Privacy Policy

When we act as a "business" (controller). We decide how and why to process the personal information of our customers, their personnel, and visitors to our website — for example, your name, work email, billing details, and website usage. This Policy describes that processing.

When we act as a "service provider" (processor). To deliver the Services, you authorize us to work inside your own Meta advertising account. Information we see there — including any information Meta surfaces about your shoppers or audience — belongs to you and is processed by us only on your behalf and on your documented instructions under our Terms of Service. For that information, you are the business/controller and we are your service provider. Section 5 explains how we handle it. If you are a shopper or customer of one of our customers, please direct privacy questions and requests to that business; we will assist them in responding as required by law and our agreement with them.

Information you provide to us. Name, work email address, phone number (if you give it), company name and website, job title, billing contact details, communications with us (including support requests), onboarding questionnaire responses, brand assets, creative preferences, product and offer details, and other business information you provide so we can perform the Services. If you create an account with us, we also collect your login credentials, which are stored in hashed form.

Callback calls. If you use our callback form, we also create and keep a recording and transcript of the call and a record of the consent you gave on the form — the wording shown, its version, and the date, time, and network details of your submission. Section 3 explains how the callback works and how you can stop the calls.

Information from your Meta advertising account. When you grant us access through Meta’s official access controls (such as Meta Business Manager or partner access), we can view and, as authorized, manage campaign, ad set, ad, creative, spend, placement, and performance data in your account. This can include aggregated or statistical information about your shoppers and audiences that Meta surfaces within the ad account. We never ask for or receive your Meta password. See Section 5.

Transaction information from Stripe. When you pay through our Stripe-embedded checkout, we receive transaction and subscription records such as the amount, date, product purchased, payment status, the last four digits and brand of the card, and billing name and address. We do not receive or store full payment-card numbers, CVV codes, or bank account numbers; those go directly to Stripe.

Information collected automatically. When you visit our website we, and our service providers, may collect device and browser type, IP address, approximate location derived from IP, operating system, referring page, pages viewed, actions taken (such as starting checkout or onboarding), and the date and time of your visit. Some of this is collected through cookies and similar technologies described in Section 7. The Meta Pixel collects this type of information only if you turn on marketing in our cookie banner.

Sensitive personal information. We do not seek to collect "sensitive personal information" as defined by the California Consumer Privacy Act ("CCPA"), other than account login credentials if you create an account. We do not use or disclose sensitive personal information for any purpose other than those permitted by the CCPA, such as providing the Services you request and securing our systems.

Sources. We obtain information directly from you; from your Meta advertising account with your authorization; from Stripe when you pay; automatically from your device and browser; and from our service providers listed in Section 4.

We use personal information for the following business and commercial purposes:

• To provide, operate, maintain, and improve the Services, including producing and testing advertising creative, launching and managing campaigns in your Meta account as you direct, measuring results, and preparing reports.
• To process payments, subscriptions, refunds, and invoices, and to provide customer support.
• To communicate with you about your purchase, onboarding, deliverables, service updates, security notices, and changes to our terms or policies.
• To send marketing communications about our own Services, which you can opt out of at any time using the unsubscribe link in those emails or by emailing privacy@automatedadagency.com. We will still send transactional and service messages.
• To measure the performance of our own website and, only if you consent to the Meta Pixel, to show our own ads to people who have visited our site (see Section 7).
• To detect, investigate, and prevent fraud, abuse, and security incidents; to enforce our agreements; and to comply with legal obligations.
• To create anonymized and aggregated insights, benchmarks, and examples as described in Section 6.

AI and automation. Our Services are assisted by artificial-intelligence and automation tools that help generate, vary, and analyze advertising creative and performance data. All creatives are reviewed by our team and approved by you before launch. We do not use your brand materials, creative, or ad-account data to train models for the benefit of third parties.

Callback calls (AI voice assistant). Our website offers a callback form. When you enter your phone number, check the consent box, and submit the form, you give Ner Tamid LLC d/b/a Automated Ad Agency your consent to call that number about our advertising services. The call is made by an AI voice assistant — it is not a person — and the assistant says so at the start of every call. Calls may be recorded and transcribed. We use your number, the recording, and the transcript to respond to your request, to discuss our Services with you, and to check and improve the quality of our calls. If we cannot reach you, the assistant may leave one short, pre-recorded voicemail message in response to your request. If, during the call, you agree to buy a Testing Sprint or an Engine cycle, we send you a Stripe checkout link by text message and/or email and you pay on your own device; the assistant never asks for, receives, or takes payment-card numbers. We send no more than one text message in response to a callback request, and requesting a callback never signs you up for a marketing text-message program. You may revoke your consent and stop the calls at any time by any reasonable method — tell the assistant "do not call" or press 9 during the call, reply STOP to a text from us, or email support@automatedadagency.com — and we will add your number to our do-not-call list.

