Privacy policy

Your account: your name, email address and a salted hash of your password. We never store the password itself.

Your ad-account links: when you approve an ad account or Facebook Page, our connection partner Windsor.ai issues an access link. We store that link, the account and Page names and IDs it exposes, and the platform it belongs to. We do not receive your Meta or Google password.

Your campaigns: what you type, the conversation with your campaign agent, the copy and images generated for you, the settings you choose, and the IDs of the paused campaigns created in your ad account.

Technical logs: our servers keep standard request logs (IP address, time, page requested) for up to 30 days to keep the service secure.

We use this data only to run Xovium for you: to show your dashboard, to draft copy and images, and to create paused campaigns in the ad accounts you connected. We do not sell your data and we do not use it for advertising of our own.

Windsor.ai holds the authorised connection to your ad accounts and performs the campaign-creation actions on our behalf.

Google (Gemini) and OpenAI receive the words you type and the campaign details needed to draft copy and images, and may use that text to improve their models. They never receive your ad-account credentials, your email or your password.

Meta and Google receive the campaign, ad set and ad we create in your own account, exactly as if you had created them yourself.

None of these parties may use your data for their own purposes beyond providing the service.

Data we receive through Meta's or Google's platforms is used only to show you your own accounts and to create the campaigns you ask for, in line with the Meta Platform Terms and the Google API Services User Data Policy, including the Limited Use requirements.

Disconnect an account: from your dashboard, at any time. This removes the link from Xovium. To revoke access at the source as well, remove Xovium or Windsor.ai in your Meta Business or Google account settings.

Delete your account and data: email hello@outboundclicks.com from the address you signed up with. We delete your account, connections and campaign drafts within 14 days. Campaigns already created in your ad account stay there, because they are yours.

See your data: email the same address and we will send you a copy.

All traffic uses HTTPS. Passwords are hashed with PBKDF2. Access links to your ad accounts are stored server-side and are never sent to your browser.

If this policy changes in a way that matters, we will say so on this page and by email. Questions: hello@outboundclicks.com.

Xovium is an independent product and is not affiliated with or endorsed by Meta or Google. Meta, Facebook, Instagram, Google and Google Ads are trademarks of their owners.