Privacy Policy for VXA

1. About This Policy

This Privacy Policy ("Policy") explains how VXA ("VXA," "we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website and services at https://vxalabs.com (the "Website", "Platform", or "Service").

VXA is operated by VXA AB, a company registered in Sweden (Org.nr: 559454-1855), with postal address at Box 5290, 102 46 Stockholm, Sweden.

2. Purpose of the Service

VXA is an AI-powered advertising platform that helps businesses create, publish, and analyze Meta advertisements. Our Service enables users to:

• Create and generate ad creatives using AI technology
• Publish advertisements to Meta platforms (Facebook, Instagram)
• Analyze ad performance data to optimize future campaigns
• Store brand assets, products, and campaign information

3. Information We Collect

3.1 Information You Provide Directly

When you register for and use VXA, we collect:

• Account information: Your name, email address, and password
• Business information: Company name, company URL, and business details
• Brand assets: Product information, brand guidelines, logos, and creative materials you upload
• Payment information: Processed securely through our payment provider (we do not store full payment card details)

3.2 Information from Meta (When You Connect Your Account)

When you authorize VXA via Meta OAuth, we may access (with your permission):

• Your connected Ad Accounts, Pages, and Business Manager
• Ad performance data (e.g., spend, impressions, clicks, ROAS, CTR, conversions)
• Ad creatives metadata (e.g., creative IDs, preview URLs, headlines)
• Historical and real-time campaign performance metrics

3.3 Information We Do NOT Collect

We do not collect:

• Personal profile information from Facebook or Instagram users
• Private messages or personal communications
• Personal names or email addresses of individuals from Meta platforms
• Personal behavioral data for profiling or tracking individuals

4. How We Use Your Data

We use your data to:

• Provide and operate the VXA Service
• Generate AI-powered ad creatives based on your brand and product information
• Fetch, display, and analyze your Meta ad performance data
• Identify high-performing ad patterns and optimize recommendations
• Publish advertisements to your connected Meta Ad Accounts
• Communicate with you about your account and our services
• Improve and develop new features for the Service

We do not:

• Sell, rent, or redistribute your data to third parties
• Use your data for our own advertising or user profiling
• Share your business data with other users or competitors

5. Data Storage and Retention

Your data is securely stored using industry-standard practices:

• We use Supabase as our backend database provider, which offers secure cloud storage with encryption at rest and in transit
• Ad performance data and brand assets are stored under your account for ongoing use within the Service
• We use AI services (such as Anthropic's Claude API) to generate ad creatives; these services process data temporarily and do not retain your data

Data Retention:

• Data is retained for as long as your account is active
• If you revoke Meta access, associated Meta data will be deleted within 30 days
• Upon account deletion request, all your data will be removed within 30 days

6. Third-Party Services

We integrate with the following third-party services:

• Meta (Facebook/Instagram): For authorized ad account access, ad publishing, and performance data via Meta's Marketing APIs
• Supabase: For database, authentication, and secure data storage
• AI Services (e.g., Anthropic Claude): For generating AI-powered ad creatives
• Stripe: For secure payment processing

7. Cookies and Tracking

We use essential cookies required for the Service to function properly (e.g., authentication, session management). We may use analytics tools to understand how users interact with our Service. We do not use cookies for behavioral advertising or personalized ad targeting of our users.

8. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time
• Revoke Meta integration via your account settings or Meta Business Integrations

To exercise any of these rights, contact us at support@vxalabs.com using the email address associated with your account.

9. Legal Basis for Processing

We process your data based on:

• Consent: When you voluntarily create an account, connect your Meta account, or provide information
• Contract Performance: To provide the services you have requested
• Legitimate Interest: To improve our services and communicate with you

We comply with the General Data Protection Regulation (GDPR) and applicable Swedish data protection laws.

10. Policy Updates

We may update this Policy as our features evolve or as required by law. Material changes will be communicated via email or in-Service notification. The most current version is always available at:

https://vxalabs.com/privacy

11. Contact Information

VXA AB
Org.nr: 559454-1855
Box 5290
102 46 Stockholm, Sweden

Email: support@vxalabs.com
Website: https://vxalabs.com