Privacy policy
Effective date: September 15, 2026
Digital Optimizer operates AFF-Pacing. This policy describes how we handle information when you use the service or connect an advertising, tracking or messaging account.
Information we process
- Meta advertising information: authorized ad account, campaign and ad set identifiers and names; currency and timezone; budgets and delivery status; spend; and reported purchase and revenue totals.
- Tracking information: when RedTrack is connected, configured account and campaign mappings and aggregate purchase, revenue and reporting-freshness information. AFF-Pacing does not need customer names, payment-card details or individual order records for its pacing decisions.
- Slack information: workspace, app, channel and authorized responder identifiers; alert references; button actions and the times those actions occurred.
- Operational information: account settings, observations, incidents, action requests, verification results, audit records and service-health information.
- Access and support information: integration credentials supplied by an authorized operator and information you provide when contacting us. Hosting and connected services may also process technical request information, such as IP addresses, for delivery and security.
How we use information
We use this information to monitor advertising spend, compare performance with the rules you choose, send notifications, authenticate authorized responses and keep a record of the service's decisions. When you explicitly enable live controls, the service may reduce budgets or pause configured campaigns or ad sets. Shadow mode simulates those actions without changing Meta budgets or delivery.
We also use operational information to diagnose failures, prevent duplicate actions, protect access, respond to support and deletion requests, and meet applicable legal obligations. We do not sell information obtained through AFF-Pacing or use connected account data for unrelated advertising.
Connected services and disclosure
Information is exchanged with Meta, RedTrack and Slack as needed for the integrations you configure. For example, a Slack alert may include advertising identifiers, spend information and an incident reason. Choose channels and authorized responders appropriate for that information.
Hosting and infrastructure providers process information needed to deliver and secure the service. We may disclose information when required by law, to protect rights and security, or to a successor responsible for the service with appropriate safeguards. Each connected platform also applies its own privacy terms and retention practices.
Retention
Advertising observations are normally retained for up to 30 days. Settings, incidents, action history and audit records may remain longer while an account is connected or as needed to operate the service, resolve disputes, investigate incidents or meet legal obligations. You may request deletion as described below. Where backup copies exist, removal from those copies may follow the applicable backup lifecycle.
Security and your choices
Access to connected accounts depends on the permissions you grant. Keep credentials private, limit account and Slack access, and revoke integrations you no longer need. No online service can guarantee absolute security.
You can ask an authorized operator to disable monitoring, change rules, disconnect integrations or delete stored information. Disabling automation does not restore budgets or remove historical information. Revoking a Meta token stops future authorized access but does not by itself delete previously stored records.
Privacy rights and legal grounds
Depending on your location, you may have rights to access, correct, delete or receive a copy of your personal information, object to or restrict processing, or withdraw consent where processing depends on consent. Where relevant law requires a legal basis, we rely on providing the requested service, legitimate interests in operating and securing it, consent where required, or compliance with legal obligations. You may also contact your local data-protection authority.
Connected services and hosting providers may process information outside your country. Applicable protections depend on the provider and the relevant data-transfer requirements.
This website
These policy pages do not include advertising trackers, analytics scripts or a contact form. Standard hosting and security logs may still be generated when you visit.
Children
AFF-Pacing is intended for authorized business users, not for children. Contact us if you believe a child has provided personal information through the service.
Contact and changes
Send privacy requests to privacy@digitaloptimizer.app. See our data-deletion instructions for the information needed to identify your account. We may verify your authority before acting and will respond within the period required by applicable law.
We may update this policy as the service changes. The date above identifies the current version.
Privacy correspondence
Messages sent to our privacy address are forwarded through ImprovMX to our Google Workspace mailbox so we can respond to requests.