No sale. We do not sell personal information for money. We do not sell or share any information from your Meta advertising account. We may "share" limited website browsing data with Meta through the Meta Pixel, as that term is defined in the CCPA, but only if you consent in our cookie banner. We do not use your brand materials to advertise unrelated third parties.

We disclose personal information to the following categories of recipients:

Service providers. Companies that process information on our behalf and under contracts that limit their use of that information to providing services to us:

• Stripe, Inc. — payment processing, subscription billing, and fraud prevention. Stripe collects your payment details directly and is also responsible for that information under its own privacy policy as a payment processor and regulated financial institution.
• Supabase, Inc. — database and file storage for account, onboarding, and engagement data.
• Vercel, Inc. — website and application hosting.
• Resend — delivery of transactional and account emails.

Meta Platforms, Inc. Meta appears in two different roles. (a) Your Meta advertising account is your own relationship with Meta, governed by your agreement with Meta and Meta’s privacy policy; when we work in your account with your authorization, we are not disclosing your data to Meta — it is already there. (b) Separately, if you accept the Meta Pixel on our website, Meta receives information about your activity on our site and processes it as an independent business under Meta’s privacy policy, including to serve our ads and to improve Meta’s own services. Meta is a third party, not our service provider, for Pixel data.

Professional advisers. Lawyers, accountants, auditors, and insurers, under confidentiality obligations.

Legal and safety. Courts, regulators, law enforcement, and other parties when we believe disclosure is required by law, subpoena, or legal process, or is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.

Business transfers. A buyer, successor, or financing party in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to this Policy and applicable law.

With your direction. Anyone you ask or authorize us to share information with.

We do not share personal information with third parties for their own direct-marketing purposes.

Authorization and access. You grant and control our access through Meta’s official access controls. We never request or receive your Meta password. You can change or revoke our access at any time within Meta, and you should revoke it when our engagement ends if we have not already relinquished it.

How we treat it. For all information we access in your ad account — including any aggregated information about your shoppers or audiences — we act as your service provider. We use that information only to perform the Services you have purchased, on your instructions, and as permitted by our Terms of Service and applicable law. We do not sell or share it, do not use it to build audiences for ourselves or other customers, do not combine it with personal information we hold from other sources except as necessary to perform the Services, and do not attempt to re-identify any individual from aggregated or pseudonymous data. We require any personnel or service providers who handle this information to be bound by confidentiality and use restrictions.

Rights requests from your customers. If one of your shoppers submits a privacy request to us, we will refer the request to you and cooperate with you as required by our agreement and applicable law.

At the end of an engagement. When your Testing Sprint or Engine Mode cycle ends and is not renewed, we relinquish access to your ad account (and you may revoke it in Meta), and we delete or de-identify copies of ad-account data in our systems within a reasonable period, except for (i) anonymized performance data retained under the license in our Terms of Service, (ii) deliverables and records we are required to keep for legal, tax, accounting, or dispute-resolution purposes, and (iii) information in routine backups, which is overwritten in the ordinary course. You can request confirmation of deletion by emailing privacy@automatedadagency.com.

As described in our Terms of Service, you grant us a license to use anonymized and aggregated performance data (for example, benchmark hook rates or cost-per-acquisition ranges across engagements) and creative examples for our own marketing and to improve the Services. Anonymized data does not identify you, your company, or any individual, and we do not attempt to re-identify it.

We will not publish your company name, logo, identifiable creative or results, named testimonials, or identifiable case studies without your separate written approval. Where we publish results, we make the disclosures required by the Federal Trade Commission, including material-connection and "results not typical" disclosures where applicable. You may withdraw an approval for future use by emailing privacy@automatedadagency.com; withdrawal does not affect materials already published or distributed before we receive your request.

One switch controls everything we send to Meta. Our website uses strictly necessary cookies and — only if you turn it on — one marketing tool, the Meta Pixel. Our cookie banner offers "Accept all," "Essential only," and a "See exactly what each one does" view with the switch for each kind; the "Cookie choices" link in our site footer reopens the same panel at any time. The same switch also controls the server-side reports described below: if marketing is off, we send Meta nothing, from your browser or from our servers.

Strictly necessary cookies. Our checkout page loads Stripe’s embedded checkout, which sets cookies necessary for payment processing and fraud prevention. Our site also stores your cookie-banner choice itself, so we can honor it. These are strictly necessary for the site and checkout to work and do not require consent.

