Privacy Policy

Kobaran Teguh Sdn Bhd ("we", "our", or "us") operates AdFlow (https://adflowapps.com), a B2B SaaS platform for managing Facebook advertising accounts and automations. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

By using AdFlow, you agree to the collection and use of information in accordance with this policy.

We collect the following categories of information:

• Account Information: Your name and email address when you register for an AdFlow account.
• Facebook / Meta Data: When you connect your Facebook account via Meta OAuth, we collect your Facebook User ID, display name, and a long-lived access token issued by Meta. This token is used exclusively to manage your ad accounts on your behalf.
• Ad Account Data: Meta Ad Account IDs, names, currency, and account status — fetched through the Meta Marketing API for the purpose of ad management automation.
• Usage Data: Log data including IP addresses, browser type, pages visited, and timestamps for security and analytics purposes.

• To provide and operate the AdFlow platform.
• To authenticate your identity and authorise access to Meta advertising accounts.
• To automate ad management tasks on your connected Facebook Ad Accounts using your access token.
• To send transactional emails (account verification, password reset).
• To improve and maintain the security of the platform.

We do not sell, trade, or rent your personal information to third parties.

AdFlow integrates with the Meta Marketing API. Any data obtained from Meta (including access tokens and ad account information) is used solely for the purpose of providing the AdFlow service to you. We comply with the Meta Platform Policy and do not use Meta data for any purpose beyond what is disclosed in this policy.

Access tokens are stored securely and are never shared with third parties outside of Meta API calls made on your behalf.

We retain your data for as long as your account is active. If you disconnect your Meta account or delete your AdFlow account, your Meta access token and related ad account data will be permanently removed from our database within 30 days.

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and access controls to protect your data. However, no method of transmission over the internet is 100% secure.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (see our Data Deletion page).
• Disconnect your Meta account at any time from the Settings page.

If you have any questions about this Privacy Policy, please contact us at: [email protected]