Privacy Policy · Launcher

1. Who we are

Launcher is run by Actwithmeraki (“we”, “us”). Launcher helps businesses create and manage Meta (Facebook and Instagram) ads in bulk. This policy covers our website, the Launcher app and related services.

When we handle data inside your ad accounts and creatives for you, we act as your processor and our Data Processing Addendum applies. When we handle data to run our own business (your account, billing, support and security), we are the controller and this policy applies.

2. What we collect

You give us

Account details: your name and email address, and your Google profile picture if you sign in with Google.
Workspace details: workspace name, team members and their roles, invitations you send.
Content: images, videos, ad copy, links, copy templates, naming settings and drafts.
Review comments: if you review a draft through a share link, the name you type and your comments.
Messages: anything you send us by email.
Demo bookings: your name, email, the time you pick and any notes, through Calendly.

From Meta, when you connect Facebook

An access token, your Facebook name and user ID, and the permissions you granted.
The ad accounts, Facebook Pages and Instagram accounts you manage, and their campaigns, ad sets, ads, pixels, lead forms (names only) and posts.
Daily results for your campaigns, ad sets and ads, such as spend, impressions, clicks, purchases, leads and revenue. These are totals; we don’t receive information about the people who saw or clicked your ads.

We request these Meta permissions: ads_management, ads_read, business_management, pages_show_list, pages_read_engagement, pages_manage_ads, instagram_basic. We use them only to show you your assets, create the ads and campaigns you ask for, read their results and apply changes you approve.

From other services you choose to use

Google sign-in: your name, email address and profile picture.
Google Drive and Dropbox: only the files you pick in their file picker. We download each one once to use in your ads. We don’t browse your other files or keep access to your account.
Slack: the webhook link you paste in.
Stripe: your plan, subscription status and Stripe customer ID. Card details go straight to Stripe and are never stored by us.

Automatically

Logs: our servers record requests and errors (including IP address, time and the page or action) to keep the service running and secure.
Cookies: one sign-in cookie to keep you logged in, plus the cookies needed for sign-in security. Inside the app we don’t use advertising or analytics cookies.
Our marketing website: if you click Accept on the cookie banner, our website (not the app) loads the Meta Pixel. It tells Meta which pages you visit, and whether you book a demo or start a trial, so we can measure and improve our own ads. If you click Decline, it doesn’t load. You can change your choice anytime with “Cookie settings” at the bottom of the website.
Your browser: if you review a draft, your browser remembers the name you typed so you don’t have to enter it again.

3. How we use it

To run Launcher: show your assets, upload media, create ads and campaigns, show results and recommendations, and send the Slack alerts you turn on.
To send sign-in links, team invitations and notifications, such as a client approving a draft.
To bill you and manage your plan.
To keep Launcher secure, prevent abuse, fix problems and answer support requests.
To meet legal obligations.

Our legal bases (where the GDPR or UK GDPR applies) are: performing our contract with you; our legitimate interest in running, securing and improving a reliable service; and complying with the law.

We don’t sell personal information. Apart from the Meta Pixel on our website, which only runs if you accept cookies, we don’t share it for cross-context advertising. We don’t use your content or Meta data to train AI models, and we don’t send it to AI providers.

4. Who we share it with

Meta and other services you connect, when you ask us to act, for example to upload a video or create an ad.
Meta, through the Meta Pixel on our website, if you accept cookies there.
Our service providers for hosting, file storage, email and payments. They’re listed with what they do on our Data Safety page.
Your team, according to the workspace you belong to, and your clients through review links you choose to share.
AI assistants you connect (such as Claude or ChatGPT) receive the results of the actions you ask them to take.
Authorities, when the law requires it or to protect people’s safety, our rights or the service.
A buyer or successor, if our business is sold or merged, under the same protections.

5. How long we keep it

Account, workspace and launch data: while your account exists. When you ask us to delete it, we do so within 30 days.
Facebook access tokens: until you disconnect Facebook or remove our app in Facebook, then deleted immediately.
Ad results: we keep only the latest copy, refreshed when you view analytics, and delete it with the ad account.
Server logs: kept for a limited time by our hosting provider.
Billing records: as long as tax and accounting law requires.

Backups are deleted as they expire.

6. Security

We use HTTPS everywhere, encrypt Facebook access tokens and Slack links before storing them, and limit access to your workspace’s members. Details are on our Data Safety page. No system is completely secure, so please keep your email account safe, because it’s how you sign in.

7. Where your data is stored

Our database and files are stored in the United States. Some providers may process data in other countries. Where the law requires it, we rely on appropriate safeguards such as the Standard Contractual Clauses.

8. Your choices and rights

Disconnect Facebook anytime on the Ad accounts page, or remove our app in Facebook (Settings → Business Integrations). See Data deletion.
Revoke Slack and AI-assistant access on the Integrations page.
Turn off website tracking anytime with “Cookie settings” at the bottom of our website.
Access, correct, delete or export your data, or object to how we use it, by emailing [email protected]. Depending on where you live, you may have extra rights under laws like the GDPR, UK GDPR or California’s CCPA, and you can complain to your local data-protection authority.

If we hold your data because a customer uses Launcher (for example, you reviewed one of their drafts), we may pass your request to that customer.

9. Google user data

Launcher’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use the files you pick only to complete the transfer you asked for, and never for advertising or AI training.

10. Children

Launcher is a business tool for people aged 18 and over. We don’t knowingly collect data from children.

11. Changes

We’ll update the date at the top when this policy changes, and email account owners about significant changes before they take effect.