Privacy Policy
This Privacy Policy explains how Atlas collects, uses, and protects information when you use our service.
TL;DR: Atlas is a Meta Ads management platform. We access your Meta Ad Accounts, Pages, and Pixels only with your explicit consent, and only to operate them on your behalf. We never sell your data, never use it for advertising other products, and you can revoke access at any time.
1. Who We Are
Atlas is operated by Roplanta Websales SRL, a company registered in Romania (CUI RO41824174), with registered address in Sibiu, Romania. We are the data controller for the personal data described in this policy.
Contact: legal@rocrm.app for privacy inquiries.
2. Information We Collect
2.1 Account Information
- Your name, email address, and password (when you create an Atlas account)
- Workspace settings and team member invitations
- Subscription and billing information (processed via secure payment partners)
2.2 Meta Platform Data (via Facebook Login for Business)
When you connect your Meta accounts to Atlas, we receive — based on permissions you grant:
- public_profile — your Meta name and ID
- email — your registered Meta email (only with explicit consent)
- ads_management, ads_read — to read campaign performance and manage ad sets, ads, and budgets on your behalf
- business_management — to access Business Manager assets you own
- pages_show_list, pages_read_engagement, pages_manage_metadata, pages_manage_ads — to display your pages and manage page-linked ads
- catalog_management — to read and update product catalogs for dynamic ads
- Marketing API access — to perform ad operations server-side
2.3 Operational Data
- API request logs (limited to error tracking and rate limit compliance)
- Atlas dashboard usage analytics (page views, feature engagement)
- Session cookies for authentication (essential, first-party only)
3. How We Use Your Data
We use the information collected exclusively to:
- Provide the Atlas service — display ad performance, execute campaign optimizations you request, and send alerts
- Perform Meta Ads operations on your behalf (only actions explicitly authorized through the Atlas UI)
- Maintain platform security and prevent abuse
- Communicate with you about service updates, billing, and support
- Comply with legal obligations under Romanian and EU law (GDPR)
We do NOT: sell your data, share it with advertisers, use it to train AI models for third parties, or access accounts you have not explicitly connected.
4. Data Sharing
We share data only with:
- Meta Platforms — when executing API calls you initiate (e.g., creating an ad, fetching insights)
- Infrastructure providers — Hostico (Romania-based hosting), used solely for platform operation under data processing agreements
- Legal authorities — only when required by court order or applicable Romanian/EU law
5. Data Retention
- Account data: kept for the duration of your subscription, plus 30 days after cancellation to allow reactivation
- Meta tokens: stored encrypted at rest (AES-256); auto-deleted within 24 hours of disconnection
- API logs: retained 90 days for diagnostics, then anonymized
- Billing records: retained 10 years as required by Romanian fiscal law
6. Your Rights (GDPR)
As a data subject under GDPR, you have the right to:
- Access — request a copy of personal data we hold
- Rectification — correct inaccurate data
- Erasure — request deletion (see Data Deletion)
- Restriction — limit processing under certain conditions
- Portability — receive your data in structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — disconnect your Meta account at any time from Atlas → Connections
To exercise any of these rights, email legal@rocrm.app. We respond within 30 days.
7. Security
We protect your data with:
- HTTPS/TLS 1.3 for all data in transit
- AES-256 encryption at rest for Meta tokens and sensitive fields
- Two-factor authentication (2FA) for Atlas accounts
- Role-based access controls within multi-user workspaces
- Regular security audits and dependency monitoring
8. Children's Privacy
Atlas is intended for business use by individuals 18 years or older. We do not knowingly collect data from children under 18.
9. International Data Transfers
Your data is stored within the European Union (Romania). Where Meta APIs require data transfer outside the EU (Meta's infrastructure), such transfers occur under Standard Contractual Clauses approved by the European Commission.
10. Cookies
Atlas uses only essential first-party cookies for authentication and CSRF protection. No third-party tracking cookies are placed by Atlas.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email and via a notice in Atlas at least 30 days before taking effect.
12. Contact & Complaints
Privacy inquiries: legal@rocrm.app
If you are unsatisfied with our response, you have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP).