WHLICKS Read Codex Privacy Policy
Effective date: October 20, 2026
1. About This Application
WHLICKS Read Codex (“the Application”) is an internal advertising analytics tool operated by WHLICKS (“we,” “us,” or “our”).
This Privacy Policy explains how we access, use, disclose, and delete information obtained through authorized access to the Meta Marketing API.
The Application is intended for WHLICKS personnel and authorized representatives analyzing advertising accounts that WHLICKS owns or is authorized to access.
For privacy questions or data requests, contact 1225179519@qq.com.
2. Information We Access
Depending on the authorization granted and the reports requested, the Application may access:
- Advertising account identifiers, names, currency, and reporting time zone.
- Campaign, ad set, and ad identifiers, names, settings, and status.
- Advertising creative information needed for performance comparisons, such as ad text and creative references.
- Advertising performance metrics, including spend, impressions, reach, clicks, reported conversions, cost per result, and return on ad spend.
- Technical information necessary to operate and troubleshoot the connection, such as request timestamps and error information.
Access credentials are used to authenticate requests to Meta. The Application does not ask users to provide their Facebook account passwords.
The Application is not designed to retrieve lead-form submissions, customer contact lists, private messages, or individual customers’ payment details.
3. Read-Only Access
The Application requests the ads_read permission for advertising analytics. It does not request ads_management.
The integration is limited to reading authorized advertising data. It does not:
- Create, edit, publish, pause, or delete advertisements.
- Change campaign or ad set budgets.
- Modify targeting, bidding, or other advertising settings.
- Change advertising account permissions.
Recommendations produced through analysis do not automatically change advertising campaigns.
4. How We Use Information
We use authorized information to:
- Produce internal advertising reports.
- Compare campaign, ad set, ad, and creative performance.
- Review performance trends within the permitted retention period.
- Develop recommendations for advertising and creative decisions.
- Maintain and troubleshoot the Application.
Historical reporting periods may be queried when authorized, but each retrieved dataset remains subject to the maximum retention period in Section 6.
We do not use the Application to sell advertising data or build customer contact lists.
5. Data Sharing and External Services
Access to advertising data is limited to authorized personnel and service providers necessary to support the Application.
AI-assisted analysis may involve external services, including OpenAI services accessed through Codex, only if their applicable settings and contractual commitments support the maximum retention period described in Section 6. If this cannot be established, advertising data must not be sent to those services.
Where permitted, information submitted for analysis may include advertising metrics, campaign names, relevant ad content, and report context. We limit disclosures to information necessary for the requested analysis.
Access tokens, application secrets, and other authentication credentials must not be included in AI prompts or advertising reports.
Service providers may process information outside the country in which it originated. Any such processing must follow the applicable service agreements and the retention restrictions in this policy.
We do not sell advertising data obtained through the Application. We may disclose information when legally required.
6. Data Retention and Deletion
We retain advertising data obtained through the Application for no longer than 30 days (720 hours) from collection.
Reports, exports, summaries, and derived analyses containing that data are subject to the same deadline. Creating, copying, transforming, or updating a report does not restart the retention period. When a report combines information collected at different times, each item of information remains subject to its original deadline.
Information may be used during this period for performance comparisons, trend analysis, and internal reporting. By the end of the 30-day period, it must be deleted from storage under our control, including files, databases, caches, and any copies or backups containing it.
Advertising data must not be placed in backups, conversation histories, or other storage systems that cannot meet this deletion deadline. Operational logs must not retain advertising data beyond the same deadline.
External services may process advertising data only when their applicable settings and contractual commitments support this maximum retention period, including any provider-held copies or logs containing that data.
If a verified deletion request or an applicable Meta requirement calls for earlier deletion, we will delete the relevant information sooner.
Revoking access stops future retrieval but does not extend the retention deadline for information already collected.
Authentication credentials are maintained separately from advertising reports and used only while the connection remains authorized. Credentials under our control are removed when the connection is discontinued, and authorization should also be revoked through Meta.
7. Security
We apply safeguards appropriate to the information processed, including restricted access, read-only authorization, protected credential storage, and deletion controls designed to enforce the retention period.
Only authorized personnel and connection components may access the credentials needed to operate the Application. Credentials must not be included in public pages, source code repositories, or advertising reports.
No method of electronic storage or transmission can guarantee absolute security.
8. Revoking Access and Requesting Deletion
Authorized account administrators can revoke the Application’s access through the relevant Meta business or application settings.
Revoking access stops future authorized retrieval. Previously retrieved information remains subject to the 30-day deletion deadline unless it is deleted earlier.
To request access to, correction of, or deletion of information under our control, email 1225179519@qq.com with the subject:
WHLICKS Read Codex — Data Request
Please identify the relevant advertising account or report and describe your request. Do not send passwords, access tokens, or application secrets.
We may request information necessary to verify your identity and authority over the relevant account. We will handle verified requests without undue delay and in accordance with applicable requirements. Verification does not extend the normal 30-day retention deadline.
Where applicable, we will also instruct service providers processing the information on our behalf to delete it. Requests for information that has already been deleted may be answered by confirming that it is no longer available.
9. Changes to This Policy
We may update this policy to reflect changes to the Application or its data handling practices.
Any updated version will be published on this page with a revised effective date. Material changes will be communicated to affected authorized users as appropriate.
10. Contact
For questions about this policy or requests concerning information processed by the Application:
WHLICKS
Email: 1225179519@qq.com