Meta Pixel (consent required). We use the Meta Pixel on our website only when marketing is on — when you click "Accept all" in our cookie banner or turn on the "Marketing & retargeting" switch in the cookie choices panel. The Pixel is a small script from Meta that records the pages you visit and actions you take (such as starting checkout or onboarding), along with your IP address and browser information, so we can measure how our ads perform and show our own ads on Meta’s platforms to people who have visited our site — for example, reminding someone who started checkout to come back and finish. Meta receives this data and processes it under Meta’s privacy policy, and may collect information about your online activity over time and across other websites and services that use Meta tools. The Pixel never loads if you choose "Essential only" or do not respond to the banner, and no data is sent to Meta from your browser before you turn marketing on.

Server-side measurement (same switch). When you take an action with us — start checkout, complete a purchase, finish onboarding — our servers record it in our own systems; those transaction records are ours and are kept as described in Sections 2 and 9. If, and only if, marketing is on, we also send a copy of some of these events to Meta from our server (Meta calls this the Conversions API). We do this so our ad results are still measured when a browser blocks the Pixel, and so each purchase is counted exactly once. A purchase report includes your email address only in hashed form — Meta uses it to match the purchase to a Meta account; it isn’t sent as readable text. If marketing is off, these server reports are not sent. For a purchase, the choice that counts is the one in place when you start that checkout.

Your choices.

• Essential only, or do nothing. If you do not turn marketing on, the Pixel does not load and we send Meta nothing. This is how you opt out of sharing on this site.
• Change or withdraw consent. Your choice is stored in your browser. To change it at any time, use the Cookie choices link in our site footer (it is also right here) and set the switch how you want it — changing your mind takes the same clicks as the first choice. You can also clear this site’s data in your browser settings, which brings the banner back. Withdrawal applies going forward; it does not retrieve data already sent to Meta while marketing was on.
• Opt-out preference signals. If your browser sends an opt-out preference signal such as Global Privacy Control ("GPC"), we treat it as a decline and the Pixel will not load. While the signal is on, it overrides the cookie choices panel, so marketing stays off. Other than GPC, our site does not respond to "Do Not Track" browser signals, for which there is no common standard.
• Meta’s own controls. You can adjust how Meta uses data about you in Meta’s Ad Preferences (facebook.com/adpreferences) and in Meta’s Off-Facebook Activity settings.
• Email us. You can also email privacy@automatedadagency.com. Because the Pixel runs in your browser, we will confirm your request and walk you through the cookie-choices step above, which is what actually stops the Pixel.
• Browser settings. You can block or delete cookies in your browser, which may affect site functionality.

Because we honor GPC as a frictionless opt-out of sharing, this site does not carry a separate "Do Not Sell or Share My Personal Information" link — the banner, the cookie choices panel, and GPC all operate the same switch.

Other than the Meta Pixel, we do not use any analytics or advertising cookies on our website.

Rights for everyone. You may request access to, correction of, or deletion of your personal information, request a copy of it in a portable format, and withdraw consent where our processing is based on consent, by emailing privacy@automatedadagency.com. You can unsubscribe from marketing emails at any time. We honor these requests regardless of where you live, subject to applicable law and the limits described below.

California residents (CCPA). To the extent the CCPA applies to us, California residents have the rights described in this section, and we honor them in any event. Note that the CCPA treats employees and representatives of our business customers as consumers, so this section applies to our customers’ personnel as well as to website visitors.

Categories of personal information collected in the preceding 12 months, sources, purposes, and recipients:

• Identifiers (name, email, phone, company, IP address, account credentials) — from you and automatically; used for all purposes in Section 3; disclosed to Stripe, Supabase, Vercel, Resend, and, for IP address and online identifiers only and only with consent, shared with Meta via the Pixel.
• Commercial information (purchases, subscriptions, transaction records) — from you and Stripe; used to provide and bill the Services, support, fraud prevention, and compliance; disclosed to Stripe and Supabase.
• Internet or network activity (pages viewed, actions on our site, browser and device data) — collected automatically; used for site operation, security, and measurement; disclosed to Vercel, and, with consent, shared with Meta via the Pixel.
• Professional or business information (job title, company details, brand and campaign information) — from you and your Meta ad account; used to provide the Services; disclosed to Supabase and Vercel.
• Inferences — we do not create profiles about individuals; performance inferences are about ads and campaigns.
• Sensitive personal information — account login credentials only, if you create an account; used solely to authenticate you; not disclosed except to Supabase for storage.

