Privacy Policy — CD Control Center

Introduction

CD Control Center is an internal Meta advertising management and reporting application. It helps authorized users connect Facebook profiles and access permitted Meta advertising assets through Meta's official APIs.

Information collected

The system may collect and process information needed to operate the application, including:

• Facebook user ID and Facebook display name.
• Meta access permissions granted by the user.
• Meta Business Portfolio identifiers and Meta Business Manager information.
• Meta ad-account IDs, names, currency, timezone and account-status information.
• Facebook Page and Instagram account information where authorized.
• Campaign, ad set, ad and advertising-performance data.
• Connection status, token expiry information, sync history and audit logs.
• Application login email, internal account labels and internal notes.

Access tokens

Meta OAuth access tokens are received through Meta's official OAuth process, stored in encrypted form, and used only to access assets authorized by the connected user. Tokens are never intentionally displayed in the frontend and are never shared with unrelated third parties.

Information not collected

CD Control Center does not request or intentionally store:

• Facebook passwords.
• Facebook browser cookies.
• Facebook two-factor authentication codes.
• AdsPower browser fingerprints.
• Proxy credentials.
• Personal Facebook login credentials.

How information is used

Information is used to verify Meta connections, discover accessible advertising accounts, retrieve campaign and performance data, display consolidated advertising reports, detect expired or broken connections, maintain audit and security records, improve system reliability and support authorized account management.

Data sharing

Information may be processed by necessary service providers used to operate the application, including Meta Platforms, Supabase, Vercel, and hosting, database and security providers. Data is not sold.

Data storage and security

CD Control Center uses encrypted token storage, restricted server-side access, role-based application access, protected API routes, audit logging and reasonable security controls. No internet-connected system can be guaranteed to be completely secure.

Data retention

Data is retained while the connection or user account remains active, or as needed for security, reporting and legal obligations.

User choices

Users may disconnect a Meta connection, revoke access through Facebook settings, request deletion of their stored application data, or contact the operator regarding their information.

Data deletion

Instructions for disconnecting Meta access and requesting deletion are available on the Data Deletion page.

Third-party services

Meta's own terms and privacy policies apply separately when users interact with Facebook or Meta services.

Changes to this policy

This policy may be updated from time to time. The latest revision date will appear on this page.

Contact

Questions about this policy can be sent to score8marketing@gmail.com.