Controlled access, protected data
You give IQuly access to ad accounts that spend real money. This page explains exactly what we can do with that access and how we protect it.
Access to your ad accounts
IQuly connects to Meta with the ads_read and business_management permissions. We read campaigns, ad sets, ads and their performance numbers. This access does not allow us to change your ads.
Optional rule actions require the additional ads_management permission. If you grant it and enable a rule's actions, that rule can pause ads or change daily budgets. New rules start in dry run mode, and changing a rule's action returns it to dry run mode. Scheduled rules can restore changes they made when their scheduled hours end. We do not create or delete ads.
You can disconnect an ad account at any time from the Connections page. Removing it also deletes the data we stored for it.
How we protect access tokens
The access token Meta gives us is encrypted with AES-256-GCM before it is stored, and it is decrypted only when we call Meta on your behalf, including syncing accounts and authorised rule actions. It is never shown in the interface.
Accounts and sign-in
- Sign-in is handled by Facebook. We do not receive your Facebook password.
- Facebook access tokens stored for sign-in are encrypted at rest.
- Everything under the app requires a signed-in session.
- Each workspace sees only its own ad accounts and data.
Payments
Payments are handled by Stripe. Your card details go to Stripe and never reach IQuly's servers. We keep subscription status, paid access periods, billing quotes and operation records, and the references needed to link them to your account.
Data we use and why
We use your ad performance data to find problems and show you trends. We do not sell it, and we do not use it to run ads. The Privacy Policy lists what we collect and who we share it with.
Reporting a vulnerability
If you think you have found a security problem, email support@iquly.com with the details. Please give us reasonable time to fix it before you share it publicly, and do not access data that is not yours.
Service status
Current availability of IQuly and of the Meta products we rely on is on the status page.