LEGAL · PRIVACY

Privacy Policy

Last updated 16 October 2026

This policy covers kads.ai and the Kads application at app.kads.ai, including the Kads API, the MCP server and the Kads assistant. It explains what we collect when you connect an advertising account, what we do with it and how you remove it.

Who we are

Kads is operated by [Company legal name], [Registered address]. We are responsible for the personal data described in this policy. For privacy questions or requests, email contact@krev.ai.

What we collect

Your account. Your email address, and the name and profile picture from Google if you sign in with Google. We also keep the workspaces you belong to, your role in each one and invitations you send or receive.

Advertising connections. When you connect Meta or another advertising network, we store the access token it issues, the permissions you granted, your user ID and name on that network, and the token’s expiry and status. Tokens are encrypted before they are stored.

For Meta, Kads asks for these permissions: ads_read, ads_management, pages_show_list, pages_read_engagement, pages_manage_ads and catalog_management. You can decline the last two; ads that use existing posts, instant forms and catalogs are then unavailable.

Advertising data. From the ad accounts you connect, we copy:

  • ad account names, IDs, currencies and time zones
  • campaigns, ad sets, ads, creatives, budgets, schedules and targeting settings
  • delivery and performance results, such as spend, impressions, clicks and conversions
  • names and IDs of the Facebook Pages and Instagram accounts available for your ads
  • ad previews and creative thumbnails, which we copy into your media library so they keep displaying

What you add in Kads. Files you upload to the media library, goals, budgets, revenue entries, saved views, reports and report schedules, rules, experiments and annotations.

Changes made through Kads. Each change you prepare, approve or run is recorded with who requested it, what it changes, when it ran and the network’s response. Workspace activity is recorded in an activity log.

Ember, the Kads assistant. Your conversations with Ember and the drafts it prepares.

API and assistant access. Names, permissions and expiry dates of API tokens you create (we keep only a hash of each token), and a log of API requests: path, method, response status and duration.

Store connections. If you connect a Shopify store, order totals, refunds, product lines and whether an order came from a new or returning customer. We do not store your customers’ names or contact details.

How we use it

  • to show your campaign results and keep them up to date
  • to make the changes you approve, and run the rules and schedules you set up
  • to answer your questions in Ember
  • to send the reports and alerts you schedule
  • to secure the service, investigate errors and respond to support requests

Kads changes a campaign only when a workspace member approves the change or sets up a rule that makes it. Data from one workspace is never shown to another.

We do not sell personal data. We do not use data from your ad accounts to advertise, to build audiences or profiles, or for any purpose other than providing Kads to your workspace.

Who we share it with

We use these service providers to run Kads. They process data on our behalf and only to provide their service:

  • Supabase: database, sign-in and file storage
  • Vercel: hosting, and Vercel AI Gateway, which passes assistant requests to the AI model that answers them
  • Sentry: error reports, with cookies, request headers and request bodies removed
  • Resend: delivery of scheduled report emails

When you approve a change, Kads sends it to the advertising network that runs the ad, such as Meta. We disclose data to others only if the law requires it.

Storage and security

Access tokens and app secrets are encrypted with AES-256-GCM before they are stored, and are decrypted only on our servers when Kads calls the network for you. Every request is checked against your workspace membership and role; only owners and admins can connect or disconnect advertising accounts.

Data is stored in [Hosting region].

How long we keep it

We keep a workspace’s data while the workspace exists. Disconnecting an advertising network deletes its access token immediately; results already copied stay in the workspace until you delete them or the workspace. Deleting a workspace deletes its data and stored files. Deleting your account deletes your profile, your workspace memberships and any workspace you own that has no other members.

Deleted data can remain in database backups for [Backup retention period] before it is overwritten.

How to delete your data

Your choices and rights

You can ask us to give you a copy of your data, correct it, delete it or stop processing it. Email contact@krev.ai from the address on your Kads account. We reply within [Response time]. To download your profile and workspace list yourself, choose Export in Workspace settings.

You can withdraw Kads’s access at any time by disconnecting the network in Kads, or by removing Kads in the network’s own settings. In Facebook, go to Settings & privacy → Settings → Business integrations.

If you are unhappy with how we handle your data, you can complain to [Data protection authority for your jurisdiction].

Cookies

The Kads application uses cookies to keep you signed in and to remember your selected workspace. Both kads.ai and app.kads.ai remember your light or dark theme in your browser. We do not use advertising or analytics cookies.

Children

Kads is a business tool and is not directed to children. We do not knowingly collect data from anyone under 16.

Changes to this policy

We update this page when Kads changes what it collects or how it uses data, and change the date at the top.

Contact

Email contact@krev.ai, or write to [Company legal name], [Registered address].