Privacy Policy for Spend
Summary. Spend is an internal tool. RNG Commerce AB uses it only to read advertising performance data from, and create ads in, Meta ad accounts that we own or manage for our own stores. Spend has no public users, offers no Facebook Login to the public, and does not collect data about the people who see our ads. We do not sell data.
1. Who we are
This policy covers the Meta app Spend (the "app"), operated by RNG Commerce AB (Swedish company registration number 559498-1853, contact person: Remon Ghaly) ("we", "us", "our"). RNG Commerce AB runs the online stores Montessori Roots (montessori-roots.com) and Panacea Life (panacealife.co).
For the data described here, RNG Commerce AB is the data controller. You can contact us about privacy at any time at remon@rng-commerce.com.
2. Scope
This policy applies only to data the app accesses through Meta's platform (the Meta Marketing API and related Graph API endpoints). It does not cover the privacy practices of our online stores, which have their own privacy policies on each store website, or Meta's own processing of data, which is governed by Meta's Privacy Policy.
3. What data the app accesses
The app accesses data only for Meta ad accounts, Facebook Pages and Instagram accounts that RNG Commerce AB owns or manages. This includes:
- Ad account data: account ID, name, currency, time zone, status and spending limits.
- Campaign, ad set and ad data: names, IDs, objectives, budgets, schedules, bid settings, targeting settings, status and delivery information.
- Creative data: ad text, headlines, links, images and videos that we upload or use in our own ads.
- Insights data: aggregated performance figures such as spend, impressions, reach, clicks, conversions, cost per result and return on ad spend, including aggregated breakdowns (for example by country, age range or placement).
- Page and Instagram information needed to run ads: the IDs, names and basic profile details of our own Facebook Pages and Instagram accounts, used to publish ads under them.
- Access tokens issued by Meta that allow the app to act on our own accounts.
Meta provides insights data in aggregated form. The app does not access the profiles, friend lists, messages, contact details or other personal data of the people who see or interact with our ads, and it does not attempt to identify them. Where the data above contains personal data (for example the name of a person who has a role on one of our ad accounts or Pages), it is limited to RNG Commerce AB's own staff and partners.
4. How we use the data
We use the data only for our own businesses, to:
- report on and analyse the performance and cost of our own advertising;
- create, edit, pause and manage ads, ad sets and campaigns in our own ad accounts;
- calculate business figures such as daily ad spend, return on ad spend and profit for our stores.
We do not use the data for any other purpose. In particular, we do not sell it, use it to build profiles of individuals, use it for advertising on behalf of anyone else, or transfer it to data brokers.
Our legal basis under the EU General Data Protection Regulation (GDPR), to the extent the data is personal data, is our legitimate interest in running and measuring our own advertising (Article 6(1)(f) GDPR).
5. Sharing
We do not sell, rent or share the data with third parties, except with service providers that help us process it on our behalf, such as cloud hosting, database and software tool providers. These providers may use the data only to provide their services to us, on our instructions and under contractual confidentiality and data protection obligations. We may also disclose data where we are required to by law.
Some of these providers may process data outside the EU/EEA. Where that happens, we rely on appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision.
6. How we store and protect the data
- Data is stored in access-controlled systems used only by RNG Commerce AB, hosted with reputable cloud providers.
- Data is encrypted in transit (HTTPS/TLS), and access requires authentication.
- Access tokens and other credentials are stored as protected secrets, are never published, and are limited to the permissions the app needs.
- Access is limited to the people at RNG Commerce AB who need it to do their work.
7. How long we keep the data
- Ad, campaign, creative and insights data is kept only as long as we need it for reporting, normally no longer than 24 months after we retrieve it.
- Figures that form part of our accounting records are kept for as long as Swedish bookkeeping law requires.
- Access tokens are kept only while the app is in use and are deleted or revoked when they are no longer needed.
When data is no longer needed, we delete it or make it anonymous.
8. Your rights under the GDPR
If we hold personal data about you, you have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- delete your data (see our Data Deletion page);
- restrict or object to our processing of your data;
- data portability, where applicable.
To use any of these rights, email remon@rng-commerce.com. We will respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or the data protection authority in the country where you live.
9. Data deletion
You can ask us to delete any data the app holds at any time. The instructions are on our Data Deletion page.
10. Changes to this policy
If we change this policy, we will publish the new version on this page and update the "Last updated" date above.
11. Contact
RNG Commerce AB, Sweden
Org. no. 559498-1853
Contact person: Remon Ghaly
Email: remon@rng-commerce.com