Privacy Policy

1. Who we are

alpacho.io provides marketing workflow tools, including reporting, creative review, voice/content utilities, extension-connected features and internal administration tools. Contact: alpachoads@gmail.com.

2. Information we process

We process only the information needed to provide, secure, maintain and improve the services you use. The exact data depends on which product or integration you connect.

• Account information, such as your Google account email, name and basic profile data used for sign-in.
• Authentication and session information required to keep you signed in and protect account access.
• Product settings, templates, saved projects, report configurations, limits and admin settings.
• Usage and diagnostic information, such as feature activity, timestamps, errors and operational logs.
• Extension-related data needed for AlpaCHo Ads features, including authorized session state and user-selected extension settings.
• AlpaCHo Voice data needed to provide voice/content features, storage limits and user-specific rules.
• Advertising reporting data from connected Meta Ads accounts, when you choose to connect Meta Ads.
• Google Sheets connection information, spreadsheet IDs, selected sheet names and report export settings, when you choose to connect Google Sheets.
• Telegram connection settings, such as bot/chat configuration, when you choose to send reports to Telegram.

3. Google user data

When you sign in with Google, we use your Google account information to authenticate you, create a secure session, identify your saved settings and provide access to authorized features.

• We do not sell Google user data.
• We do not use Google user data for advertising.
• We use Google user data only for sign-in, session management, access control, user identification and operation of alpacho.io services.
• If you connect Google Sheets, we use the granted access only to list, select, read or write the spreadsheets needed for your report workflow.
• We do not share Google user data except where necessary for hosting, security, service operation, legal compliance or actions you request.

4. Meta Ads and AlpaCHo Report data

AlpaCHo Report lets authorized users connect Meta Ads and build performance or creative reports from advertising accounts they are allowed to access. Meta data is used only for reporting and user-selected workflow actions.

• We may process connected Facebook user ID, Meta access token, ad account IDs, campaign/ad set/ad IDs, names, statuses, spend, reach, impressions, clicks, actions, cost metrics and creative preview data.
• We store the Meta connection token on the server so reports can be generated without reconnecting Meta every time.
• We use Meta data to display account lists, load campaigns, calculate metrics, build report templates, generate text reports and show creative previews.
• AlpaCHo Report does not create, edit, publish, pause or manage ads.
• We do not sell Meta data or use it for third-party advertising.

5. Meta Platform Data responsibilities

Data received from Meta Platform is used only for the user-facing reporting features requested by the connected user. We do not use Meta Platform Data for unrelated products, profiling, surveillance, eligibility decisions, resale, data brokerage, or third-party advertising.

• We do not ask users to share Meta passwords or bypass Meta authentication.
• We do not transfer Meta Platform Data to unrelated third parties.
• We remove stored Meta access tokens when a user disconnects Meta Ads or when a valid Meta data deletion request is processed.
• We retain saved report templates separately from Meta connection tokens so users can disconnect Meta without losing their own report configuration.
• We may delete or restrict stored Meta-related data when it is no longer needed, when access is revoked, or when required by platform rules or law.

6. How we use information

We use information to provide the requested services, keep users signed in, save settings, generate reports, export data to connected destinations, troubleshoot errors, prevent abuse, enforce limits, maintain security and improve product reliability.

7. Sharing and service providers

We do not sell personal information. We may share limited data only when required to operate the services or when you choose to connect a third-party destination.

• Hosting, infrastructure and security providers may process data needed to run the website and APIs.
• Google services may be used for sign-in and, if connected by you, Google Sheets workflows.
• Meta Platform is used when you connect Meta Ads and request advertising reporting data.
• Telegram is used when you configure report delivery to Telegram.
• We may disclose information if required by law or to protect the rights, safety and security of users or the service.

8. Data storage and retention

Service data may be stored on our server in protected storage directories and databases. We keep data only for as long as needed to provide the services, maintain account settings, troubleshoot problems, comply with legal obligations and protect the service from abuse.

• Saved report templates and project settings may remain until you delete them or request deletion.
• Meta access tokens are removed when you disconnect Meta Ads or when a valid Meta deletion request is processed.
• Operational logs may be retained for security, debugging and abuse prevention for a limited period.

9. Your choices and deletion

You control which integrations you connect. You may stop using the services, log out, disconnect integrations or request deletion of stored account data.

• Disconnect Meta Ads in AlpaCHo Report to remove the stored Meta connection token while keeping saved report templates.
• Disconnect Google Sheets or Telegram to stop using those export/delivery destinations.
• If Meta sends a valid user data deletion request, alpacho.io verifies the signed request and deletes the stored Meta connection associated with that Facebook user ID.
• To request deletion of saved AlpaCHo Report settings, AlpaCHo Voice data, AlpaCHo Ads data or other account data, contact alpachoads@gmail.com.

10. Security

We use reasonable technical and organizational measures to protect account data, tokens and service settings. No internet service can guarantee absolute security, but we work to reduce unauthorized access, accidental loss and misuse.

11. International processing

Data may be processed in countries where our hosting providers, infrastructure providers or connected platforms operate. By using the services, you understand that data may be transferred and processed outside your country of residence where permitted by applicable law.

12. Changes to this policy

We may update this Privacy Policy as the services change. The updated version will be posted on this page with a revised “Last updated” date.

13. Contact

If you have privacy-related questions or data deletion requests, contact us at alpachoads@gmail.com.