There is no code path in the product that writes to Meta. Not to pause an ad set, not to move a budget, not to change a single setting. Spendric reads, works out where your money is going, and tells you. What happens next is yours to do.
Handing an ad account to a piece of software is a real thing to be careful about, so the rest of this page is specific: what the code does, what we keep, what leaves our servers, and how to end it. Every claim below describes something you could go and check.
Nothing in Spendric edits, pauses, launches, or deletes anything in your Meta account. If an audit says a budget is in the wrong place, you go and move it — in Meta, in your own hands, after you have decided you agree.
The detail: every request Spendric makes to Meta goes through one function, and that function issues a read. There is no code anywhere in the product that sends a write to Meta — no create, no update, no delete. This is not a policy we promise to follow; it is a thing the product cannot do.
Spendric never asks for, and never receives, your Facebook password. What you give us by connecting is an access token that Meta issues, and we encrypt it before it goes anywhere near a database.
The detail: tokens are encrypted with AES-256-GCM, which protects the contents and also detects tampering — a value that has been altered fails to decrypt rather than quietly returning something wrong. The decrypted token exists only inside the server process making a request to Meta. It is never sent to your browser, and it is never written to a log.
Disconnecting is a link in the app, on the brand you connected — one click and a confirm. It deletes the stored token for that brand on the spot. You can also remove Spendric from your side entirely, in Facebook, under Business Integrations, without asking us for anything.
To delete your account and everything attached to it — audits, uploaded data, advisor conversations — email hello@spendric.com. The full instructions, including the Facebook side, are on the data deletion page.
You can run the free audit without making an account. If you do that and never come back, the audit does not sit on our servers indefinitely waiting for you.
The detail: a job runs once a day and deletes unclaimed free audits older than 90 days. The delete takes the whole record with it — the ad-set rows and the findings go too, not just the shell around them.
If you would rather not connect an ad account to a company you have just met, you do not have to. Export your ad sets from Meta as a spreadsheet and upload the file. You get the same audit.
The detail: that path touches Meta at no point — there is no connection, no token, and nothing for us to store on your behalf. The file itself is read in memory and discarded; what is kept is the normalized rows and the findings worked out from them. The trade-off is honest and worth knowing: without a connection there is nothing for us to re-read tomorrow, so daily monitoring needs a connected account.
The advisor is Anthropic Claude, so answering your question means sending something to Anthropic. Here is exactly what that is.
What is sent: your derived audit and your question. The audit block is your objective, your target cost per sale, your average order value, the reporting window, how many ad sets you have and how many are delivering, your total spend and total sales, your cost per sale, and then each finding — its type, its severity, the name of the ad set it is about, the plain-English explanation, and the suggested fix. Alongside it goes what you typed and the earlier turns of that same conversation.
What is not sent: your Meta access token, and your Meta login, which we do not have in the first place. Nor the spreadsheet, if you uploaded one — the raw file is not stored anywhere, so there is nothing to send.
One thing that is conditional: a stored, point-in-time capture of your website — its page title, description, and headings, taken when the account was set up — is included so the advice can be about your actual product rather than a generic store. That is a toggle in the advisor panel, it starts on, and turning it off stops the capture being sent. If you paste a URL into a question, that URL goes with the question, because you put it there.
The provider terms, including training, are set out in our AI notice.
If something here is not specific enough, ask — hello@spendric.com. The longer versions live in the Privacy Policy, the Terms of Service, and the AI notice.