Privacy policy

Data we collect

• Account: email address, password (hashed by our authentication provider), chosen language.
• Facebook connection: Facebook profile ID and name, access token (stored encrypted), list of the ad accounts, Pages, Instagram accounts and pixels you authorise.
• Content: uploaded files (stored temporarily while they are sent to Meta), ad copy, settings and drafts.
• Payment: handled by Stripe; we never see your card number. We keep the Stripe customer ID and subscription status.
• History: IDs of the ads created through Scheerz.

Purposes and legal bases

• Providing the service (creating your ads): performance of the contract.
• Billing and accounting obligations: legal obligation.
• Security and abuse prevention: legitimate interest.

We do not sell any data, show no ads and use no advertising trackers.

Use of Meta data

Data obtained through Meta’s API is used only to show your accounts and create the ads you request. It is neither shared nor used for any other purpose, in line with the Meta Platform Terms.

Retention

• Uploaded files: deleted after publishing, and at the latest 30 days after the draft was last opened.
• Account, settings, history: until the account is deleted.
• Facebook connection: until disconnection, account deletion or a deletion request sent by Meta.
• Invoices: 10 years (accounting obligation).

Processors

• Supabase — Database, authentication, temporary file storage — EU (Paris)
• Vercel — Website and application hosting — EU / United States
• Railway — Upload and publishing jobs — EU / United States
• Stripe — Subscription payments and invoicing — EU / United States
• Meta Platforms — Creating ads at the user’s request — EU / United States

Transfers outside the European Union are covered by the European Commission’s standard contractual clauses.

Cookies

Scheerz only uses cookies needed to run the service: login session, language, Facebook connection security. The light/dark theme is remembered in your browser. No advertising or analytics cookies are set, which is why no consent banner is shown.

Your rights

You can access, correct, delete or export your data, and restrict or object to its processing, by writing to helloscheerz@gmail.com. You can delete your account at any time from “Meta accounts”, and disconnect Facebook from Scheerz or from Facebook’s settings. You can also lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).

Security

Facebook tokens are encrypted (AES-256), each customer’s data is isolated, and all traffic is encrypted (HTTPS).