Privacy policy

What this service does

Klidoo reads the performance of your Meta (Facebook and Instagram) advertising once a day, proposes a small number of concrete changes, and carries out only the ones you approve. It never changes your advertising on its own.

What we store

We hold only what the service needs to work:

• —Your email address and name, which come from the Google account you sign in with — there is no password with us.
• —The date on which you accepted these documents, and which version of them you accepted.
• —An access token for your Meta advertising account, which you grant through Meta and we store encrypted (AES-256-GCM). We never see or ask for your Facebook password.
• —Advertising data read from Meta: campaigns, ad sets, ads, their spend and results, for roughly the last 30 days on a rolling basis.
• —If you connect Instagram: your business profile's posts, their thumbnails and public engagement figures.
• —The proposals we generated, your approvals and rejections, and what we then changed in your account.
• —A short niche overview we generate to find similar public ads, and snapshots of those public competitor creatives (images are hotlinked, not re-hosted as your assets).
• —If you submit the public demo form: your email address, website or Instagram profile, approximate advertising budget and the campaign or page that brought you to Klidoo. The form is delivered to our business inbox and is not added to your Klidoo account.
• —If you switch on notifications: the push subscription your browser issues — an address at Google's or Apple's push service plus two keys. It identifies a browser, not you, and deleting it stops the notifications.

Why we are allowed to hold it

We process this data to perform the contract you enter into by signing up (GDPR Article 6(1)(b)). We do not use it for advertising, we do not profile you, and we do not sell it to anyone.

Your customers' data

We do not receive it. What we read from your advertising account is aggregate performance — how much a campaign spent, how many results it got — never the people behind those numbers. We do not upload customer lists, we do not build or change custom audiences, and we do not read your leads.

That is why there is no data processing agreement to sign here: we are not a processor acting on your behalf on your customers' data. We are a controller of the little we hold about you, which is the list above.

Artificial intelligence

The daily proposals and any ad text we suggest are drafted by a generative AI model run by Anthropic, from your recent performance figures. Nothing it writes reaches your advertising account by itself: you read each proposal and approve it, and that approval is what makes it yours to publish.

Who else sees it

We use a small number of processors, each for one purpose, and no others:

• —Meta Platforms — the source of the advertising data and the target of any change you approve. On the public Klidoo website, Meta Pixel and Conversions API also receive page-view and demo-lead events, Meta click/browser identifiers, campaign attribution and, for a submitted demo request, a one-way hash of the email address plus the request's IP address and browser user agent.
• —Anthropic — the AI model that drafts the daily proposals receives your recent performance figures. It does not receive your email address, your access token, or any personal data about your customers.
• —AdLibrary — when we show public ads from businesses in your niche for inspiration, we query their commercial ad index. We store a snapshot of those public creatives and metrics; we do not send them your Meta access token or customer data.
• —Google — handles sign-in, so it knows when you sign in to Klidoo. We receive your email address and name from your Google account, nothing else.
• —Railway — hosts the application and the database, inside the European Union.
• —PostHog EU Cloud — measures page views and demo-form completion on the public website. It does not receive your Meta access token or advertising-account data.
• —Resend — delivers a submitted demo request to our business inbox. It receives the details entered in that form and the address it is sent to.
• —Stripe — takes the payment if you subscribe, and issues the invoice. We never see or store your card number.

Transfers outside the EU

Meta, Anthropic, AdLibrary, Resend and Stripe may process data outside the EU (including the United States), under the European Commission's standard contractual clauses where required. PostHog is configured to use its EU Cloud endpoint.

Cookies and what stays in your browser

Necessary cookies keep you signed in, remember which business you have open and where you got to in setup, and protect the short-lived Meta connection from a forged request. The public marketing site may additionally use PostHog analytics and Meta Pixel when those services are configured. They measure visits, campaign attribution and a completed demo request; Meta may set the _fbp and _fbc browser identifiers. You can block or delete these non-essential cookies and scripts in your browser settings without losing access to the Klidoo app.

Your browser also keeps a few small flags of its own, remembering that you dismissed a prompt so it is not shown again. They never leave your device and we cannot read them.

How long we keep it

Advertising figures roll forward as they age out of the windows we read. Everything else stays while your account exists and is deleted when you ask us to.

Deleting your data

The owner of an account can delete it in Klidoo: Account → Delete account. A subscription that still renews has to be cancelled first. Deleting stops Klidoo at once and disconnects Meta, Google Ads and your booking system; ads already running in your Meta ad account keep running until you pause them there. Within 30 days we erase the account's advertising data, proposals, history, photos and team access. Invoices are kept, because tax law requires it. When it was your last account, your login is deleted straight away.

You can also write to privacy@klidoo.ai from the address you signed up with and say you want your data deleted. We will erase it within 30 days and reply to the same address when it is done.

You can also cut our access off yourself at any time, without writing to us: in Facebook, under Settings → Business integrations, remove Klidoo. That immediately stops us reading anything new. It does not by itself delete what we already hold, so send the email as well if that is what you want.

Your other rights

You may ask us for a copy of your data, for corrections, or for us to stop processing it, at privacy@klidoo.ai. If you think we have handled your data badly, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Changes

If we change anything that matters, the app will say so and ask you to read the new version before you carry on using it. Smaller edits — a clearer sentence, a processor renamed — only move the date at the top.