Privacy Policy

BulkAdKit is a tool operated by BulkAdKit that lets advertisers upload creative files, group them into ads, and publish those ads to their own Meta (Facebook and Instagram) ad accounts in bulk. This policy explains what we collect, why, how long we keep it, and how to have it deleted. Questions go to [email protected].

• Account details — your email address, and the workspace name derived from it. We sign you in with a one-time link sent to that address; we do not store a password unless you were issued one.
• Creative files you upload — images and videos, their filenames, and any ad copy, headlines, links, and campaign settings you enter alongside them.
• Workspace settings — saved presets, naming rules, and default campaign configuration.

When you connect a Meta account, you are redirected to Meta to approve the connection. We never see your Facebook password. With your permission we access:

• ads_management and ads_read — to list the ad accounts, campaigns, ad sets, ads, and media library you already have, and to create campaigns, ad sets, creatives, and ads on your instruction.
• pages_show_list — to list the Facebook Pages and connected Instagram accounts you manage, so an ad can be published as the right Page.

We store the resulting access token encrypted (AES-256-GCM), along with your Meta user ID, your ad account names and IDs, and a cached copy of campaign, ad set, and ad names and settings so the app is usable without re-querying Meta on every screen. We do not request or store audience data, insights, personal profiles of people who see your ads, or any Meta data about anyone other than you.

• To do the thing you asked: build and publish the ads you configured, into the ad account you chose.
• To keep you signed in and to show your workspace.
• To operate and debug the service — error logs, and records of which launches succeeded or failed.
• To contact you about the service, including sign-in links.

We do not sell your data, we do not share it with advertising networks, and we do not use data obtained from Meta to build profiles, train models, or for any purpose other than delivering the features you are using.

Only the service providers needed to run the product, each acting on our instructions: our cloud hosting and database provider, our object storage provider (for uploaded creative files), and our transactional email provider (for sign-in links). We also send the ads you build to Meta, which is the point of the product. We may disclose data if legally required to.

• Uploaded creative files are kept in your media library after a launch, so you can reuse them on another ad account later. They stay until you delete them from the library or ask us to delete your account.
• Meta access tokens are kept, encrypted, until you disconnect, until Meta expires them, or until you delete your account.
• Cached ad account, campaign, ad set, and ad records are kept while your Meta account stays connected, and are deleted when you disconnect or request deletion.
• Account and workspace records are kept until you ask us to delete them.

You can disconnect Meta at any time from Settings → Connections, which revokes our access at Meta and erases the stored token. You can request deletion of everything we hold at any time — see Data Deletion. Depending on where you live you may also have the right to access, correct, export, or object to our processing of your data; email [email protected] and we will respond within 30 days.

Traffic is served over HTTPS. Meta access tokens are encrypted at rest with AES-256-GCM under a key held outside the database. Access to production systems is limited to personnel who need it. No system is perfectly secure, but we will notify affected users and the relevant authorities of a breach where the law requires it.

BulkAdKit is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

We will update the date at the top of this page when this policy changes, and will notify you by email if the change materially affects how we handle your data.