Privacy Policy

Who we are

Copilot Ads is operated by MB Media Advisors L.L.C-FZ, a limited liability company licensed in the Meydan Free Zone, Dubai (license no. 2415265.01), registered at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. MB Media Advisors L.L.C-FZ is responsible for the data described in this policy.

Information we process

Account data: the name and email address of each Copilot Ads user, organization and workspace membership, roles, and invitations.

Meta data: when a user connects Meta through Facebook Login, we receive that user's Facebook user ID and name and an access token for the permissions they grant (ads_read, ads_management, business_management, pages_read_engagement, pages_show_list). For accounts managed through our Business Manager, we use a Meta system user token. With these permissions we access ad accounts, campaigns, ad sets, ads, ad creatives (including images and videos), performance insights, and the Facebook Pages and linked Instagram accounts used in ads.

Other advertising platforms: when a client connects Google Ads, TikTok, or Snapchat, we access equivalent account, campaign, creative, and performance data through the permissions granted by that client or authorized user.

Content you provide: creative files, ad copy, briefs, approvals, settings, and messages sent to the in-app assistant.

Conversion data: if a client enables Conversions API features (for example through Shopify), we process the customer email, phone number, and name that client sends, which are hashed (SHA-256) before storage and before being sent to the advertising platform.

Technical data: error and diagnostic information, including session recordings of a sample of sessions, which may capture what is displayed on screen.

How and why we use data

We use this data only to provide Copilot Ads to the client workspace that connected it: displaying reporting, analyzing performance, generating optimization recommendations and ad copy, uploading and managing creatives and ads, executing campaign actions the client has approved, monitoring platform health, keeping audit logs, and providing support.

Analysis and recommendations are generated with AI models. Campaign and creative data is sent to the AI providers listed below only to produce output for the requesting workspace.

We do not sell or license platform data. We do not use connected account data to build profiles of individuals, to advertise to anyone, or for any purpose unrelated to the client's own accounts.

Service providers

We share data only with service providers that process it on our behalf to operate Copilot Ads: Supabase (database, authentication, and file storage), Vercel (web hosting), Google Cloud (backend processing), Cloudflare (network delivery), Anthropic, OpenAI, Google Gemini, and OpenCode Zen (AI model processing), and Sentry (error monitoring and session diagnostics).

We also send data back to the advertising platforms a client has connected, such as Meta, Google, TikTok, and Snapchat, when the client uses Copilot Ads to manage campaigns there. We disclose data otherwise only when required by law.

Security

Access tokens and platform credentials are stored server-side, are not accessible from the browser, and are used only by our backend services for authorized platform operations. Access to client workspaces is restricted by organization membership and role-based controls.

To report a security vulnerability or incident, email support@copilotads.com with the subject line "Security". We investigate every report promptly.

Retention and deletion

We keep platform data while the client workspace remains active and the platform connection is in place. In-app assistant conversations are deleted after 90 days. When a client disconnects a platform, closes its workspace, or asks us to delete data, we delete the related platform data within 30 days, except records we must keep for legal, security, or billing reasons.

Anyone who can use Copilot Ads, and anyone whose data a client has connected, can request deletion. See the Data Deletion page (/data-deletion) for instructions.

Contact

For privacy requests, access questions, or data deletion requests, contact support@copilotads.com or write to MB Media Advisors L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.