Privacy policy

Last updated 31 October 2026

Meta Ads Hub is a private web app run by Usman Khan. A small team uses it to set up and manage Facebook and Instagram ad campaigns, for its own ad accounts and those of its clients, through Meta's Marketing API. It isn't offered to the public, and nobody signs in to it with Facebook.

This page says what the app reads, what it keeps, who sees it, and how to have it deleted.

What it reads from Meta

Only for the ad accounts a business has given the app access to, in its Meta Business settings:

• The ad account's details: its name, currency, time zone, status and spending limit.
• Its campaigns, ad sets, ads and ad creatives, with their settings, texts, links, pictures and videos.
• The numbers Meta reports for them, such as spend, impressions, clicks and purchases. These are totals, not data about individual people.
• The Facebook Page, Instagram account and pixel the ads use: their id and name.
• The names and ids of the ad account's custom audiences, to choose who an ad reaches. The app never reads or uploads the people in an audience.

What else it keeps

• The team's own accounts: name, email address, a hashed password, and which clients each person may see.
• A log of every change made through the app: who made it, when, the values before and after, and Meta's answer.
• Copies of the pictures and videos the team uploads for ads.
• For a client that connects its shop: daily totals of orders and revenue per ad, from the client's own reporting. No customer names, addresses or order details.

What it doesn't do

• It collects no data about the people who see or click the ads.
• It doesn't sell, rent or trade any data, and doesn't use it for anything but managing the ads.
• These pages set no cookies and load nothing from other sites.

Who it's shared with

Nobody outside the team and the client the data belongs to. The app sends Meta only what it needs to make and change the ads the team asks for. A client's shop totals are read from that client's own Google Cloud project. The app runs on servers under the operator's control.

How it's protected

Only the team's accounts can open the app, and each person sees only the clients they work on. Meta access tokens are stored encrypted and are never written to logs. The app is served over HTTPS.

How long it's kept

For as long as the client works with the team. Spreadsheet exports are deleted after 7 days. When a client stops, or asks, everything the app holds for its ad accounts is deleted within 30 days.

Deleting your data

See how to remove the app's access and have your data deleted.

Changes

If this policy changes, this page shows the new text and the date it changed.

Contact

Usman Khan, kha333n@gmail.com