Privacy policy

Who we are

Goodbye Media Buyer (“GMB”, “we”) provides software that helps advertisers upload, monitor, and automate their Meta ads. This policy covers the marketing site at goodbyemediabuyer.com and the app at app.goodbyemediabuyer.com. For privacy questions, contact us at hello@goodbyemediabuyer.com.

What we collect

• Account data. Your name, email address, and workspace membership, managed through our sign-in provider, Clerk.
• Meta connection data. When you connect a Meta ad account through Facebook’s official login, we receive an access token plus the ad-account data needed to show your dashboard (campaign names, spend, results). Access tokens are encrypted at rest with AES-256-GCM and are only decrypted server-side to call the Meta API.
• Billing data. Payments are processed by Stripe. We never see or store your card number.
• Measurement data. On the marketing site we use the Meta Pixel to measure our own advertising, and only after you accept the consent banner. If you decline, the pixel never loads.

What we do with it

We use your data to run the product: showing your ad performance, executing the automation rules you configure, and sending the alerts you enable. We do not sell your data, and we do not use one customer’s ad data to benefit another.

Who processes it for us

We rely on a short list of processors: Clerk (authentication), Supabase (database hosting), Stripe (payments), Vercel (hosting), and Meta (the ads platform itself). Each receives only what it needs to do its job.

Your rights

If you are in the EU/EEA or UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. Email us and we’ll handle it. You can disconnect a Meta ad account at any time from the app, or revoke GMB’s access from your Facebook settings — and you can request full deletion of your Meta-linked data at app.goodbyemediabuyer.com/data-deletion.

Retention

We keep account data for as long as your account exists. If you delete your account, we delete your personal data and stored Meta tokens within 30 days, except where the law requires us to keep billing records longer.

Changes

If we change this policy in a way that matters, we’ll say so on this page and update the date at the top.