Privacy Policy
This policy explains what Nth Audit collects when you sign up and connect a Meta ad account, what we do with it, and the choices you have.
Who we are
Nth Audit (“we”, “us”) is operated by NTH. We read your Meta Ads data and turn it into an audit report. Questions about this policy go to support@nth.build.
What we collect
We collect only what is needed to sign you in and to produce your audits.
| Data | Where it comes from | Why we need it |
|---|---|---|
| Account details | Sign-up (name, email, sign-in method), handled by our authentication provider | To create and secure your account |
| Business profile | You, during onboarding | Business type, company name, website, and your goal (target CPA or ROAS) so audits are judged against it |
| Facebook identity | Meta, when you connect | Your Facebook user ID, to tie the connection to your account |
| Ad account data | Meta Marketing API | Campaigns, ad sets, ads, creatives (thumbnails, video, headline, body, landing URL) and performance insights: spend, impressions, clicks, results, and breakdowns by age, gender, placement and device |
| Page and Instagram details | Meta Graph API | The Pages you manage and linked Instagram account IDs, so we can read Page-owned creative and video fields for your ads |
| Access tokens | Meta | To read the above on your behalf. Stored encrypted |
| Audit outputs | Generated by us | Your reports, scores, findings, and the settings you chose for each audit |
| Usage and diagnostics | Your browser and our servers | Basic logs and error reports to keep the service reliable and secure |
We do not collect data about your ad audience as individuals. Meta returns aggregated performance figures (for example, results by age range), not the identity of the people who saw or clicked your ads.
Data we receive from Meta
When you choose “Connect Meta”, you log in on Facebook and approve specific permissions. We request ads_read, pages_show_list, pages_read_engagement and business_management. Access is read-only: we never create, edit, pause, or spend on your ads. The Connect Meta page explains what each permission is used for.
Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements. We use Meta data only to provide and improve the audit features you asked for. We do not sell it, use it for advertising or profiling, or transfer it to data brokers.
How we use your data
- To run the audits you request and show the results in your account, including PDF and Excel exports.
- To calculate metrics, score your account, and write plain-English findings and recommendations.
- To keep your connection working, and to tell you when it needs reconnecting.
- To handle billing, support, security, and abuse prevention.
- To fix bugs and understand aggregate product usage.
We do not use your Meta data to train our own or anyone else’s machine learning models.
Storage and security
Meta and Page access tokens are encrypted with AES-256-GCM before they are written to our database. Data is transmitted over HTTPS. Access to production systems is restricted. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and will tell you about a breach affecting you as the law requires.
How long we keep it
- Meta access tokens are removed when you disconnect Meta in Settings, or when you delete your account. Long-lived Meta tokens also expire on their own.
- Reports and the ad data behind them are kept so you can revisit past audits, until you ask us to delete them or delete your account.
- Billing records may be kept for as long as tax and accounting law requires.
Your choices and rights
- Disconnect Meta at any time from Settings. We stop reading your account straight away.
- Revoke access on Facebook under Settings → Business Integrations (or Apps and Websites) and remove Nth Audit.
- Access, correct, or delete your data by emailing support@nth.build. See Data deletion for the exact steps.
- Withdraw consent at any time. Doing so does not affect processing that already happened.
Depending on where you live (for example under India’s Digital Personal Data Protection Act, or the GDPR), you may have additional rights such as portability or the right to complain to a regulator. We will honour valid requests.
Children
Nth Audit is for businesses and is not directed to anyone under 18. We do not knowingly collect data from children.
International transfers
Our providers may process data in countries other than your own. Where we do this, we rely on appropriate safeguards required by applicable law.
Changes to this policy
If we make material changes we will update the date above and, where appropriate, notify you by email or in the app.
Contact
Email support@nth.build or visit the contact page.