oxyadds

Privacy policy

Last updated 24 Oct 2026. oxyadds is operated by Andrii Horievyi. Questions about this policy or your data: [email protected].

What we collect

  • Account data: your Google user ID, email address, name and profile picture, received when you sign in with Google.
  • Google Ads authorisation: a refresh token with the Google Ads read scope, stored encrypted. It lets the service fetch reports on your behalf.
  • Account list: the IDs, names, currency and time zone of the Google Ads accounts your Google user can access.
  • Meta authorisation (if you connect Meta): your app-scoped Facebook user ID and name, the permissions you granted, and an access token that can read ads, Pages and Instagram insights, stored encrypted. It expires after 60 days unless you reconnect.
  • Meta account list: the IDs, names, currency, time zone and owning business of the Meta ad accounts you shared, and the IDs, usernames, follower counts and linked Facebook Pages of your Instagram professional accounts.
  • Usage log: for each tool call, the tool name, the account ID, the time, the duration and whether it failed. Query results are not stored.
  • Billing: your Stripe customer and subscription identifiers and status. Card details are held by Stripe, never by us.
  • Connections: the OAuth clients (such as Claude) you authorised and their refresh tokens, hashed.

What we do not collect

We do not store the Google Ads, Meta Ads or Instagram reports we fetch; they are passed to the AI assistant that asked and discarded. We do not see your conversations with Claude or any other AI app. We do not sell data, use it for advertising or use it to train AI models.

Google API Services User Data Policy

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the service you asked for, is never transferred to third parties except as needed to provide the service (the AI assistant you connected and our hosting providers), and is never used for advertising.

Meta Platform data

We access Meta Ads and Instagram data through Meta's APIs only with the permissions you grant (ads_read, pages_show_list, pages_read_engagement, instagram_basic, instagram_manage_insights) and only to answer the questions you ask your AI assistant. We comply with the Meta Platform Terms. We never create, change or pause ads, posts or settings, and we do not sell or share Meta Platform data except with the AI assistant you connected.

Third parties

  • Google: sign-in and the Google Ads API.
  • Meta: the Marketing API and the Instagram API, if you connect Meta.
  • Your AI assistant (Anthropic Claude, OpenAI ChatGPT or Google Gemini): receives the report data when you ask it a question. Its handling of that data is governed by your plan's terms with that provider.
  • Stripe: payments.
  • Hosting provider: the servers and database that run the service.

Retention and deletion

Disconnecting Google Ads or Meta on the dashboard deletes that token and account list immediately. Removing oxyadds in your Facebook settings (Settings and privacy, Business integrations) or sending a data deletion request through Facebook deletes the Meta token and account lists automatically; you get a confirmation code and a status link. Email [email protected] to delete your whole account; we do so within 30 days. Usage logs are kept for 12 months.

Security

Tokens are encrypted at rest (AES-256-GCM), transport is TLS, and access tokens issued to Claude expire within an hour. Report an issue to [email protected].

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data, and to object to processing. Email [email protected].