Privacy Policy

This Privacy Policy explains how Desi Kala ("Desi Kala," "we," "us," or "our") collects, uses, stores, shares, and deletes information when a client uses our Meta Business connection and advertising operations service ("Service").

By authorizing a Meta connection, you acknowledge the practices described in this policy. You may revoke the connection or request deletion at any time.

Information you or a client provides

We may process a client's name, work email address, company name, advertising instructions, approved budgets, campaign inputs, support messages, and other information provided in connection with the Service.

Meta Platform Data we process

When an authorized person connects Meta, we receive information through Meta's APIs according to the permissions granted. Depending on the selected assets and permissions, this may include:

• the authorizing Meta user's ID and name;
• Business Portfolio IDs, names, verification status, category, and creation information;
• ad account IDs, names, status, currency, time zone, business association, balance, and amount-spent information;
• Facebook Page IDs, names, categories, assigned tasks, and identifiers for linked Instagram professional accounts;
• permissions granted, token type, token and data-access expiration information, connection status, and validation results; and
• campaign, ad set, creative, image, and ad operation records created while carrying out authorized advertising instructions.

Meta access tokens are received by our server, encrypted before storage, and not displayed in the client's browser or the operator dashboard.

How and why we use information

We process information only as needed to provide and secure the Service, including to:

• verify authorization and identify accessible business assets;
• display connection status and diagnose account readiness;
• create, review, manage, pause, or report on advertising activity authorized by the client;
• provide support, troubleshoot errors, maintain audit records, and prevent misuse; and
• comply with applicable law, enforce our agreements, and protect the rights and security of clients, users, Meta, and Desi Kala.

Where applicable law requires a legal basis, we rely on performance of our agreement, the user's authorization or consent, our legitimate interests in operating and securing the Service, and compliance with legal obligations.

How we share information

We do not sell personal information or Meta Platform Data, and we do not use it for unrelated advertising. We may disclose information only:

• to infrastructure, database, hosting, security, and professional service providers that process it for us under appropriate obligations;
• to Meta through its APIs when required to perform an authorized operation;
• to the client that controls the connected business assets and its authorized representatives;
• when required by law, legal process, or a valid government request; or
• to protect rights, safety, security, and the integrity of the Service.

Storage, security, and international processing

We use encrypted transport, restricted server-side access, encrypted token storage, expiring authorization state, access controls, and administrative audit records. No online service can guarantee absolute security, but we limit access to people and providers that need it to operate the Service.

Our providers may process information in countries other than your own. Where required, we use contractual or other lawful safeguards for such transfers.

Retention and deletion

We retain connection data while the client relationship or requested advertising work remains active and for only as long as reasonably needed for the purposes described above. When access is revoked or a verified deletion request is completed, we delete stored access tokens, connected asset records, and the associated client record within 30 days, unless a limited record must be retained for legal, fraud prevention, dispute, accounting, or security reasons. Backup copies may persist temporarily until they are overwritten through ordinary retention cycles.

Cookies and similar technologies

The Service uses essential cookies or similar storage for administrator sessions, OAuth security, and fraud prevention. The connector does not use advertising cookies to track users across unrelated websites.

Your choices and rights

You may disconnect Desi Kala in your Facebook or Meta settings, decline requested permissions, or ask us to access, correct, export, restrict, object to, or delete information associated with you. Rights vary by location and may be subject to verification and legal exceptions.

See our Data Deletion Instructions for the exact request process. You may also contact your local data protection authority where applicable.

Children

The Service is intended for business users and is not directed to children. We do not knowingly collect personal information from children through this Service.

Changes to this policy

We may update this policy to reflect changes to the Service, legal requirements, or Meta's platform requirements. The "Last updated" date shows when the current version took effect.

Contact

Desi Kala is responsible for privacy requests relating to this Service. Contact us at [email protected].