Privacy policy

Who we are

Yoada Social is operated by Napada Limited, [Registered office address] (company number [Company number]). In this document, “we”, “us” and “our” refer to Napada Limited.

We are the data controller for personal data collected through this website and for account data of our clients. For questions or to exercise your rights, contact privacy@yoadasocial.com.

What we collect

When you contact us or request an audit

• Your name, work email, company name and website.
• Anything you choose to tell us, such as your platforms and approximate ad spend.

When you use the platform

• Account details: name, email address, role and the workspace you belong to.
• Usage data: actions in the app, such as approvals, edits, dismissals and exports, which form the change log.
• Billing details handled by our payment provider. We do not store full card numbers.

When you connect Meta or Pinterest

You sign in with Meta or Pinterest and choose which ad accounts to connect. With the permissions you grant, we access:

• Ad account, campaign, ad set and ad information, including budgets, settings and status.
• Aggregated performance metrics such as impressions, reach, clicks, spend, conversions, engagement and video views.
• Creative assets in your ad accounts and assets you approve for upload.
• The basic profile information the platform shares to identify the person who connected the account.

We use only the permissions you grant, only for the ad accounts you select, and only to provide the service to you. We do not access accounts you have not connected.

How we use it

• To provide reporting, suggestions and creative drafts for your connected accounts.
• To carry out changes in Meta or Pinterest only after you approve them, within your spend caps, and to log them so they can be rolled back.
• To calculate and invoice the share of managed ad spend, based on spend reported by the platforms.
• To respond to enquiries, provide support and keep the service secure.
• To improve the service. We do not sell personal data or platform data, and we do not use it for advertising to third parties.

Legal bases

• Contract: to provide the platform you signed up for.
• Legitimate interests: to answer enquiries, secure and improve the service.
• Legal obligation: to keep invoices and accounting records.
• Consent: where we ask for it, for example for non-essential cookies. You can withdraw it at any time.

Who we share it with

We share data only with service providers that help us run Yoada Social (hosting, AI model providers, email, payments and customer support), under contracts that require them to protect it and use it only on our instructions, and with Meta or Pinterest when we carry out a change you approved. We may disclose data when the law requires it.

International transfers

Where a provider processes data outside the UK or the European Economic Area, we rely on adequacy decisions or standard contractual clauses to protect it.

How long we keep it

• Platform data from connected accounts: while the account is connected, and deleted within 30 days of disconnection or account closure.
• Change log and account data: for the life of your account, then deleted within 90 days unless we must keep it longer by law.
• Invoices and accounting records: for the period required by tax law.
• Enquiries: up to 24 months after our last contact.

Your rights

You can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent. Write to privacy@yoadasocial.com. You can also complain to your local data protection authority.

To disconnect Meta or Pinterest and have the related data deleted, see data deletion.

Security

Access tokens are stored encrypted, access is limited to people who need it, and every action taken on your ad accounts is logged.

Cookies

See our cookie policy.

Changes

We will update this page when our practices change and show the date of the latest version at the top.