Privacy Policy for MOK Ads API

MOK Ads API, shown as 广告API in the Meta developer dashboard, is an internal business application. It is used only by authorized MOK personnel to manage Meta assets owned by, or expressly shared with, the relevant business portfolio.

• Business asset identifiers and names, including business portfolios, Facebook Pages, Instagram accounts, WhatsApp business assets, and ad accounts that the application is authorized to access.
• Advertising objects and configuration, including campaign, ad set, ad, creative, media, targeting, budget, status, and related identifiers.
• Advertising performance data, including delivery, spend, impressions, reach, clicks, engagement, messaging, lead, purchase, and attribution metrics returned by Meta.
• Page post and media information needed to create, publish, inspect, or troubleshoot content requested by an authorized operator.
• System-user access tokens and authorization metadata needed for server-to-server Meta API requests.
• Technical and audit logs, including request time, execution step, status, Meta error code, and trace identifier. We do not intentionally store passwords in these logs.

We use information only for legitimate business operations requested by the authorized user.

• To discover and synchronize authorized Pages, advertising accounts, campaigns, ad sets, ads, creatives, audiences, and performance reports.
• To create, update, pause, activate, review, publish, analyze, or troubleshoot advertising and Page content when requested by an authorized operator.
• To associate internal offline order records with a Meta ad identifier for internal advertising-effect reporting. Offline order records are business records supplied by MOK and are not obtained from Meta.
• To maintain account security, enforce role-based access, prevent unauthorized operations, and diagnose technical issues.
• To comply with Meta Platform Terms, applicable laws, and audit requirements.

Meta platform data is obtained through authorized Graph API and Marketing API requests. MOK may combine advertising identifiers and performance data with internal workflow records held in Feishu/Lark, such as an offline order's voluntarily maintained ad identifier, solely to produce internal business reports. We do not use this combination to build or sell consumer profiles.

We do not sell Meta platform data or personal data. We do not share it with unrelated third parties for their own advertising or marketing. Data may be processed by infrastructure and workflow providers, including hosting, database, security, and Feishu/Lark services, only where necessary to operate MOK's internal workflows and subject to appropriate access and confidentiality controls. We may disclose information when required by law or to protect the security and integrity of the service.

Data is stored in MOK-controlled application and database environments and in approved workflow providers used for internal operations. Access tokens are used only by the server-side application and are not delivered to the public website or browser client.

• Administrative access requires authenticated accounts and is restricted by role and business need.
• Server, database, and production configuration access is limited to authorized technical personnel.
• Operational actions and failures are logged for security, reliability, and audit purposes.
• Tokens are retained until they are replaced, revoked, no longer required, or included in a verified deletion request.
• Advertising objects, reports, and operational records are retained while the relevant business workflow remains active and for any additional period required for security, accounting, legal, or platform-compliance obligations.
• Data that is no longer required is deleted or anonymized in accordance with the deletion process below.

Authorized users may revoke app access from their Facebook or Meta business settings. Revocation stops future authorized API access but may not automatically delete data already stored for legitimate business, security, or legal purposes. Users may request deletion of data associated with MOK Ads API by following our data deletion instructions.

Data deletion page: /facebook/data-deletion

We may update this policy when the application, Meta requirements, or applicable law changes. The effective date shown at the top identifies the latest published version.

For privacy questions or requests, contact 亦奇科技（广州）有限公司 at luckinhome@outlook.com.