Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains what data Adcora ("Adcora", "we", "us") collects, why, how it is used and stored, and how you can access or delete it. It applies to the website getadcora.com and the Adcora service.

1. Who we are

Adcora is operated by ФІЗИЧНА ОСОБА-ПІДПРИЄМЕЦЬ АНГЕЛОВ ОЛЕКСАНДР СЕРГІЙОВИЧ (Individual Entrepreneur Anhelov Oleksandr Serhiiovych), registered in the Unified State Register of Ukraine, record no. 2010350000000384171 of 25.08.2023.

Registered address: Україна, 84130, Донецька обл., Краматорський р-н, місто Святогірськ, вулиця Івана Мазепи, будинок 58, квартира 69.
Contact for privacy matters: privacy@getadcora.com, phone +380 95 439 89 45.

We are the data controller for the account data described below.

2. Data we collect

Account data. When you sign up or sign in with Facebook Login for Business: your name, email address and Facebook user ID, and the list of businesses and ad accounts you choose to share with Adcora.

Advertising data from Meta. With your permission (ads_read, and business_management where needed to list your ad accounts), we read from the ad accounts you selected: account, campaign, ad set and ad names and settings (status, objective, budget, schedule), and performance metrics (spend, impressions, reach, frequency, clicks, CTR, CPM, conversions, cost per result and similar). Access is read-only: Adcora does not create, edit, pause or delete anything in your ad accounts.

Settings you enter. KPI targets, budgets, report schedules, client names and Telegram chat IDs you connect for delivery.

Technical data. Log data (IP address, browser type, time of requests) kept for security and debugging.

We do not collect data about the people who see your ads, we do not access your Facebook friends, posts, messages or Pages, and we do not use cookies for advertising or tracking.

3. How we use the data

• to provide the service: calculate metrics, compare them with your KPI targets, detect anomalies and prepare daily briefs and weekly reports;
• to generate plain-language explanations of those metrics with an AI model (see section 5);
• to deliver reports to you and to the recipients you choose (link, PDF, email, Telegram);
• to keep the service secure, prevent abuse and fix errors;
• to communicate with you about your account and the service.

We do not sell your data, do not share it with advertisers or data brokers, and do not use data received from Meta to build profiles, for advertising, or for any purpose other than providing Adcora to you. We do not use your data to train AI models.

4. Legal basis (for users in the EU / EEA)

We process account and advertising data to perform our contract with you (Art. 6(1)(b) GDPR), technical and security data on the basis of our legitimate interest in running a secure service (Art. 6(1)(f) GDPR), and anything else only with your consent, which you can withdraw at any time.

5. Service providers

We use a small number of providers that process data on our behalf, only to run Adcora:

• Meta Platforms — source of advertising data via the Marketing API, at your direction;
• Cloudflare — website hosting, security and email forwarding;
• Supabase — database and authentication (EU region);
• Vercel — application hosting;
• Anthropic — AI model (Claude) that receives aggregated metrics for an account to write explanations; under Anthropic's commercial terms, API data is not used to train its models;
• Telegram — only if you choose Telegram delivery;
• a payment provider (merchant of record) — once paid plans launch; we do not store card details.

Some providers process data outside Ukraine and the EEA. Where required, transfers rely on standard contractual clauses or equivalent safeguards.

6. Storage and security

Access tokens are stored encrypted and are used only by our servers to read data from the ad accounts you selected. Data is transmitted over HTTPS. Access to production data is limited to the operator of Adcora.

7. Retention

• Advertising data and reports are kept while your account is active, so that we can compare periods.
• When you disconnect an ad account, its data is deleted within 30 days.
• When you delete your Adcora account or ask us to delete your data, all your data, including access tokens, is deleted within 30 days, except where we must keep billing records by law.
• Technical logs are kept for up to 90 days.

8. How to delete your data

You can request deletion at any time, in any of these ways:

1. In Adcora: Settings → Account → Delete account. This deletes your account, reports and stored advertising data and revokes our access tokens.
2. By email: write to privacy@getadcora.com with the subject "Data deletion request" from the email address of your Adcora account, or include your Facebook user ID. We confirm the request within 3 business days and complete deletion within 30 days.
3. From Facebook: open Facebook → Settings & privacy → Settings → Business integrations (or Apps and websites), find Adcora and click Remove. This revokes Adcora's access immediately; when Meta notifies us of the removal, we delete the data we received through your account within 30 days.

Step-by-step instructions are also on the Data Deletion page.

9. Your rights

You may request access to your data, correction, deletion, restriction of processing, data portability, and object to processing. Write to privacy@getadcora.com. Users in the EU / EEA may also lodge a complaint with their local data protection authority; users in Ukraine — with the Ukrainian Parliament Commissioner for Human Rights.

10. Children

Adcora is a business tool and is not intended for anyone under 18.

11. Changes

We will post any changes on this page and update the date above. If changes are significant, we will notify account holders by email.