Information We Collect
When you use tandyr, we collect the following categories of data to provide and improve the service:
| Category | Fields |
|---|---|
| Identity / Profile (Facebook Login) | Name, email address, profile picture |
| Facebook advertising data | Ad account details; campaign names and statuses; impressions, clicks, spend, CTR, CPC, CPM |
| Campaign management | Status changes you request; budget modifications you request |
| Automation | Rules you create; rule execution logs; triggered actions |
| Usage | Login timestamps; feature-usage data |
| Access tokens | Facebook OAuth token (AES-256 Fernet, encrypted at rest) |
| Operational records | Sync job records; audit logs |
| Cookies / storage | Essential auth cookies only; JWT in localStorage; no tracking cookies; no third-party analytics |
How We Use Your Data
We use your data solely to provide, maintain, and improve the tandyr service. Specifically:
- Authenticate you and maintain your session
- Fetch and display your Facebook advertising data in the dashboard
- Execute automation rules and bundle actions you configure
- Send Telegram notifications you have opted into
- Detect and respond to errors, abuse, or security incidents
Data Sharing
We do not sell, rent, or share your personal data with third parties for their marketing purposes. Your data is used exclusively to provide the tandyr service to you.
If you enable Telegram notifications, your data is transmitted to Telegram's servers solely for the purpose of delivering those alerts. Telegram's own privacy policy governs that transmission.
Data Retention
We retain your data for the periods described in the table below. When you delete your account, all data is permanently removed within 30 days.
| Data | Retention period |
|---|---|
| Account data | As long as your account is active |
| Facebook advertising data | No longer than necessary to provide the service |
| After account deletion | All data permanently removed within 30 days |
Your Rights
You have the following rights over your data. To exercise any of them, use the in-app controls or contact us at support@ace-partners.net.
- Access — view all data tandyr holds about you from your dashboard
- Deletion — delete your account and all associated data via the Data Deletion page
- Portability — export your data as CSV from the Statistics page
- Revoke — disconnect Facebook at any time via Facebook Settings → Apps and Websites
Security
tandyr encrypts all OAuth tokens at rest using AES-256 (Fernet). Data in transit uses TLS 1.3. We follow the principle of least privilege: each team member can access only the ad accounts and pages assigned to them. We conduct periodic security reviews and notify affected users promptly of any confirmed breach.
Cookies & Storage
tandyr uses essential cookies only: a session cookie for authentication and a locale preference cookie. We store your JWT in localStorage for in-app use. We set no third-party tracking cookies and use no third-party analytics services (no Google Analytics, no Mixpanel). You cannot opt out of essential cookies because they are required for the service to function.
Platform Permissions
tandyr requests the following platform permissions. We request only what is needed for the features you use.
| Permission scope | Why we request it | Platform |
|---|---|---|
public_profile | Identify the connected user; display name and avatar in Settings. | |
ads_read | Read your campaign, ad-set and ad insights to render your performance dashboards and statistics. | |
ads_management | Execute your automation rules — pause, enable or adjust budgets on your own campaigns and ad sets when your thresholds trigger. | |
business_management | Enumerate the ad accounts and Pages in your Business Manager so you can choose which assets to automate. |
For full details on each permission scope, see the Meta Platform Documentation
You can request deletion of all Facebook data we store at any time — see our Data Deletion page
Contact
Questions about this Privacy Policy? Email us at support@ace-partners.net
Data controller: LOGICAL TECHNICAL SERVICES CORP, Bethesda, MD 20814, USA. The tandyr service at ace-partners.net is operated by LOGICAL TECHNICAL SERVICES CORP.
Changes to This Policy
We may update this Privacy Policy as the service evolves. We will notify you of material changes via in-app banner and email. Continued use of tandyr after the effective date of a revised policy constitutes acceptance. The "Last updated" date at the top of this page always reflects the most recent version.