Who we are
ROAScal Ltd ("ROAScal", "we", "us", "our") operates the ROAScal platform — an AI-powered advertising tool accessible at roascal.com. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service.
For questions about this policy, contact us at privacy@roascal.com.
Data we collect
Account data
Name, email address, and password when you create an account. If you sign up via Google OAuth, we receive your Google profile name and email.
Usage data
URLs you analyse, campaign configurations, ad concepts generated, and interactions within the platform. We use this to improve our AI models and product experience.
Ad platform tokens
When you connect Meta Business Manager (or Google Ads, when that connection is available), we store OAuth access tokens encrypted in Supabase Vault. These are used solely to manage campaigns on your behalf.
Payment data
Subscription payments are handled by Stripe. We do not store card numbers. We receive billing metadata (plan, status, invoice IDs) from Stripe webhooks.
Technical data
IP address, browser type, device type, and session data collected automatically when you use the platform.
Meta Platform data
When you connect a Meta account we receive data through the Meta Marketing API under the permissions you grant. This section is the one Meta’s Platform Terms require us to spell out.
What we read
Your ad accounts, Pages and pixels (names and IDs); campaign, ad set and ad objects you create through ROAScal; and performance insights (spend, impressions, clicks, conversions and revenue) for those objects.
Why
To create and manage campaigns you approve, to show their performance in your dashboard, and to apply the budget rules you set. Nothing else.
What we do not do
We do not sell Meta data, share it with other customers, use it for our own advertising, or use it to build profiles of the people your ads reach. We never read your personal Facebook or Instagram profile.
Deletion
Disconnecting Meta deletes the access tokens immediately and we stop reading data. Deleting your account removes everything else within 30 days. Removing ROAScal from your Facebook settings triggers the same deletion automatically.
Step-by-step deletion instructions are at roascal.com/data-deletion.
How we use your data
- ·To provide and operate the ROAScal service
- ·To generate AI-powered ad analysis and copy using the Anthropic Claude API — URL content you analyse is sent to Anthropic for processing
- ·To manage your connected ad platform accounts (Meta today; Google Ads when connected) and create campaigns on your behalf using the tokens you provide
- ·To process subscription payments via Stripe
- ·To send transactional emails (account, billing, security alerts)
- ·To improve our AI models and product features using anonymised usage data
- ·To comply with legal obligations
Third-party services
We share data with these third parties to operate the platform:
Data retention and deletion
We retain your account data for as long as your account is active. Campaign data and analysis history are retained for 24 months or until you delete your account. OAuth tokens are deleted immediately when you disconnect a platform. On account deletion, all personal data is permanently removed within 30 days.
The three ways to delete your data, including data we hold from Meta, are set out on our data deletion page.
Your rights (UK GDPR / GDPR)
You have the right to:
- ·Access the personal data we hold about you
- ·Request correction of inaccurate data
- ·Request deletion of your data ("right to be forgotten")
- ·Object to or restrict processing
- ·Data portability — receive your data in a machine-readable format
- ·Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email privacy@roascal.com. We will respond within 30 days.
Security
OAuth tokens are encrypted at rest in Supabase Vault. All data in transit is encrypted via TLS. We use Row-Level Security (RLS) on all database tables to ensure workspace data isolation. Payment card data is never stored on our systems.
Changes to this policy
We will notify you by email of material changes to this policy at least 14 days before they take effect. Continued use of the platform after that date constitutes acceptance.
Contact
ROAScal Ltd
Email: privacy@roascal.com