Privacy Policy

What EXOD collects

• Account info: your email address and a hashed password.
• Business info: the name and website URL you give us, and a scan of your public site (title, meta description, headings, phone number, address) used to understand your business.
• Meta connection: when you connect a Meta (Facebook) account, we receive an access token (stored encrypted, never in plain text), the list of ad accounts, Pages, and pixels you grant us access to, and real advertising performance data (spend, leads, clicks, impressions) for campaigns EXOD builds or that already existed on the accounts you connect.
• Ad content: the ad copy and creative direction EXOD generates for your campaigns.

How it's used

Your data is used to build, launch, and continuously optimize your Meta ad campaigns on your behalf. Real performance results from campaigns across EXOD's users are also aggregated — never sold, never shared with other advertisers directly — into anonymized, cross-account benchmarks (typical cost per lead, which interests perform, which ad angles perform) for a given industry and region. An aggregate figure is only ever computed and used once it's backed by at least three distinct businesses, so no single advertiser's numbers can be reverse-identified from it.

Who we share it with

Meta (to create and manage your ads via their API) and Anthropic (to generate ad copy text — your business name, industry, and site summary are sent as context for that generation). We don't sell your data or share it with other advertisers in identifiable form.

How it's stored

Meta access tokens are encrypted at rest. Everything else is stored in EXOD's own database for as long as your account exists.

Your rights

You can delete your account and all associated data at any time from Settings, or by deauthorizing EXOD from your Facebook settings (which removes the Meta-sourced data specifically). See our Terms of Service for what account deletion does and does not entitle you to.

If you submitted a lead form

If you filled out a Facebook or Instagram lead form for a business that uses EXOD to run its ads, EXOD receives your submission (name, email, phone number, and any answers to the business's own questions) directly from Meta on that business's behalf. We store it and forward it to the business so they can follow up with you. We don't use it for anything else, don't sell it, and don't share it with any other advertiser. It's retained for as long as the business's EXOD account is active. To ask a business to delete a submission you sent them, contact that business directly.

Contact

Questions about this policy: reach us at the email address you used to sign up for support.