How we handle personal information

Effective 8 September 2026

Summary

KUABY AI is a research and analytics service for advertising creatives. We collect advertising records that advertisers have themselves published in Meta’s public Ad Library, and we analyse them so that our customers can study how advertisers run, scale and retire campaigns.

We receive no personal information from Meta about you or about any other Meta user. The service reads a public archive of advertisements. It does not read anybody’s account.

What this service does not do

No Facebook Login, and no Meta sign-in of any kind
No access to any person’s or business’s Meta advertising account
No collection of Meta user profiles, friend lists, messages, or on-platform activity
No advertising trackers, behavioural profiling, or analytics on this website
No sale of personal information, and no sharing of it for anyone else’s marketing

1. Scope

This policy applies to the kuaby.ai website and to the KUABY AI application. In it, “we” and “us” mean KUABY AI. If you have a question about anything below, write to privacy@kuaby.ai.

2. Information we collect

2.1 Information you give us

If you contact us, we receive your email address and whatever you put in your message. When customer accounts become available, we will also process the name, email address, organisation name and billing details needed to operate an account; card details are handled by a payment provider and are never stored by us.

2.2 Information collected when you visit this website

These pages are static files served from Cloudflare’s network. Delivering them involves the standard request information any web server receives — IP address, user agent, timestamp and the address requested — which Cloudflare processes to serve the page and to protect against abuse.

This website sets no cookies and runs no analytics. There is no consent banner because there is nothing to consent to.

2.3 Public advertising records

This is the substance of the service. We collect advertising records that advertisers have published in Meta’s Ad Library — a public archive Meta operates precisely so that advertising can be examined by anyone. For a given record we may collect the advertiser’s page name and identifier, the creative itself (image or video), the text shown alongside it, the dates on which we observed the advertisement running, and, where Meta publishes them, aggregate reach and demographic breakdowns for the European Union and the United Kingdom.

We also derive information from those creatives: a transcript of speech in video advertisements, still frames, duration and technical properties, and a perceptual fingerprint used to group near-identical creatives together.

3. Personal data inside advertising material

Most of what we collect concerns businesses rather than individuals. But advertising can contain personal data, and we would rather say so plainly than leave it implied:

an advertiser page may be operated by a sole trader under their own name;
a creative may show or name people — founders, employees, actors, or customers giving a testimonial;
a transcript may contain a person’s spoken words, and sometimes their name.

We do not seek out information about individuals. We build no profiles of the people who appear in advertisements, we do not attempt to identify them, and we do not combine this material with data from anywhere else in order to recognise a person. It is processed because the advertiser chose to publish it to the public, and because analysing published advertising is the entire purpose of the service.

Legal basis (UK GDPR and EU GDPR): legitimate interests, Article 6(1)(f) — our interest, and our customers’ interest, in studying advertising that has been published publicly. If you appear in an advertisement we hold and you object to us holding it, see section 7; we will remove or redact the material.

4. How we use information

to operate, maintain and improve the service;
to answer your enquiries and provide support;
to produce the analyses of advertising that are the product itself;
to keep the service secure and investigate misuse;
to comply with legal obligations.

We do not use your personal information to advertise to you, we do not sell it, and we do not share it so that others can market to you.

5. Meta and the Ad Library

The Ad Library is a public archive published by Meta. Where we use Meta’s official Ad Library API, we do so under the terms Meta sets for that API and in the identity-verified manner it requires.

KUABY AI is an independent service. It is not affiliated with, endorsed by, sponsored by, or officially connected to Meta Platforms, Inc. Facebook, Instagram and Meta are trademarks of Meta Platforms, Inc.

6. Service providers

We rely on a small number of providers, each acting on our instructions:

Cloudflare — website delivery and storage of creative media;
Vultr — application servers and database hosting;
Amazon Web Services (SES) — transactional email.

None of them is permitted to use information we entrust to them for their own purposes. We may also disclose information where the law requires it, or to establish or defend legal claims.

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we process it, to receive it in a portable form, and to withdraw consent where we rely on it. You also have the right to complain to a data protection authority — in the United Kingdom, the Information Commissioner’s Office; in the EEA, your national supervisory authority.

To exercise any of these, write to privacy@kuaby.ai. If your request concerns material inside an advertisement, please include a link to the advertisement or enough detail for us to find it. We aim to respond within one month.

8. How long we keep information

Correspondence is kept for as long as needed to deal with the matter, and deleted on request.
Website request logs are held by Cloudflare under its own short retention periods.
Advertising records are retained indefinitely, as a historical archive. This is deliberate rather than incidental: advertisements disappear from the Ad Library once they stop running, so a record of what was published only has research value if it outlives the campaign. Requests under section 7 are honoured against this archive.

9. International transfers

Our providers operate in several regions, including the Asia-Pacific region, so information may be stored or processed outside the country you live in. Where personal data is transferred out of the United Kingdom or the EEA, we rely on appropriate safeguards, including the relevant Standard Contractual Clauses.

10. Security

Our database is not exposed to the public internet, access is limited to those who need it, credentials are scoped to the least privilege each process requires, and traffic is encrypted in transit. No system is perfectly secure, and we do not claim otherwise.

11. Children

The service is a business tool. It is not directed at children, and we do not knowingly collect personal information from anyone under 16.

12. Changes to this policy

We may update this policy. When we do, the effective date at the top changes, and we will give notice of material changes through the service or by email where we hold an address for you.

13. Contact

Questions, requests and complaints about privacy go to privacy@kuaby.ai.