legal

Meta Platform Data Policy

How Xcelerator Ads collects, uses, shares, protects and deletes data received from Meta (Facebook and Instagram) when an agency connects its business assets.

Effective date: Oct 8, 2026

This policy explains how Xcelerate Agency LLC ("Xcelerate", "we", "us") handles data received from Meta Platforms, Inc. ("Meta") through the Xcelerator Ads app when a customer connects Facebook or Instagram business assets to the Xcelerator CRM. It supplements our general Privacy Policy. If the two conflict for Meta data, this policy applies.

1) Who this applies to

Xcelerator Ads is used by agencies and businesses (our customers) to manage their own advertising, Pages and Instagram professional accounts. A customer connects through Facebook Login for Business and chooses which business portfolio, ad accounts, Pages, pixels and Instagram accounts to share. We only receive the assets and permissions the customer approves, and the customer can change or remove that access at any time.

For data about a customer’s ad accounts, audiences, leads and followers, the customer is the controller and Xcelerate acts as its service provider (processor).

2) What we receive from Meta

  • Connection details: the business portfolio ID and name, the system-user access token Meta issues for the connection, the permissions granted, and the token’s expiry.
  • Advertising data: ad account names, IDs, currency, status and spending limits; campaigns, ad sets, ads, creatives and their delivery status; and performance insights such as impressions, clicks, spend and results.
  • Page data: the Pages you share, their posts, comments and engagement, and Page insights.
  • Instagram data: the Instagram professional accounts linked to those Pages, their profile, media, comments, direct messages and insights.
  • Lead data: submissions to your lead ad forms, when you choose to retrieve them.
  • Pixel and dataset data: the pixels you share, their names and IDs, and event delivery diagnostics.

We do not receive or request your Facebook password, and we do not access personal profiles or assets you did not select.

3) How we use Meta data

We use Meta data only to provide the features you ask for in your Xcelerator workspace:

  • showing the status, budget and performance of your campaigns and ads;
  • creating, editing, pausing and reporting on campaigns when you, or an AI assistant you authorize in your workspace, request it (new campaigns are created paused until you approve them);
  • publishing and managing Page and Instagram posts, comments and messages when you request it;
  • importing your lead form submissions into your CRM workspace;
  • sending conversion events that you configure to your own pixel or dataset; and
  • keeping the connection secure, diagnosing errors and meeting our legal obligations.

4) What we never do

  • We never sell, rent or license Meta data.
  • We never use one customer’s Meta data to benefit another customer, or to advertise our own services.
  • We never give Meta data to data brokers, advertising networks or other monetization services.
  • We never use Meta data to train or improve general-purpose AI models. AI features act only on your workspace and at your direction.
  • We never use Meta data to make decisions about eligibility for credit, employment, housing, insurance or similar benefits, or for surveillance.

5) Who we share it with

Meta data is visible only to the users you authorize in your Xcelerator workspace. We share it with service providers that host and operate the service for us (such as our infrastructure and email providers), under contracts that require them to protect it and use it only on our instructions. We may disclose it if the law requires us to, or to protect the security of the service and its users. We do not otherwise share Meta data with third parties.

6) How we protect it

Access tokens are encrypted at rest and never shown in the browser. Data is transmitted over HTTPS. Each customer’s data is isolated from every other customer’s, and staff access is limited to what is needed to support you and keep the service secure.

7) How long we keep it

We keep Meta data for as long as your connection is active and you use the features that need it. When you disconnect Xcelerator Ads, remove the app in Meta, or ask us to delete your data, we revoke and delete the access token straight away and delete the Meta data we hold within 30 days. We may keep billing records and limited security logs for as long as the law requires.

8) Your choices and deletion

You can see and change the assets and permissions you shared in Meta Business Suite, disconnect at any time from your Xcelerator workspace, and ask us to delete your data. Step-by-step instructions are on our Data Deletion Instructions page.

If you are a member of the public whose information reached us through a customer’s ads, leads, comments or messages, please contact that business first, because it controls that data. You can also contact us and we will help.

9) Meta’s terms

We handle Meta data in line with the Meta Platform Terms and Developer Policies. Customers must also follow Meta’s advertising standards and terms when they use Xcelerator Ads.

10) Changes and contact

We will update the effective date when this policy changes and tell connected customers about material changes. Questions or requests: support@xcelerator.agency, Xcelerate Agency LLC.