f0cus is a performance-marketing analytics dashboard operated by OPERATING_COMPANY (the “controller”). It is an internal tool for a media-buying team: it joins an advertising tracker (Redtrack), call logs, and Meta advertising data so the team can see, per campaign and per hour, what was spent and what came back. This policy describes exactly what the f0cus platform and its Meta app, f0cus.ai, access and how that data is handled. There is no marketing language here because there is nothing to sell you: f0cus is invite-only and used by the team that operates it.

1. Who uses f0cus and how you sign in

Accounts exist only by invitation. You sign in with Google; we store your name, email address and the role assigned to you, plus an audit trail of administrative actions (who changed what, when, from which IP address). Display preferences (theme, date range, watchlist) are stored against your account so they follow you between devices.

2. What the Meta app accesses

When you connect a Facebook identity in Settings → Connections, you grant the app ads_read and pages_show_list. Under those permissions f0cus reads, through the Meta Marketing API and only for the ad accounts you explicitly toggle on:

• ad account metadata — account id, name, currency, timezone, status, and (when permitted) the owning Business Manager’s name;
• the campaign / ad set / ad hierarchy — ids, names, statuses, budgets, update times;
• hourly, ad-level performance metrics — spend, impressions, clicks;
• the list of Pages you manage — id and name only, for reference.

What the app does not access or do: it never posts, messages, comments, or publishes anything; it does not read Page content, posts, audiences, leads, friends, profile details, or anything outside the items above; it requests no write permission (ads_management is not requested). It reads numbers about advertising performance, and that is all.

3. How access tokens are protected

The access token Meta issues when you connect is encrypted at rest with AES-256-GCM under a key that lives only in the server’s environment. Tokens are never written to logs, never included in the audit trail, never shown in the interface, and never shared with any third party. They are used solely to call the Meta API on your behalf for the ad accounts you enabled. An optional system-user token you paste yourself is protected the same way.

4. Retention

• Performance data (hourly spend, impressions, clicks, and the campaign/ad names they belong to) is retained for as long as the controller runs the dashboard: it is the advertiser’s own business record of ad spend and is used for historical analytics.
• Access tokens are deleted immediately when you disconnect the profile (see section 6) or when Meta sends a data-deletion request for your identity.
• Account data (name, email, role, preferences) is kept while your account exists and removed on request (section 6).
• Audit entries are append-only and kept for accountability; they reference identifiers, never token material.

5. Sharing

Nothing collected through the Meta app is sold, rented, or shared with third parties. Data is processed on infrastructure the controller operates (a virtual server and a managed database hosted by DigitalOcean, LLC), reachable only over HTTPS. Meta itself receives the API calls described above, under its own terms.

6. Your choices — disconnecting and deletion

In Settings → Connections, DISCONNECT revokes the app’s access at Meta (best effort) and deletes both stored tokens immediately; the profile’s tracked ad accounts stop syncing. Removing the app from your Facebook settings triggers the same deletion automatically through Meta’s data-deletion callback. For full account and data erasure, or any question about this policy, email CONTACT_EMAIL; we complete erasure requests within 30 days. Details are on the data deletion page.

7. Changes and contact

We update this page when what the product accesses or retains changes; the date at the top is the date of the last change. This policy is governed by the laws applicable to the controller’s place of establishment. Contact: CONTACT_EMAIL.