Privacy Policy

This Privacy Policy explains what information ConeAd ("ConeAd", "we", "us") collects when you use our service, how we use it, and the choices you have. By using ConeAd, you agree to the practices described here.

1. What we collect

• Account information. Your name and email address, provided when you sign in through Cone ID, our identity provider. ConeAd never sees or stores your password — authentication is handled entirely by Cone ID.
• Business information. Details you enter about your business — name, industry, description, website, and phone number — used to generate and run ad campaigns on your behalf.
• Meta account access. When you connect your Meta (Facebook/Instagram) account, we store an encrypted access token, your selected ad account, and the Facebook Page you choose to run ads as. This token is used only to create, read, and manage the ad campaigns you ask ConeAd to create — never for any other purpose, and never shared with anyone else.
• Campaign and ad content. The prompts you write, the strategies and ad copy ConeAd generates or that you edit, budgets, targeting choices, and any images or videos you upload or generate for your ads. Media files are stored via StorageCone, a separate asset-storage service that also uses Cone ID for authentication.
• Campaign performance data. Once a campaign is running, we retrieve performance metrics (spend, impressions, clicks, results) directly from Meta so you can see how your ads are doing inside ConeAd.
• Usage data. Basic technical logs (timestamps, request errors) used to operate and troubleshoot the service. We do not use third-party analytics or advertising trackers on ConeAd itself.

2. How we use your information

We use the information above only to:

• Generate ad strategy, audience, and copy recommendations for your review.
• Create, launch, pause, and manage advertising campaigns on Meta at your explicit direction — nothing is ever launched or spends money without you approving it.
• Store and serve the images and videos you choose to use in your ads.
• Show you how your campaigns are performing.
• Keep your account secure and operate, maintain, and improve ConeAd.

3. AI providers

Depending on how ConeAd is configured, the text and strategy of your prompt — and, where you choose to generate an image, your image prompt — may be sent to a third-party AI provider (such as Anthropic, or another workflow provider ConeAd is configured to use) in order to produce a strategy, ad copy, or an image. We do not send your Meta access token, encrypted credentials, or any business data beyond what is needed to fulfill that specific request.

4. Who we share information with

We share information only where necessary to provide the service:

• Meta — to create and manage the ad campaigns, ad sets, creatives, and ads you direct ConeAd to build, using your own connected ad account.
• Cone ID — for authentication and to keep your Meta connection alive.
• StorageCone — to store the images and videos you upload or generate.
• AI providers — as described in Section 3, only for the specific prompt you submit.

We do not sell your personal information, and we do not share it for advertising purposes of our own.

5. Data retention and deletion

We retain your information for as long as your account is active. You can permanently delete a campaign or an entire business at any time from within ConeAd — this immediately and irreversibly removes the associated ad copy, assets, and activity history from our systems. If a campaign has already been launched on Meta, deleting it in ConeAd first pauses the live campaign so it stops spending. Deleting your account entirely can be requested by contacting us.

6. Security

Your Meta access token is encrypted at rest. Access to your business and campaign data is restricted to your own account — ConeAd never lets one user view or modify another user's businesses or campaigns. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

7. Your choices

You can disconnect your Meta account, switch ad accounts or Facebook Pages, edit or delete your business profile, and delete individual campaigns or your entire business at any time from within ConeAd.

8. Children's privacy

ConeAd is not directed at children and is not intended for use by anyone under the age of 18.

9. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do. Continued use of ConeAd after a change means you accept the updated policy.

10. Contact us

Questions about this policy or your data can be sent to the contact address listed on our homepage.