Privacy Policy

About SebOS

SebOS is a private, internal tool operated by Sebastian Sroka. It uses the Meta Marketing API to report on and manage advertising accounts that the operator runs for clients. It is not a consumer app. It offers no public sign-up, no Facebook Login, and no user accounts, and members of the public do not use it.

Contact: Sebastian Sroka, sebastian.r.sroka@gmail.com

What data SebOS processes

SebOS accesses only ad accounts it has been explicitly authorised to use through a Meta Business System User. It retrieves:

• ad account details: ID, name, status, currency and time zone;
• campaign, ad set, ad and creative settings: IDs, names, objectives, statuses, budgets, schedules, targeting criteria and optimisation settings;
• advertising images, videos and copy supplied by the operator for use in authorised campaigns;
• aggregated performance metrics (Insights): spend, impressions, reach, frequency, clicks, CPM, CTR, CPC, action and conversion counts, and Instagram profile visits and follows where available.

SebOS uses aggregate performance data, including placement breakdowns where needed. It does not retrieve lead form submissions or individual viewer identities. Campaign names, advertising copy and supplied media may contain personal information provided by the operator or account owner.

Access tokens are stored in the macOS Keychain on the operator's computer. They are not written to project files or reports.

Why the data is used

The data is used only to:

• produce internal performance reports, briefings and CSV exports for the ad account owner;
• compare API data with exports from Meta Ads Manager;
• create or copy campaigns, configure audiences, upload advertising media, create ads and make status or budget changes when authorised by the operator.

SebOS does not sell data, use it for its own advertising, build profiles of individuals, or send messages to anyone.

Where the data is stored

Synced data is kept in a local SQLite database and in compressed raw API responses. Reports, decisions and exports are kept in the operator's working folders for each client's advertising. These folders are in the operator's Documents folder, which may sync to Apple iCloud Drive. Data held there is therefore subject to Apple's iCloud storage and security.

Sharing

• Meta Platforms: SebOS sends API requests to Meta to read data and, when the operator instructs it to, to upload media and create or update advertising objects. Meta's own terms and privacy policy govern how Meta processes that data.
• Storage providers: synced files may be stored by Apple iCloud, as described above.
• The ad account owner: reports may be shared with the client whose ad account they describe.

The operator may also use selected data with service providers supporting authorised analysis and campaign preparation, including AI assistance. Credentials are not included in reports. Data is not sold or shared for unrelated third-party advertising.

Retention

Data is kept only as long as needed to report on and manage the client's advertising. The standard synchronisation workflow prunes its raw API snapshots according to the configured retention period. Other records, campaign assets and exports are retained while needed for the authorised work, audit or applicable legal obligations, and are reviewed or deleted when no longer needed or following a valid request. Backup or synchronised copies may remain until the storage provider completes its deletion cycle.

This public policy website

This page is hosted on Cloudflare Pages. Cloudflare may process connection and request metadata, such as IP addresses, to deliver and secure it. The page includes no analytics, advertising scripts, login or contact form.

Your rights

If you believe SebOS processes personal data about you, you may ask for access, correction, deletion or restriction, or object to the processing, by emailing sebastian.r.sroka@gmail.com. Where the GDPR applies, you may also complain to your local data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO).