Privacy Policy

Adsline (adslinex.com) is a platform that lets businesses, agencies and distributors in Syria create and manage Facebook and Instagram ads, paid from a prepaid wallet. In this policy, “we” means the operator of Adsline, and “you” means anyone who uses the service.

Adsline is an independent service. It is not owned by or affiliated with Meta Platforms, Inc.

Account data

• Your full name, and the email address and/or phone number you register with.
• Your password, stored only as a one-way hash. We never store or see it in plain text.
• Your preferred language.

Organization and wallet data

• The organizations you belong to (business, agency or distributor), and your role in each.
• Your wallet balance and a permanent ledger of every top-up, transfer, hold, charge and adjustment.

Payment receipts

• The receipt image or PDF you upload as proof of a top-up, with the payment method, transfer reference, amount and any note you add. Receipts are stored privately and are only visible to our finance team.

Security and technical data

• Your IP address and browser or device user agent, recorded in audit logs and in your sign-in sessions, plus the time of your last sign-in.

Only if you choose to connect a Facebook account, and only with the permissions you approve on Facebook, we receive and store:

• Your Facebook user ID and name.
• The list of Facebook Pages you choose to share, with each Page’s ID, name, category, profile picture and your tasks (roles) on that Page, which tell us whether you can advertise for it.
• An access token for your Facebook user and an access token for each shared Page.
• For each Page, the ID and username of the linked Instagram professional account, if there is one.
• As ad features roll out: ad account, campaign, ad and performance data, used only to create and manage the ads you request and to show you their results.

We request these Facebook permissions: ads_management, ads_read, business_management, pages_show_list, pages_read_engagement, pages_manage_ads and instagram_basic.

Access tokens are stored encrypted with AES-256-GCM and are never shown to anyone, including our staff. We do not access your personal profile, friends, messages or private posts.

• To create and manage the ads you request on Facebook and Instagram, on the Pages you choose.
• To show ad performance, such as spend, reach and results.
• For billing and your wallet: verifying top-ups, charging ad spend and our commission, and keeping an accurate ledger.
• For security and fraud prevention: protecting accounts, detecting fake receipts and abuse, and keeping audit logs.
• To support you and send messages about your account and payments.
• To meet legal obligations, such as financial record-keeping and valid requests from authorities.

• We do not sell your personal data, to anyone.
• We do not use data from Facebook or Instagram for anything other than providing the service to you. We do not use it to build advertising profiles, share it with data brokers, or use it for other customers.
• We do not put third-party advertising trackers on our website or apps.
• We do not publish anything on your Pages or run ads unless you ask us to.

• Meta, to create and run the ads you request. Meta’s own policies apply to data it processes.
• Hosting and infrastructure providers that store and process data on our behalf, under confidentiality obligations.
• Your distributor or agency, if your account is managed by one in Adsline: they can see your organization name, the owner’s name and contact details, and your wallet balances.
• Authorities, when we are legally required to, or when needed to prevent fraud or protect the rights and safety of our users.

• Facebook data and tokens are deleted when you disconnect in Adsline, when you remove Adsline from your Facebook settings (deauthorization), or when you send a data deletion request. When you reconnect, Pages you no longer share are removed.
• Account, wallet ledger and top-up records, including receipts, are kept while your account is active and afterwards for as long as required for financial record-keeping and legal obligations.
• Sign-in sessions expire after 30 days of inactivity. Audit logs are kept for security and to prove that actions, including deletions, took place.

• All traffic is encrypted in transit with TLS.
• Facebook and Instagram access tokens are encrypted at rest with AES-256-GCM; passwords are stored only as hashes.
• Sessions use secure, httpOnly cookies that scripts on the page cannot read.
• Receipts are kept in private storage and are never publicly accessible.
• Staff access is limited by role, large top-ups need two separate approvals, and sensitive actions are recorded in audit logs.
• Sign-in and public endpoints are rate-limited against abuse.

No system is perfectly secure, but we work to protect your data and will notify affected users of a breach as required by law.

• Access: ask for a copy of the personal data we hold about you.
• Correction: fix inaccurate data, or ask us to.
• Deletion: disconnect Facebook at any time, or ask us to delete your account. See data deletion instructions.
• Withdraw consent for Facebook access at any time, in Adsline or in your Facebook settings.

Email support@adslinex.com from the email or phone number on your account. We may need to verify your identity, and we reply within 30 days. Some ledger records must be kept by law even after deletion; if so, we will tell you which.

Adsline is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

We may update this policy as the service changes. The date at the top shows the latest version. If a change is significant, we will tell you in the app or by email before it takes effect.

For any privacy question or request, email support@adslinex.com.