Meta API Disclosure

This page explains how the Dema platform accesses, uses, stores and shares data from Meta (Facebook and Instagram) when one of our customers connects a Meta ad account, Facebook Page or Instagram account. It supplements our Privacy Policy and Data Processing Addendum, and includes our data deletion instructions.

What Meta data we access

Through the Meta Marketing API and Ads Insights API, we access data from the ad accounts a customer connects:

• ad account metadata;
• campaign, ad set and ad configuration;
• creative and media metadata;
• product catalogue identifiers;
• performance metrics, including spend, impressions, clicks, video views and attributed conversion values; and
• the name and ID of the person who authorised the connection.

We do not receive information that identifies the individual people who saw or clicked on the customer's ads.

Where a customer connects a Facebook Page or Instagram account, we may also access Page or account profile information, posts and other published content, comments, media, audience and performance insights, and related metadata made available by the Meta APIs.

How we use Meta data

• We use Meta advertising data to provide analytics, such as advertising attribution, profitability reporting and actionable insights, and to create, update or manage campaigns, budgets, targeting and creatives when a customer or user instructs and approves the action.
• We use Meta Page and Instagram data to provide connected content and reporting features.
• We do not use Meta data to train or improve generalised models that benefit other customers.
• We do not use Meta data to derive insights about the end users of our customers' ads.
• We do not use Meta data for our own advertising and do not sell it.

Security

We use technical and organisational measures designed to protect Meta data at a level appropriate to the risk and limit access to people and systems that need it to provide the relevant features.

Sharing

We do not sell, rent or share Meta data with third parties for their own purposes. We share it only with the service providers listed in our Data Processing Addendum that help us provide our services, under contracts that require them to protect it and use it only on our instructions, or where required by law.

Retention

We keep Meta data only as long as needed to provide the relevant features, meet legal obligations and handle applicable claims, subject to the customer's instructions and our Data Processing Addendum.

How to delete your data

You can ask us to delete data we have received from Meta in any of these ways:

1. Disconnect the integration in Dema. In the Dema platform, open the integration settings and disconnect Meta. This stops future access through that connection but does not itself delete data previously imported into Dema.
2. Remove Dema from your Facebook account. In Facebook, go to Settings & privacy > Settings > Business integrations, select Dema and choose Remove.
3. Request deletion. Customers can instruct us to delete Customer Personal Data under the Data Processing Addendum. Individuals can contact the relevant customer or email dpo@dema.ai, including the relevant ad account or business, and we will handle the request as required by applicable law.