Privacy Policy
Last updated: November 9, 2026
This policy explains what KRZ Ads Manager ("the app", available at ads.krzusa.com) collects when a business connects its Meta advertising accounts, why, for how long, and how to have it deleted.
Who we are
- KRZ Business Accelerator Corp, 1757 Satinwood Street, Bunnell, FL 32110, USA (Florida corporation P26000020688)
- KRZ Acelerador Empresarial, Rua Martinho Freire de Andrade, 25, Sala 604, Centro, Ubá, MG, 36500-062, Brazil (CNPJ 53.809.470/0001-67)
Contact for any privacy matter: daniel@krzusa.com.
What we collect
- Your Facebook app-scoped user ID, name and email address, received when you log in with Facebook.
- An access token issued by Meta, which lets the app act on the ad accounts you granted. It is stored encrypted (AES-256-GCM) and is never shown, logged or shared.
- For each ad account you grant: account ID, name, currency, status and the owning Business portfolio.
- Advertising metrics for those accounts: campaigns, ad sets, spend, impressions, clicks and results.
- A record of changes you make through the app (for example, pausing a campaign), and technical logs of API calls (endpoint, time and status, never content or tokens).
We do not collect data about the people who see or respond to your ads, and we do not use Meta data for any purpose other than the one below.
Why we use it
Only to provide the campaign management service the advertiser contracted from KRZ: showing performance, and pausing, resuming or adjusting budgets when the advertiser asks. We do not sell data, do not use it for advertising profiles and do not combine it with other sources.
Who we share it with
No one. Data is kept on our own server and is not transferred to third parties. Meta receives only the API calls needed to run the service.
How long we keep it
- Access token and account data: while your connection is active. They are deleted when you disconnect, when you remove the app in your Facebook settings, or when you request deletion.
- Daily metrics: up to 13 months, then deleted.
- API call logs: up to 90 days.
How to delete your data
- In the app: Dashboard, then "Disconnect and delete my data".
- On Facebook: Settings and privacy, Apps and websites, remove KRZ Ads Manager. Meta notifies us and we delete your data automatically; you get a confirmation code you can check at /data-deletion-status.
- By email to daniel@krzusa.com. We answer within 30 days.
Details at /data-deletion.
Security
Traffic is encrypted with TLS. Tokens are encrypted at rest with a key kept outside the code and the database. Server-to-server calls to Meta are signed with appsecret_proof.
Your rights
You may ask to access, correct or delete your data at any time by writing to the contact above. Residents of Brazil have the rights of the LGPD (Law 13.709/2018); residents of the United States, the rights granted by their state law.
Changes
We will post any change on this page with a new date.