Privacy Policy

Last updated: June 10, 2026

Who we are

CB2 Creative Intelligence ("CB2", "we", "us") is a Meta-ads creative intelligence service operated at mediabuyer.agency. Contact: totalmarketingplans@gmail.com.

What we collect

When you create an account or connect Meta Ads, we collect:

Account info: your name, email, company name, phone (optional), business type, monthly ad spend bracket, and your stated goal.
Meta access token: a read-only OAuth token issued by Meta with the ads_read and business_management scopes. We store this server-side so we can pull your ad data on a schedule.
Meta ad data: for the ad accounts you select, we read campaign, ad set, ad, and insights data (impressions, clicks, spend, video view rates, link clicks, conversions). We do not read messages, comments, friend lists, or anything outside ads.
Server logs: standard request logs (IP, user agent, timestamps, response codes) retained for security and debugging.

What we do with it

Score your creatives for fatigue and slippage, and surface kill / watch / scale recommendations on your dashboard.
Send you email or Slack notifications about new reports (only if you opt in).
Improve our scoring models in aggregate — we never train on or share an individual customer's data without consent.

We do not sell your data. We do not run ad networks against you. We do not share your Meta data with any third party except (a) Google Cloud / Firebase as our hosting provider, (b) OpenAI when explicitly used to generate a written diagnosis on your dashboard (the request is limited to anonymized performance metrics, never raw ad text or imagery unless you opted into deeper analysis), and (c) Slack if you have connected a Slack workspace for notifications.

Read-only access

We use Meta's ads_read permission only. We cannot launch, pause, edit, or delete ads on your behalf. We cannot post on your behalf. We cannot read your messages or your friends list. If you grant business_management, it's so we can see ad accounts you access through Business Manager — also read-only.

Where your data lives

All data is stored in Google Cloud Firestore in the us-central1 region under a Firebase project owned by CB2. Access is gated server-side and enforced by Firestore security rules — a granted user can only read their own account's data, never another tenant's.

How long we keep it

While your account is active: indefinitely, so we can show you trends over time.
After you delete your account: within 30 days we purge your Meta tokens, ad data, and personal info from active systems. Backups roll off within 90 days.
Server logs: 30 days.

Your rights

Delete your data any time by visiting /data-deletion or emailing us. We respond within 30 days.
Disconnect Meta at any time — revoke our app under your Facebook Settings → Apps and Websites, or ask us to revoke the token. Revoking stops all new data collection immediately.
Export your data on request. Email us; we send a JSON dump within 14 days.
If you're in the EU/UK: you have rights under GDPR including objection and portability. Contact us using the email above.

Cookies and tracking

We use session cookies (__session) to keep you signed in. We do not run third-party analytics, advertising pixels, or cross-site trackers on this product. If you embed a share link in an email or chat, the recipient's view is read-only and cookies are scoped to the share session only.

Children

CB2 Creative Intelligence is for businesses. We do not knowingly collect data from anyone under 13.

Changes

If we materially change this policy we'll email everyone with an active account at least 30 days before the change takes effect. Material non-material clarifications get posted here with an updated "Last updated" date.

Contact

Questions, deletion requests, or anything else: totalmarketingplans@gmail.com