Privacy Policy

Last updated: 17 October 2026

In short. Ads Monitor uses data from Meta accounts, the online store and WhatsApp only to provide the features described below: ad reporting and management, order confirmation and delivery notifications. We do not sell or rent data, and we do not use it for advertising outside the client's own accounts.

1. Who we are

Ads Monitor is a software platform developed and operated by TINA ATELIER S.R.L., Tax ID 54681335, Trade Register J2026031549006, registered office Sat Sânnicolau Român nr. 635, Comuna Sânnicolau Român, jud. Bihor, Romania ("we", "us"). Contact: armando@sigurantaintrafic.com, +40 773 302 016.

For the data of our own stores and of platform users we are the controller under Regulation (EU) 2016/679 (GDPR). When another business uses Ads Monitor, that business is the controller of its customers' data and we act as a processor under a data processing agreement.

2. Data we process

2.1. Data received from Meta (Facebook, Instagram)

When a user connects Ads Monitor to their Meta account, through Facebook Login or a Meta Business Manager system user, we receive only the data allowed by the access granted:

the Meta user ID and name, and email address if granted;
the Business Manager accounts, ad accounts, Facebook Pages and Instagram accounts the user has access to and selects;
campaigns, ad sets, ads, creatives, budgets and their settings;
aggregated ad insights: impressions, reach, clicks, spend, conversions and costs. These do not identify individuals;
access tokens, stored encrypted and used only for the Meta API calls the client requests.

2.2. Online store data (Shopify)

order data: order number, items, quantities, total and payment method;
end-customer data needed for delivery: name, phone number, shipping address, email;
order status: confirmed, cancelled, shipped, delivered or returned.

2.3. WhatsApp Business Platform data

the end customer's WhatsApp phone number and profile name;
messages sent and received in the conversation with the store, including button replies;
message statuses (sent, delivered, read, failed);
consent or refusal for promotional messages and when it was given.

2.4. Platform users

Name, email, role and an activity log (for example "budget changed by X at time Y"), for security and audit purposes.

2.5. Visitors of this website

This website does not use marketing or analytics cookies. Fonts are loaded from Google Fonts, which receives the visitor's IP address to deliver the files.

3. Purposes and legal bases

Purpose	Legal basis (GDPR Art. 6)
Performance reports; creating, editing and pausing campaigns in the client's accounts	Performance of the contract with the client (b); legitimate interest (f) for our own accounts
Confirming cash-on-delivery orders; shipping and delivery notifications	Performance of the sales contract with the end customer (b)
Product offers and recommendations on WhatsApp	Consent (a), which can be withdrawn at any time
Customer support	Contract (b) and legitimate interest (f)
Security, fraud prevention and audit logs	Legitimate interest (f)
Keeping accounting records	Legal obligation (c)

4. How we use data received from Meta

We use data received through Meta's platforms only in line with the Meta Platform Terms and Developer Policies. In particular:

we use it only to provide the Ads Monitor features requested by the user who granted access;
we do not sell, license or purchase Platform Data;
we do not share it with data brokers, ad networks or other third parties, except the technical service providers listed in section 5;
we do not use it to make eligibility decisions about credit, housing, employment or insurance, or for surveillance;
we do not combine one client's data with another client's data.

5. Who we share data with

We work with service providers that process data on our behalf under contract:

Meta Platforms Ireland Ltd.: Marketing API and WhatsApp Business Platform (Cloud API);
Shopify International Ltd.: online store platform;
DigitalOcean, LLC: application hosting (Frankfurt);
Telegram: internal team notifications, without end-customer contact details;
AI service providers (for example Anthropic): drafting ad copy and analyzing aggregated statistics. We do not send end-customer contact details;
courier companies: the delivery details needed to ship the order.

We disclose data to authorities only when required by law.

6. Transfers outside the European Economic Area

Some providers (for example Meta, DigitalOcean or Anthropic) may process data in the United States. Transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

7. Retention

Meta access tokens: until the app is disconnected or access is revoked. We delete them within 7 days.
Campaign insights and settings: while the account is connected, plus 90 days.
WhatsApp order conversations: 12 months after the last order.
Promotional consent records: until withdrawn, then 3 more years as proof.
Order data included in accounting records: as required by Romanian accounting law (usually 10 years).
Audit logs: 12 months.

8. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting earlier processing. Write to armando@sigurantaintrafic.com. We reply within 30 days.

You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro).

To delete data received from Meta or WhatsApp, follow our data deletion instructions.

9. WhatsApp messages

We send WhatsApp messages only to people who gave their phone number when placing an order and agreed to receive updates on WhatsApp. Promotional messages require separate consent. You can stop any message by replying STOP. See WhatsApp messages.

10. Security

We use encrypted connections (HTTPS/TLS), encrypted token storage, password and role-based access, least-privilege access for staff, and backups. In case of a personal data breach we notify the authority and affected people within the GDPR deadlines.

11. Children

Ads Monitor is intended for businesses. We do not knowingly collect data about people under 16.

12. Changes

We may update this policy. The last-updated date appears at the top of this page. We notify platform users by email of significant changes.

13. Contact

TINA ATELIER S.R.L., Sat Sânnicolau Român nr. 635, Comuna Sânnicolau Român, jud. Bihor, Romania
Email: armando@sigurantaintrafic.com
Phone: +40 773 302 016