1. Introduction

Welcome to Radma, the brand associated with radma.me. The "Panorama Ads MCP" service described in this policy is operated by Panorama for Technology & Trade ("we", "the Company"), based in the Sultanate of Oman. This policy explains how data is collected, processed, and used when using the Panorama Ads MCP application.

2. Scope of This Policy

This policy applies exclusively to data processed by Panorama Ads MCP after the user grants explicit authorization to access their Meta advertising account. It does not cover any other products or services of Radma or Panorama for Technology & Trade unless expressly stated otherwise.

3. Types of Data That May Be Processed

After user authorization, the application may process the following data types:

• Ad account information linked to the user or their Business Manager.
• Account, campaign, ad set, and ad identifiers.
• Campaign names, statuses (active/paused), and budgets.
• Performance and analytics data such as spend, reach, impressions, clicks, CTR, CPC, CPM, and results.
• Identifiers of Meta pages and connected advertising assets the user authorizes access to.
• Data the user manually enters when setting up a campaign or requesting a report through the application.

4. Reliance on the Meta Marketing API

The application relies exclusively on the official Meta Marketing API to access ad account data, strictly within the permissions/scopes explicitly granted by the user or Business Manager when linking the account. The application does not access any data outside the scope of these permissions.

5. Purposes of Data Use

Data processed by the application is used solely for the following purposes:

• Displaying and analyzing campaign and ad performance for the user.
• Generating reports and recommendations related to advertising performance.
• Creating or modifying advertising elements (campaigns/ad sets/ads) based on the user's explicit request.
• Sending periodic reports via WhatsApp when the user explicitly enables this feature.
• System protection and operation logging for security, abuse prevention, and technical auditing purposes.

6. Meta Access Token

The Meta Access Token is treated with the highest level of confidentiality:

• It is never displayed to unauthorized users.
• It is never sent to OpenAI or any AI analytics provider as part of analysis requests.
• It is never stored in publicly accessible files, nor committed to any public code repository such as GitHub.

7. AI Processing

When the user enables the smart analytics feature, performance summaries or textual campaign context may be sent to the AI provider OpenAI solely to generate analytics and recommendations. The Meta Access Token is never sent to OpenAI under any circumstances. AI-generated recommendations are advisory in nature and do not guarantee any specific advertising outcome.

8. WhatsApp Reports

When the user enables the periodic WhatsApp reporting feature, advertising summaries may be sent to the phone number the user designates for this purpose.

9. Legal Basis, Consent, and Authorization

Data processing is based on the user's explicit consent when linking their ad account through Meta's official authorization flow (OAuth), the contractual necessity of providing the service requested by the user, and the legitimate interest in protecting and securing the system.

10. Sharing Data with Third Parties

Data is shared only with service providers necessary to operate the application, namely:

• Meta — to execute operations on the ad account via its official interface.
• The hosting provider operating the application.
• OpenAI — only when the smart analytics feature is enabled, and without the Meta access token.
• WhatsApp Business API (via the authorized integration provider) — only when the periodic reporting feature is enabled.

11. Data Retention

Data is retained for the minimum period necessary to provide the service, meet security requirements, and comply with applicable legal obligations. This policy does not commit to a fixed, undocumented retention period; users may request deletion of their data as described on the Data Deletion page.

12. Data Protection

Reasonable technical and organizational measures are applied to protect data from unauthorized access, use, or disclosure, proportionate to the nature of the data processed and the scale of the service.

13. User Rights

Users may, at any time:

• Request access to their data held by the service.
• Request correction of any inaccurate data.
• Request deletion of their data (see the Data Deletion page).
• Withdraw the authorization granted to the application at any time from their Meta account settings.

14. External Links

The service may contain links to third-party websites or services (such as Meta). We are not responsible for the privacy practices of such external sites, and users are advised to review their respective policies.

15. Children's Privacy

This service is intended for business use by adult companies and advertisers, and is not directed at children. We do not knowingly collect data from individuals under the legal age.

16. Policy Updates

This policy may be updated from time to time to reflect changes in the service or legal requirements. The last update date is shown at the top of this page, and users are advised to review it periodically.

17. Contact Information

For any inquiry regarding this policy, please contact us via email:

admin@tech-panorama.com