CALOTA

Privacy Policy

Last updated: March 2026

Calota LTD ("Calota", "we", "our", or "us") operates the Calota Ad Creative Tracker platform. This Privacy Policy explains how we collect, use, and protect information when you use our services.

1. Information We Collect

When you connect your Meta (Facebook) ad account to Calota, we collect and process the following data:

  • • Ad performance metrics — including spend, revenue, ROAS, CPA, CPC, CTR, impressions, frequency, and video view data
  • • Ad account information — account name, account ID, and currency
  • • Ad creative details — ad names, campaign names, ad set names, and preview URLs
  • • Authentication tokens — access tokens provided by Meta to retrieve your ad data

We do not collect personal information such as your name, email address, phone number, or payment details through our tracker. We do not access your personal Facebook profile, messages, friends list, or any data beyond advertising performance metrics.

2. How We Use Your Data

We use the collected data exclusively to:

  • • Display ad performance metrics on the Calota dashboard
  • • Generate performance reports and trend analysis for your ad creatives
  • • Provide read-only access to authorised team members and clients via unique dashboard links
  • • Refresh your data automatically to keep metrics up to date

We do not use your data for advertising, profiling, remarketing, or any purpose other than providing our tracking service to you.

3. Data Sharing

We do not sell, rent, or trade your data to any third parties. Your ad performance data is only accessible by:

  • • You and your authorised team members
  • • Clients you explicitly share a read-only dashboard link with
  • • Calota staff, solely for the purpose of providing technical support

4. Data Storage & Security

Your data is stored securely using encrypted cloud infrastructure hosted by Vercel and Upstash. Access tokens are stored server-side and are never exposed to the browser or to any client-facing pages. All data is transmitted over HTTPS.

5. Data Retention

We retain your ad account connection and associated access tokens for as long as your account is connected to our platform. You may disconnect your account at any time, which will remove your access token and stop all data retrieval. Performance data displayed in the dashboard is fetched in real-time from Meta and is not permanently stored by Calota.

6. Your Rights & Data Deletion

You have the right to:

  • • Disconnect your account at any time through the Calota dashboard or by contacting us
  • • Request data deletion — we will remove all stored tokens and account connections within 48 hours of your request
  • • Revoke access — you can revoke Calota's access to your Meta ad account directly through your Facebook Business Integrations settings

To request data deletion, email us at rob@calota.ai

7. Meta Platform Terms

Our use of data received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. We only request the minimum permissions necessary to provide our service (read-only access to ad insights).

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

Calota LTD
Email: rob@calota.ai
Website: calota.co

© 2026 CALOTA LTD. ALL RIGHTS RESERVED.