Privacy policy
1. What data is collected
The service works with two distinct sets of data, and it matters that they are not confused.
- Website visitor data. If you submit the enquiry form: your name, the contact you provide (Telegram, WhatsApp or e-mail), whatever you chose to write about your business or agency in the comment field, and the address of the page the enquiry was sent from.
- Service client data. After a contract is signed: ad account statistics — spend, impressions, clicks, conversions and cost per result at campaign, ad set and creative level. Plus the technical access tokens you granted through Meta Business Manager, and the identifier of the Telegram chat that receives notifications.
The service does not collect personal data about your customers, does not export custom audiences, and does not touch message contents or contact databases.
2. Why this data is needed
- Website enquiries — solely to reply to you and discuss the task. Contacts are never added to any mailing list.
- Ad statistics — to calculate metrics, detect anomalies, prepare recommendations and generate reports on your own campaigns.
- Access tokens — to retrieve statistics and apply the changes you have approved.
3. Where the data is stored
A separate instance of the system is deployed for every client: its own database, its own server process and its own Telegram bot. Data from different clients is never pooled into a shared store. The server infrastructure is hosted with providers inside the European Union.
Access tokens are stored server-side; they are never sent to the browser, published or shown in the interface. There is no public access to the database.
4. Who the data is shared with
Data is not sold and is not passed to third parties for their own purposes. Only the technical providers the service cannot run without are involved:
- Meta Platforms — source of the advertising statistics and recipient of the changes you approve;
- Telegram — delivery channel for notifications and reports;
- hosting providers — hosting of the server and the database;
- language model provider — processing of anonymised numeric metrics to prepare recommendations.
Only aggregated campaign metrics (spend, cost per result, trends) are sent to the language model. This data is not used to train models.
5. The live dashboard
The dashboard opens on a long random link with no login. The link is never posted publicly and is blocked from search engine indexing. It can be reissued at your request, after which the old one stops working. Do not publish this link anywhere public.
6. Retention periods
- Website enquiries — up to 12 months from the enquiry, if no engagement follows.
- Ad statistics — for the term of the contract plus 30 days after it ends, then deleted together with the system instance.
- Access tokens — deleted immediately when access is revoked or the engagement ends.
7. Your rights
You may request information about what data of yours is processed, demand its correction or deletion, withdraw consent to processing, and request an export of the accumulated statistics in a machine-readable format. An e-mail to the contact address above is enough — you will get a reply within 30 days.
You can revoke access to your ad account yourself at any moment: Meta Business Manager settings → partners → remove. You do not need to contact us to do it; the system simply stops receiving data.
8. Cookies and analytics
The website uses no advertising or analytics cookies and installs no tracking pixels. The only external resources the page loads are web fonts. The enquiry form sends only what you typed into it.
9. Changes to this policy
The current version is always available at ilarium.com/privacy. Material changes affecting existing clients are communicated separately.
10. Contact
For any question about data processing: ilariumplanet@gmail.com, Telegram @Ilarium.