Privacy Policy

Account information. When you register, we collect your name, email address and password. Passwords are stored only as a one-way hash (bcrypt).

Business information you provide. Company details, brand guidelines, documents, campaigns and other content that you or your team members create or upload.

Information from platforms you connect. If you connect a third-party account (for example Meta, Google or Microsoft OneDrive), we receive only the information that the platform shares under the permissions you approve during its authorization step. You can see those permissions on the platform's consent screen.

Payment information. If you buy a paid plan or credits, payment is processed by Stripe. We do not receive or store your full card number; we keep your Stripe customer ID and subscription status.

Technical information. Server logs such as IP address, browser type, request time and errors, which we use to operate, secure and troubleshoot the Service.

• To provide the features you use, such as analyzing campaign performance, producing recommendations, generating content, and publishing or scheduling content when you ask us to.
• To operate, maintain, secure and improve the reliability of the Service.
• To communicate with you about your account and the Service.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it to show you advertising.

If you connect Meta (Facebook) to 1Person, we access, depending on the permissions you grant:

• your Meta user ID and the list of permissions you granted;
• the ad accounts you can access, and their campaigns, ad sets, ads, ad creatives and performance insights;
• the Facebook Pages you manage and their content, when you use Page features.

We use this information only to provide the Service to you, for example to show and analyze your advertising performance and to prepare suggested ad variations. We do not sell it, license it, or transfer it to data brokers, and we do not use it to build profiles for any purpose other than providing the Service to you.

1Person does not change your ads on its own. It can create a new ad draft in your ad account only when you review that draft and explicitly confirm it, and that draft is always created paused. 1Person does not turn ads on, change budgets or targeting, or delete ads.

Our use of information received from Meta also follows the Meta Platform Terms.

To produce analysis and content, we send relevant parts of your business information and campaign data to AI model providers (currently OpenAI and Anthropic), which process it on our behalf to return a result. We do not use your data to train AI models.

We share information only:

• with service providers that host and operate the Service on our behalf, such as infrastructure, database, email, payment (Stripe) and AI model providers, who may use it only to provide their services to us;
• with the platforms you connect, when you ask the Service to act on them;
• with the members of your company workspace in 1Person, according to the access you give them;
• when required by law, or to protect the rights, safety and security of our users and the Service.

Some of our service providers, including AI model providers, may process information in countries other than yours, such as the United States.

We protect information with technical and organizational measures. Access tokens for connected platforms are encrypted at rest (AES-256-GCM), are used only by our servers, and are never sent to your browser. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We keep your information for as long as your account is active or as needed to provide the Service. When you disconnect a platform, we delete its stored access token. When you ask us to delete your account, we delete your information as described below, unless the law requires us to keep it.

You can access and update much of your information in the Service. To delete information:

• Disconnect a platform: in 1Person, go to Settings → Integrations and select Disconnect. We delete the stored access token and stop using that connection.
• Remove 1Person from Facebook: in Facebook, go to Settings & privacy → Settings → Business integrations (or Apps and websites), select the app, and remove it. This withdraws the permissions you granted.
• Delete your account and data: email support@1person.ai from the email address of your account with the subject "Data deletion request". We will confirm your request and delete your account and associated information, including information received from connected platforms such as Meta, within 30 days.

Depending on where you live, you may also have the right to request access to, correction of, or a copy of your information, or to object to certain processing. Contact us at support@1person.ai to make such a request.

The Service stores your sign-in session in your browser's local storage so you stay signed in. We do not use advertising or third-party analytics cookies.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect information from them.

We may update this Privacy Policy. When we do, we will change the "Last updated" date above and, for significant changes, notify you in the Service.

For questions or requests about this Privacy Policy or your information, contact us at support@1person.ai.