Privacy Policy

Last updated: July 2, 2026

BestInSlot ("BestInSlot", "we", "us", or "our") builds and publishes advertising creative on your behalf. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how you can access or delete it. It applies to our website, our web application, and any data we access through third-party platforms such as the Meta Marketing API.

If you have questions about this policy or your data, contact us at hello@bestinslot.ad.

1. Information we collect

Information you give us

Waitlist details — your email address and, optionally, your website.
Account details — your email address and authentication identifiers when you create an account.
Business inputs — website URLs you provide so we can learn about your business. We fetch and process the content of those pages to build a business and audience profile for you.

Information we generate for you

Ad concepts, generated images, and ad copy, plus the saved sessions ("flows") that hold them.

Information from Meta (when you connect your account)

An encrypted, long-lived Meta access token, and your Meta user ID and name.
The ad accounts, campaigns, ad sets, Facebook Pages, and connected Instagram accounts you view through the product.
The ads and ad creatives we create in your selected ad set at your instruction.

Information collected automatically

On our marketing website we use the Meta Pixel and basic analytics (via cookies) to measure interest. Advertising IDs are public; the associated server-side token is kept private.

2. How we use your information

To provide the service — generate ad concepts, images, and copy, and, only when you explicitly ask, create an ad in the Meta ad set you select.
To operate, secure, debug, and improve the product.
To communicate with you about the waitlist, your account, and product updates.

We act as a creative uploader: we create a single ad at your request using the creative you generated. We do not change your budgets, targeting, schedule, or bidding, and we do not create ads without your action.

3. Meta Platform data

When you connect Meta, we request only the permissions needed to do this: ads_management, ads_read, business_management, pages_show_list, and pages_read_engagement.

We use Meta Platform data solely to let you browse your own ad accounts, campaigns, and ad sets, and to create the ad you generated in the ad set you choose.

We do not sell it, use it for advertising to you, or share it with third parties for their own purposes. Your Meta access token is encrypted at rest and used only to make requests you initiate.

You can disconnect Meta at any time from within the product. Disconnecting revokes the app's access and deletes the stored token. See Data Deletion for details.

4. How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf to run the product, each limited to its function:

Supabase — authentication, database, and encrypted file storage.
OpenAI — image generation.
OpenRouter — text and copy generation.
Firecrawl — fetching the website content you ask us to learn from.
Meta — reading your ad objects and creating ads at your request.
Our hosting provider — serving the website and application.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and service.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the service. We delete it when you ask us to, when you disconnect a connected account, or when it is no longer needed — subject to any legal retention obligations.

6. Security

We protect data in transit with encryption, encrypt sensitive credentials (including your Meta access token) at rest, and restrict access to the systems that hold your data. No method of transmission or storage is completely secure, but we work to protect your information.

7. Your rights and choices

Access, correct, or delete your personal information.
Disconnect a connected Meta account at any time.
Unsubscribe from waitlist and marketing emails using the link in each message.

To exercise any of these, see Data Deletion or email hello@bestinslot.ad.

8. Data deletion

You can request deletion of your data at any time. Full instructions — including in-app disconnection, account deletion, and email requests — are on our Data Deletion page.

9. Children

BestInSlot is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Continued use of the service after an update means you accept the revised policy.

11. Contact us

Questions, requests, or concerns? Email hello@bestinslot.ad.