Sale and sharing. We have not sold personal information for money in the preceding 12 months. We "share" identifiers and internet activity with Meta through the Meta Pixel for cross-context behavioral advertising only when a visitor accepts our cookie banner. We do not knowingly sell or share the personal information of anyone under 16. We do not sell or share information from customers’ Meta ad accounts.

Your CCPA rights. The right to know what personal information we collect, use, disclose, sell, or share; the right to delete; the right to correct inaccurate information; the right to opt out of sale or sharing (see Section 7 for how to opt out of Pixel sharing); the right to limit the use of sensitive personal information (we already limit our use to permitted purposes); and the right not to be discriminated against for exercising these rights. We do not offer financial incentives or price differences in exchange for personal information; our founding-customer pricing is based on order of purchase, not on data.

How to submit a request. Email privacy@automatedadagency.com with "Privacy Request" in the subject line. We operate exclusively online and this is our designated request method. We will respond within 45 days, and may extend by up to 45 additional days with notice. You may make a request for access twice in any 12-month period. We will not charge a fee unless requests are manifestly excessive, in which case we will tell you before proceeding.

Verification. We will verify your identity before responding by matching information you provide to information in our records (for example, confirming the request from the email address on your account, or asking for your company name and the date of a recent transaction). We will only use the information you provide for verification.

Authorized agents. You may use an authorized agent to submit a request. We will require the agent to provide your signed written permission and may still verify your identity directly with you, unless the agent holds a power of attorney.

Service-provider data. If your request concerns information we process on behalf of one of our customers (for example, as a shopper of a business that uses our Services), we will refer your request to that customer and assist them as required.

California "Shine the Light" (Civil Code § 1798.83). We do not disclose personal information to third parties for their direct-marketing purposes.

Residents of other U.S. states. If you live in a state with a comprehensive privacy law that applies to us, you may have similar rights, including the right to appeal a decision on your request. To appeal, reply to our response email with "Appeal" in the subject line and we will review your request again within the time required by law.

Outside the United States. Our Services are directed to businesses in the United States. If you contact us from the European Economic Area, United Kingdom, or elsewhere, we process your information in the United States on the basis of performing a contract with you or your business, our legitimate interests in operating and marketing the Services, your consent where required (for example, for the Meta Pixel), and compliance with legal obligations. You may exercise the rights above by emailing us and may contact your local data-protection authority.

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, determined by the following criteria:

• Customer account, onboarding, and engagement records — for the duration of our relationship and for a reasonable period afterward to support follow-on work, resolve disputes, and enforce our agreements.
• Transaction, billing, and tax records — for the period required by tax, accounting, and financial-record laws.
• Communications and support records — for as long as needed to provide support and to document our relationship.
• Callback recordings, transcripts, and consent records — kept as communications and support records, as described above, including to document your consent and your opt-out requests.
• Meta ad-account data — as described in Section 5; deleted or de-identified within a reasonable period after an engagement ends, except as stated there.
• Website data and cookie choices — your cookie choice remains until you clear it; server logs are kept for a limited period for security and troubleshooting.
• Anonymized and aggregated data — may be retained indefinitely because it does not identify you.

When information is no longer needed we delete or de-identify it. Deletion requests are subject to exceptions allowed by law, including for completing a transaction, security and fraud prevention, legal compliance, and internal uses reasonably aligned with your expectations.

We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we handle, as required by California law. These include: accessing your Meta account only through Meta’s official access controls, with the permissions you grant, and never through your password; relying on Stripe, a PCI DSS-compliant processor, so that full card numbers never reach our systems; encrypting data in transit; limiting access to personal information to personnel and service providers who need it to perform the Services; and using reputable, security-certified infrastructure providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security breach involving your unencrypted personal information, we will notify you and any affected customers as required by California Civil Code § 1798.82 and other applicable law.

We are located in the United States and our service providers process information primarily in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required by law, we use legally recognized safeguards for international transfers.

Our website and Services are intended for businesses and for individuals 18 years of age or older. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, email privacy@automatedadagency.com and we will delete it.

We may update this Policy from time to time. We will post the revised version on our website with a new "Last updated" date, and if the changes are material we will notify current customers by email or by a notice on our website before they take effect. Your continued use of the Services after the effective date means the updated Policy applies.

This Policy and any dispute relating to it are governed by the laws of the State of California and are subject to the dispute-resolution and venue provisions of our Terms of Service, which provide for venue in Los Angeles County, California.

For privacy questions or to exercise your rights, contact us at:

Ner Tamid LLC DBA Automated Ad Agency
Email: privacy@automatedadagency.com
18039 Chatsworth St #3301, Granada Hills, CA 91394

For account help — including re-sending a lost onboarding or approval link — visit Help & support.