Privacy Policy

This Privacy Policy explains what information the Ads Core service (“Ads Core”, “we”, “us”) collects, how and why we use it, whom we share it with, and how you can access or delete it — including data we access on your behalf through the Meta (Facebook/Instagram) Marketing API.

1. Who we are

Ads Core is an AI assistant that helps advertisers manage Meta (Facebook and Instagram) advertising campaigns. It gathers statistics, builds reports, assembles campaigns (created paused, never launched without your explicit approval), fills Google Sheets and answers questions — over Telegram, a web workspace, and connectors for ChatGPT and Claude. The service is operated by the entity named above.

2. Data we collect

2.1 Information you provide

• Contact & request data — the email, Telegram handle, WhatsApp number and message you submit through our “Request access” form, so we can contact you about onboarding.
• Account & profile data — your name, email and workspace settings when an account is created for you.
• Content you send the assistant — messages, questions, uploaded images, video, documents and voice notes you send in Telegram or the web chat, so the assistant can act on them.
• Credentials you authorize — access tokens for connected platforms (Meta, Google), which you provide or grant so we can act on your behalf. These are stored encrypted (see §9).

2.2 Information we access from connected platforms

• Meta advertising data — see §3.
• Google Sheets — where you connect a Google service account, we read and write the specific spreadsheets you designate, to fill in reporting data.
• Telegram — messages sent to the bot and the associated chat/user identifiers, to operate the assistant and deliver reports.

2.3 Information collected automatically

• Technical & usage data — log records, actions taken, timestamps, approximate IP address, and browser/device information, used for operating, securing and debugging the service.

We do not collect special-category personal data, and we do not sell your data or that of the people reached by your ads.

3. Meta (Facebook/Instagram) data

When you connect a Meta Business account, you authorize Ads Core to access the Meta Marketing API on your behalf using a system-user or user access token that you grant. Depending on the permissions you approve, we may access and process:

• your Business Managers, ad accounts, Facebook Pages and connected Instagram accounts;
• campaigns, ad sets, ads, creatives, audiences, lead forms and automated rules within those ad accounts;
• advertising insights and statistics (spend, impressions, clicks, leads, CPL, CTR and similar metrics);
• account metadata needed to build, read and report on your advertising.

We use Meta data only to provide the advertising-management features you request — reading statistics, building reports, and creating or editing campaign objects (which are created paused and are never activated or charged without your explicit action). We do not use Meta data for advertising to you, we do not sell it, and we do not transfer it except to the sub-processors strictly necessary to run the service (see §7).

4. How and why we use data

• Provide the service — run the AI assistant, read your advertising statistics, build reports and PDFs, assemble campaigns (paused), and fill spreadsheets.
• Deliver on your instructions — carry out the tasks you ask for over Telegram, the web workspace, or the ChatGPT/Claude connectors.
• Scheduled reporting — generate and deliver recurring reports you have configured.
• Support & communication — respond to your requests, including “Request access” form submissions.
• Security, abuse prevention & debugging — keep the service safe and working.
• Legal compliance — comply with applicable law and platform requirements.

5. AI processing

Ads Core is powered by large-language-model providers. To generate responses, the content of your requests (and the relevant advertising data needed to answer them) may be processed by the AI provider you or your workspace has configured — which may be OpenAI (ChatGPT), Anthropic (Claude), or a model reached through OpenRouter. These providers process the data to return a result to us and act as our sub-processors; we do not permit them to use your data to train their models beyond what their applicable terms allow. Where you connect your own ChatGPT subscription or your own OpenRouter key, processing occurs under your account with that provider.

6. Legal bases (where GDPR or similar law applies)

• Performance of a contract — to provide the service you sign up for.
• Consent — for example, when you connect a Meta or Google account, or submit the contact form. You may withdraw consent at any time.
• Legitimate interests — to secure, maintain and improve the service, where not overridden by your rights.
• Legal obligation — where processing is required by law.

7. Sharing & sub-processors

We do not sell personal data. We share data only with providers that help us run the service, under appropriate contractual safeguards:

• Meta Platforms — the Marketing API, to manage your advertising on your behalf.
• Google — Google Sheets API, where you connect a spreadsheet.
• AI providers — OpenAI, Anthropic and/or OpenRouter, to generate assistant responses (§5).
• Telegram — to send and receive messages through the bot.
• Deepgram — to transcribe voice messages you send, when that feature is used.
• Hosting & infrastructure — our cloud hosting and database providers, which store the data described here.

We may also disclose data if required by law, to protect our rights, or in connection with a corporate transaction, subject to this Policy.

8. Retention

We keep personal data only as long as needed for the purposes above: for the life of your account and connection, and for a limited period afterwards where necessary for security, dispute resolution or legal compliance. Meta advertising data is retained only while needed to provide the service and is deleted when you disconnect, when it is no longer needed, or upon request. Contact-form submissions are kept until we have handled your request and for a reasonable follow-up period.

9. Security

We apply technical and organizational measures to protect your data. Access tokens and other secrets are encrypted at rest (AES-256-GCM) with per-tenant key derivation, transport is over TLS, access is restricted, and each customer’s data is isolated. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit access to those who need it to operate the service.

10. Your rights

Subject to applicable law, you may have the right to access, correct, export, restrict or object to the processing of your personal data, to withdraw consent, and to request deletion. To exercise any of these, email hello@ninecor.com. You also have the right to lodge a complaint with your local data-protection authority.

11. Deleting your data

You can request deletion of your data at any time. We provide clear instructions — including how to revoke Meta access and how to have us erase the data we hold — on our dedicated page: Data Deletion Instructions. You can also simply email hello@ninecor.com with the subject “Data deletion”.

12. International transfers

We and our sub-processors may process data in countries other than yours. Where we transfer personal data internationally, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.

13. Children

Ads Core is a business tool intended for users aged 18 and over. It is not directed to children, and we do not knowingly collect personal data from children.

14. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice. Continued use of the service after changes take effect constitutes acceptance of the updated Policy.

15. Contact

Questions or requests about this Policy or your data: hello@ninecor.com, Individual Entrepreneur Ninecor, Georgia, Zugdidi Region, Narazeni Village, Kondrate Tatarishvili street, N18.