Privacy Policy

The Service is operated by Товарищество с ограниченной ответственностью "KAZSCALE" (БИН 260140009792), registered at Казахстан, город Астана, район Есиль, Проспект Улы Дала, дом 39, кв. 109, почтовый индекс 010000. For any privacy-related question you can contact us at ghost.targetolog@gmail.com.

By using Ghost Targetolog you agree to the practices described in this document. If you do not agree, please do not use the Service.

We collect only the data required to operate the Service:

• Telegram account data. Your Telegram user ID, username, first and last name as provided by Telegram, your chosen language, and the messages and commands you send to our bot.
• Meta advertising account data. With your explicit authorization, we access your Facebook and Instagram ad accounts through the Meta Marketing API: ad account IDs and names, Pages and Instagram business accounts you connect, campaigns, ad sets, ads, creatives, audiences, budgets and schedules.
• Campaign metrics. Performance statistics such as impressions, reach, clicks, CTR, spend, CPC, CPM, conversions and other aggregated insights returned by Meta for the ad accounts you connect.
• Access tokens. OAuth access tokens issued by Meta when you connect your ad account. Tokens are stored in encrypted form and are used solely to call the Meta Marketing API on your behalf.
• Subscription and billing information. Your subscription status, plan, billing period, payment date and transaction identifiers. Payments are processed by third-party payment providers — we do not collect or store full card numbers or CVV codes.
• Technical data. Service logs, error reports, timestamps and request metadata used for security, debugging and abuse prevention.

We do not knowingly collect data from children, and we do not collect special categories of personal data (such as health, biometric or political data).

• To authenticate you and link your Telegram account to your connected Meta ad accounts.
• To create, launch, pause, edit and optimize advertising campaigns in your Meta ad accounts at your instruction.
• To retrieve and display campaign performance metrics and generate AI-assisted recommendations and reports.
• To manage your subscription, process payments and send service notifications.
• To provide customer support and respond to your requests.
• To maintain the security, reliability and integrity of the Service, and to comply with applicable law.

We do not sell your personal data. We do not use your Meta advertising data for advertising of our own, for building user profiles unrelated to the Service, or for training generalized models sold to third parties.

Ghost Targetolog uses the Meta Marketing API to act on your behalf within your own Meta ad accounts. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements.

• We request only the permissions required for the features you use, and we ask for them at the moment they are needed.
• Platform data is used only to provide and improve the features you requested inside the Service.
• We do not transfer Platform data to data brokers, ad networks or monetization services.
• You can revoke our access at any time from your Meta Business settings or from your Facebook account’s “Apps and Websites” settings. Revoking access stops all further API calls.

We share data only where it is necessary to run the Service, and only with the following categories of recipients:

• Meta Platforms, Inc. — campaign instructions and creatives you submit are sent to Meta in order to run your ads.
• Telegram Messenger Inc. — all bot communication is delivered through Telegram and is subject to Telegram’s own privacy policy.
• Hosting and infrastructure providers — used to run and store the Service under contractual confidentiality obligations.
• Payment providers — used to process subscription payments.
• Competent authorities — where disclosure is required by applicable law or to protect our legal rights.

Because these providers operate internationally, your data may be processed outside the Republic of Kazakhstan. We take reasonable steps to ensure an appropriate level of protection for such transfers.

Data is stored on access-controlled servers. Access tokens and other credentials are encrypted at rest, and data in transit is protected by TLS. Access to production data is limited to personnel who need it to operate the Service.

• Account and campaign data is retained for as long as your account is active.
• After you delete your account or request deletion, personal data is erased within 30 days, except where longer retention is required by law (for example, accounting records for payment transactions).
• Meta access tokens are deleted immediately when you disconnect an ad account or revoke access.
• Aggregated, anonymized statistics that cannot identify you may be retained for product analytics.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we work continuously to protect your data and will notify you of a breach affecting your personal data where required by law.

You may at any time:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data and your account.
• Withdraw your consent and disconnect your Meta ad accounts.
• Object to or restrict certain processing, and request a copy of your data in a portable format.
• Cancel your subscription at any time.

To exercise any of these rights, message our Telegram bot @sssalesbot or email ghost.targetolog@gmail.com. We respond to requests within 30 days.

Step-by-step deletion instructions — including the Telegram command and the email template — are published on a dedicated page:

User Data Deletion Instructions→

We may update this Privacy Policy from time to time. The current version is always available on this page with an updated “Last updated” date. Material changes will be announced through the Telegram bot before they take effect. Continued use of the Service after an update constitutes acceptance of the revised policy.