logs for our legitimate interest in operating a safe service.

5. Sharing and processors

Neon (Postgres database and authentication), hosted in the EU.
Render (application hosting), hosted in the EU.
Cloudflare (R2 object storage for uploaded creatives and DNS).
Meta Platforms when you explicitly connect an account or publish a campaign.

We do not sell personal data. We disclose data only to the processors above, or where required by law.

6. Storage and retention

Meta access tokens are encrypted before storage. Uploaded creatives are stored in private object storage and served through short-lived authenticated links. We keep workspace data while your account is active. When you request deletion, we remove your workspace, creatives, Meta tokens, and sessions, typically within 30 days. Aggregated security logs may be retained for up to 90 days.

7. Your rights

You can request access, correction, export, or deletion of your data, and you can withdraw Meta consent at any time by disconnecting the account in the builder or removing AdBuild in Facebook Settings → Business Integrations. Email [email protected] and we will respond within 30 days.

Delete your data. See Data deletion for the exact steps and the information we need to find your workspace.

8. Security

We use HTTPS everywhere, hashed passwords, encrypted Meta tokens, scoped sessions, and per-workspace access checks. No service can promise perfect security, but we limit collection to what the product needs.

9. Children

AdBuild is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes

If we make a material change to this policy we will update this page and, where appropriate, notify workspace owners by email.

Last updated 24 October 2026.