Privacy Policy

In this policy, “Ad Autopilot,” “we,” “us,” and “our” refer to Holland Park HR Consulting LTD, the operator of the Ad Autopilot service. “You” refers to the business owner or authorized user of the service. If you have questions, contact us at privacy@smbadpilot.com.

1. Information we collect

We collect the following categories of information:

Account information

Your name, email address, password (stored only as a secure hash), and authentication details when you create an account.

Business information

Details you provide about your business, including business name, category or vertical, physical address and service area, target radius, time zone, and the monthly advertising budget you set.

Data from connected Meta accounts

When you connect your Facebook Page and Instagram account through Facebook Login for Business, we access and store information needed to run your ads, including:

• Profile and Page details — your Facebook Page and Instagram account name, IDs, and profile metadata.
• Posts and media — your published posts, captions, images, and video thumbnails that may be used as ad creative.
• Ad account details — your ad account ID, currency, and configuration.
• Advertising insights — performance metrics such as reach, impressions, spend, results, and engagement for the ads we manage.
• Access tokens — encrypted credentials that allow us to act on your behalf within the permissions you grant.

Usage and device data

Information about how you interact with our service, such as log data, IP address, browser type, device information, and pages viewed. We use this to operate, secure, and improve the service.

Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to maintain your session. We may also use limited analytics to understand product usage. You can control cookies through your browser settings, though some features may not work without them.

Payment information

Subscription payments are processed by our third-party payment processor. We do not store your full card number; the processor handles and secures that information on our behalf. Your advertising spend is billed by Meta directly to the payment method on your own ad account — we never handle or store it.

2. How we use your information

• To create, deliver, and manage local ads built from your existing posts.
• To pause underperforming ads according to the budget guardrails you set.
• To show you results, insights, and notifications about your account.
• To provide customer support and respond to your requests.
• To operate, maintain, secure, and improve the service.
• To send you service-related communications and important alerts.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your Meta data for any purpose other than providing and improving the service you requested.

3. Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of our contract with you, your consent (for example, when connecting your Meta accounts), our legitimate interests in operating and improving the service, and compliance with legal obligations.

4. How we share information

We share information only as needed to run the service, including with:

• Meta Platforms — to create and manage ads through the Meta Marketing API on your behalf.
• Service providers — vendors that provide hosting, database, email delivery, and payment processing under contractual confidentiality obligations.
• Legal and safety — when required by law, regulation, legal process, or to protect the rights, property, or safety of Ad Autopilot, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Meta Platform data

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including applicable limited use requirements. We only access the data necessary to operate the features you enable, and we do not transfer Meta data to data brokers or use it for unrelated advertising.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the service. When you disconnect or delete your account, we delete or de-identify your personal data, connections, posts, promotions, and insights within a commercially reasonable period, except where we are required to retain it for legal, accounting, or security purposes.

7. How we protect your information

We use technical and organizational measures to protect your data. Access tokens are encrypted at rest, access to data is restricted to your account through row-level security, and we limit internal access on a need-to-know basis. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and not be discriminated against for exercising your rights. To exercise any of these rights, contact us at privacy@smbadpilot.com. We will respond within the timeframe required by applicable law.

9. Disconnecting and deleting your data

You can disconnect your Meta accounts and delete your data at any time from your Settings, or by removing the app from your Facebook account settings. When you remove the app, Meta notifies us through our data deletion endpoint and we delete the associated data. You can also email us to request deletion.

10. International data transfers

We may process and store your information in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, as required by applicable law.

11. Children’s privacy

Ad Autopilot is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us information, contact us and we will delete it.

12. Third-party links

Our service may link to third-party websites or services that we do not control. This policy does not apply to those third parties, and we encourage you to review their privacy practices.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

14. Contact us

If you have questions or requests regarding this policy or your data, contact us at privacy@smbadpilot.com.