Privacy Policy

Last updated: October 3, 2026. This is the legally binding English version.

Who we are. NVY LOGISTICS LLC, a Florida LLC, USA ("we"), runs AdFleet at adfleet.app. Questions about your data: [email protected].

What we collect and why

• Account and team: email, name, hashed password, team role, plan. To run your account.
• Payments: amount, period, payment ID (and the transaction hash for USDT). Card details go to Stripe only; we never see or store them.
• Meta connection: your access token, app secret, and ad account, Page and pixel IDs. Tokens and secrets are encrypted. We use them only to make requests to Meta on your instructions.
• Your ad data: presets, creatives, launch logs, rules, stats from Meta.
• Support: tickets and, if you link it, your Telegram chat ID.
• Technical: server request logs (IP, page, status) and a team activity log. For security and abuse prevention.
• Compliance: your country and a US sanctions check.
• Built-in tracker (if you use it): clicks on your links (country, device, browser, truncated IP) and postbacks; technical browser data (user agent) for ad attribution, kept as long as the click is, and removed from the log of events sent to Meta after the same period. For this visitor data you are the controller and we are the processor; a data processing agreement is available on request.

We do not collect Facebook passwords or cookies. We do not sell data, and we do not use your ad-account data for our own advertising or for training AI models.

Who processes data for us

Hetzner (servers, Germany, EU), Cloudflare (DNS, security, backups), Stripe (card payments), Postmark (email), Meta (Marketing API), Anthropic (AI answers in the support bot — only the text of your question), Telegram (support bot and notifications), TronGrid (USDT payment check). We share data with authorities only where the law requires it.

How long we keep it

While your subscription is active, as long as the service needs it. After it ends, 30 days (you can export your data), then we delete it. Payment and refund records are kept as long as the law requires (up to 5–7 years). Server logs: 14 days. Encrypted backups: up to 40 days, so deleted data can remain in a backup for that time.

Cookies

Strictly necessary cookies are always on: sign-in, form protection, language, your cookie choice, and where you came from. On our public pages (the landing, sign-up, sign-in) a banner asks about the rest; inside the app (/app) there are only necessary cookies. If you press «Accept», our Meta (Facebook) pixel loads on those pages and sets its cookies (_fbp, _fbc) to measure our own advertising; if you press «Only necessary», nothing from Meta is loaded and no request goes to Meta from your browser. Pressing «Only necessary» deletes those Meta cookies on this domain and its subdomains. You can change the choice by clearing the cc cookie, then the banner appears again.

Meta pixel and server events. For our own advertising we send Meta two events about the sign-up and payment of an account: «registration» and «purchase» (amount and currency). The account email goes as a SHA-256 hash; never your IP address, password, team data or ad data. Only if you accepted the banner do we add, as they are and not hashed, the browser's user agent and Meta's browser identifiers _fbp / _fbc (we keep them 30 days, then delete them from our log, and at once if you delete your account). The browser itself sends Meta only a page view, and only after you accepted — never on pages with a one-time link or on the billing page. We send these two server events without the banner because they follow from the contract itself (your sign-up and your payment): our legitimate interest in measuring our own advertising. Meta is an independent controller of what it receives; its policy applies.

Your rights

You can export your team's data and delete your team or account in the dashboard, or email us to access, correct or delete your data. You can unsubscribe from trial emails with one click; payment and access emails still arrive. We are in the USA and our servers are in the EU; for EU customers, transfers are covered by Standard Contractual Clauses.

Security and changes

Secrets are encrypted, each team's data is isolated, and we notify affected customers of a breach without undue delay. We tell you about changes by email 14 days in advance.

Contact: [email protected] · NVY LOGISTICS LLC