Privacy
What Ad Geek does with your Meta account and your leads, what it stores, who can see it, and how to have it removed. Last updated 30 September 2026.
This policy describes what Ad Geek actually does today. It has not been reviewed by a lawyer and is not legal advice.
Who we are
Ad Geek is advertising and lead-follow-up software for insurance agents and agencies. With your permission it creates lead-generation advertising in your own Meta (Facebook and Instagram) ad account, receives the leads your forms collect, follows up with them by text message, and reports what your advertising produced.
Ad Geek is an independent product. It is not affiliated with, endorsed by, or operated by Meta Platforms, Inc. “Facebook”, “Instagram”, and “Meta” are their trademarks, used here only to describe what Ad Geek connects to.
Questions and requests: halversonholdings@gmail.com.
What happens when you connect Facebook
Connecting is your choice. You sign in with Facebook Login for Business and choose, on Facebook’s own screen, which Business portfolio, ad accounts and Pages to share. Ad Geek then lists only what you shared, and you pick the ad account and Page it should use. You never need to look up or send an ID. With the permissions you grant, Ad Geek:
- Reads your Facebook name and user ID, to show which login is connected.
- Lists the Business portfolios, ad accounts and Pages you shared, so you can choose among them.
- Creates campaigns, ad sets, ads, ad creatives, ad images and Instant Forms (lead forms) in the ad account and Page you chose, only when you approve a campaign.
- Subscribes Ad Geek to lead notifications for the Page you chose, so each lead from your forms reaches you.
- Reads each lead submitted to your forms, and the form it came from.
- Reads campaign structure, status and performance (spend, impressions, clicks, leads and similar results) to show your reporting.
- Starts, pauses, or changes the daily budget of a campaign Ad Geek created, only when you press the button for it and confirm.
Nothing runs until you start it
- Building or editing a campaign in Ad Geek sends nothing to Meta.
- When you approve a campaign for publishing, Ad Geek creates it in your ad account with the campaign, ad set and ads all PAUSED. A paused campaign does not run and does not spend.
- A separate Start Campaign approval, with its daily budget shown, is what switches it on. Editing the approved content afterwards cancels the earlier approval, and it must be approved again.
- Pausing a campaign and changing its budget each ask you to confirm first.
- Ad Geek never deletes or archives anything in your Meta account.
Leads and follow-up
When somebody submits one of your Instant Forms, Meta notifies Ad Geek and Ad Geek retrieves the answers they gave: typically name, phone number, email, state, and the answers to your form’s questions, together with which campaign and ad it came from. The lead is stored in the workspace connected to that Page and ad account, and in no other.
If you switch it on, Ad Geek sends text messages to your leads from your phone number (through Twilio) to follow up and book appointments, and records the conversation. It honours STOP and do-not-contact requests and never texts a lead who has opted out. Calls you place from Ad Geek’s dialer are recorded only if you turn recording on.
Those leads are your business records. You are responsible for having a lawful basis to contact them, and Ad Geek records the consent language your form showed.
What Ad Geek stores
- Your account: email address, display name, and a password hashed with argon2id (never stored readable). Sign-in times and failed attempts, for rate limiting.
- Your Facebook connection: your Facebook name and user ID, the permissions granted, the portfolios, ad accounts and Pages you shared, and the access token Facebook issued, encrypted with AES-256-GCM before it is written.
- Your campaigns: what you built in Ad Geek, the IDs of the objects created in Meta, and daily performance.
- Your leads: what they submitted, the consent text shown, and your text and call history with them.
- An audit log of consequential actions (publishing, starting, pausing, budget changes, connecting and disconnecting), so they can be reviewed.
Ad Geek does not read your personal Facebook profile beyond your name and user ID, your friends, your messages, or your posts, and it does not request permission to post to your Page or send Messenger messages.
Who can see it
Your data is visible to you and to the people you add to your workspace, according to their role. Other Ad Geek customers cannot see it; the server enforces this on every request. Ad Geek staff can view a workspace to support you, and every such access is recorded.
Ad Geek does not sell your data or your leads, or share them for advertising.
Data is processed by the services Ad Geek runs on:
- Vercel: application hosting and file storage.
- Neon: the database.
- Meta: your advertising account, Pages, forms and leads.
- Twilio: text messages and calls, when you use them.
- Google: generating ad images, and your Google Calendar for bookings, when you use them.
- AI models reached through Vercel’s AI Gateway: drafting ad copy and text replies, when you use those features.
- Resend: account emails.
- Your own CRM (such as HighLevel) or dialer (such as WAVV), only if you connect it.
How long data is kept
Your account, campaigns and reporting are kept while your account exists, because they are your business records. Leads are kept until you delete them, or until the retention period you set in Ad Geek removes their personal details. Ad Geek does not choose a retention period for you.
Disconnecting Facebook
Press Disconnect in Settings, Integrations, Facebook. Ad Geek removes its lead subscription from your Pages, revokes the permissions you granted it on Facebook (unless another of your workspaces still uses the same Facebook login), and deletes the stored access token. Syncing and lead retrieval stop immediately.
Nothing in your Meta account is deleted: campaigns, ads, forms and leads stay in Meta, and a campaign that is running keeps running until you pause it there. The reporting and leads already in Ad Geek are kept, because they are your records.
Removing Ad Geek in Facebook, Settings and privacy, Settings, Business integrations has the same effect: Facebook notifies Ad Geek, which deletes the token and marks the connection disconnected.
Deleting your data
When you remove Ad Geek from Facebook you can also ask Facebook to request deletion. Ad Geek then deletes the stored token, the list of portfolios, ad accounts and Pages you shared, and your Facebook name and ID, and gives Facebook a confirmation code you can check at adgeek.io/data-deletion.
To delete leads, you can delete them in Ad Geek yourself, or set a retention period. To delete your whole Ad Geek account, including campaigns, reporting and leads, email halversonholdings@gmail.com from the address on the account and we will delete it and confirm.
Security
Passwords are hashed with argon2id. Stored Meta, Twilio and other access tokens are encrypted with AES-256-GCM. Traffic is served over HTTPS. Webhooks from Meta are verified with Meta’s signature before anything is read. No system is perfectly secure, and Ad Geek does not claim to hold any security certification.
Changes
If this policy changes materially, the change will be described here rather than replaced silently.