Privacy Policy

Last updated: April 2026

1. Who We Are

LaunchAds Easy (launchadseasy.com) is operated by Bacano Systems LLC. When we say “we,” “us,” or “our,” we mean Bacano Systems LLC.

2. What Data We Collect

  • Account information — name, email address, and password (hashed) when you sign up.
  • Facebook Page information — Page name, Page ID, and ad account ID, obtained when you connect your Facebook account via OAuth.
  • Meta tokens — encrypted OAuth access tokens used to manage ads on your behalf. We store Page tokens and ad account identifiers.
  • Lead data — names, email addresses, phone numbers, and custom form fields submitted through Meta lead forms attached to your campaigns.
  • Campaign data — ad copy, video files, targeting preferences, budget settings, and performance metrics.
  • WhatsApp Business number — if you choose to use WhatsApp as a call-to-action or to receive lead alerts, we store the number you provide.
  • SMS notification phone number — if you opt in to SMS lead alerts, we store the mobile number you provide.
  • Browser push notification subscription — the push endpoint URL and encryption keys provided by your browser if you enable desktop push notifications.
  • AI-generated content — ad copy variations, follow-up email drafts, and video scripts generated by AI on your behalf. We store these alongside your campaigns and leads so you can review and reuse them.
  • Asset files — videos, images, screen recordings, audio files, and voiceovers you upload or create in the Asset Studio. These are stored in Supabase Storage and accessible only to you.
  • AI API key — if you choose to connect your own Anthropic API key, we store it encrypted at rest and use it only to make AI generation requests on your behalf. The key is masked in the dashboard and never exposed to client-side code.
  • Meta Pixel ID — if you provide a Pixel ID, we attach it to your ads so Meta can track website conversions for you.
  • Billing information — managed by Stripe. We do not store credit card numbers.

3. How We Use Your Data

  • To create and manage Facebook and Instagram ad campaigns on your behalf.
  • To retrieve leads from Meta lead forms and display them in your dashboard.
  • To send you email notifications when new leads arrive.
  • To send you browser push notifications and SMS or WhatsApp alerts when new leads arrive, if you have enabled those channels.
  • To generate AI-powered ad copy using your business description.
  • To generate AI-powered email drafts for lead follow-up, using the context of the lead and the campaign that generated it.
  • To process video and audio assets in the Asset Studio — generating captions, voiceovers, music overlays, and speed adjustments.
  • To track AI generation usage against your monthly credit allowance for billing and quota enforcement.
  • To process billing and manage your subscription.
  • To improve our service and fix bugs.

4. Meta (Facebook) Data

LaunchAds Easy uses the Meta Graph API to create and manage ad campaigns and lead forms on your behalf. When you connect your Facebook account, we request the following permissions through Meta's OAuth flow. We request only the permissions listed below and no others.

Permissions We Request

  • pages_show_list— used to list the Facebook Pages you manage, so you can pick which Page will publish your ads. We read only the Pages visible to you.
  • pages_read_engagement— used to read basic Page metadata (name, profile picture, and Page ID) for the Pages you connect, so your dashboard can display them correctly.
  • ads_management— used to create, edit, pause, resume, and delete campaigns, ad sets, ads, and creatives inside your own ad account, strictly on your behalf and based on the actions you take inside LaunchAds Easy.
  • ads_read— used to fetch campaign-level performance metrics (spend, impressions, clicks, cost per lead) so we can display your results in the LaunchAds Easy dashboard.
  • leads_retrieval— used to download leads submitted through Meta lead forms attached to your campaigns. Without this permission we cannot show you the leads your ads generate.
  • pages_manage_ads— used to attach lead forms and ad creatives to your Facebook Page and to publish ads from it.

How We Use Meta Data

We access Meta data ONLY to provide the LaunchAds Easy service. We do not sell, share, license, or transfer Meta data to any third party.

We do not use Meta data for purposes unrelated to the user's direct use of LaunchAds Easy. That means we do not use it for ad targeting outside your own campaigns, cross-customer analytics, market research, training AI models, or any form of data brokering.

We do not use Meta data to build user profiles for advertising, analytics, or any purpose beyond operating the LaunchAds Easy service for the individual user.

Where Meta Data Is Stored

Meta data is stored in our database hosted by Supabase in the US-East region, with row-level security policies in place to ensure that each user can only access their own data. No LaunchAds Easy user can see another user's Pages, ad accounts, campaigns, or leads.

Lead Data From Meta Lead Forms

Lead data retrieved through leads_retrievalcontains personally identifiable information — names, email addresses, phone numbers, and any custom fields — submitted by third parties (the leads themselves) when they fill out the Meta lead form attached to your ad. This data is accessible only to the LaunchAds Easy user who owns the campaign that generated it. We do not share lead data with anyone else, and we never aggregate leads across customers.

Token Storage and Revocation

Meta OAuth tokens are stored server-side in our database and are never exposed to client-side code. User access tokens are refreshed automatically before expiration so your campaigns keep running without interruption. You can revoke access at any time by disconnecting Facebook in your Settings page inside LaunchAds Easy, or by removing LaunchAds Easy from your Facebook Business Integrations settings. When you disconnect, all Meta tokens are immediately deleted from our database.

5. Cookies & Authentication

We use Supabase authentication cookies to keep you signed in. These are essential cookies required for the service to function. We do not use tracking cookies or third-party advertising cookies.

6. Data Retention

We retain your data for as long as your account is active. Campaign and lead data is kept for the lifetime of your account. When you delete your account, all associated data (profile, campaigns, leads, Meta tokens, assets, and AI keys) is permanently deleted within 30 days.

7. Data Security

  • We implement industry-standard security measures to protect your data.
  • All data is transmitted over HTTPS/TLS encryption.
  • Database access is protected by row-level security policies — each user can only access their own data, enforced at the database layer.
  • Meta tokens are stored server-side and never exposed to client-side code.
  • Passwords are hashed using Supabase Auth's bcrypt implementation. We never see or store plaintext passwords.
  • Payment information is handled entirely by Stripe and never stored on our servers.
  • AI API keys provided by users are stored server-side, encrypted, and masked in the dashboard UI.
  • We rate-limit sensitive endpoints to prevent abuse and brute-force attacks.

8. International Data Transfers

Our services are hosted in the United States (Vercel and Supabase US-East). If you access LaunchAds Easy from outside the United States, your data will be transferred to and processed in the United States. By using LaunchAds Easy, you consent to this transfer.

9. Your Rights

  • Disconnect Facebook — remove all stored Meta tokens and Page information from your Settings page at any time.
  • Delete your account — email us at support@launchadseasy.com and we will delete all your data within 30 days.
  • Export your data — contact us at support@launchadseasy.com to request a copy of your data.
  • Manage notifications — disable email, SMS, WhatsApp, or push notifications at any time from your Settings page.
  • Remove your AI key — delete your stored Anthropic API key from your Settings page at any time.

10. Children's Privacy

LaunchAds Easy is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@launchadseasy.com and we will delete it.

11. Third-Party Services

We use the following third-party services to operate LaunchAds Easy:

  • Supabase — database, authentication, and file storage (US-East region).
  • Vercel — application hosting and serverless functions.
  • Stripe — payment processing and subscription billing.
  • Resend — transactional email delivery (lead notifications and account emails).
  • Anthropic (Claude) — AI-generated ad copy, email drafts, and video scripts.
  • OpenAI — audio transcription and voiceover generation for the Asset Studio.
  • Meta (Facebook) — ad campaign management and lead retrieval.
  • Twilio — SMS and WhatsApp message delivery for lead notifications.
  • Upstash — rate limiting infrastructure. No personal data is stored with Upstash.

Each service has its own privacy policy. We encourage you to review them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or by posting a notice on our website. Your continued use of LaunchAds Easy after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or your data, contact us at:

Bacano Systems LLC
Email: support@launchadseasy.com

For Meta-specific data inquiries, you can also manage your connected apps at facebook.com/settings → Business Integrations.