Scope and operator
This policy covers the company website and the independently operated local ByAds test service of 广州保贺发科技有限公司 (descriptive English name: Guangzhou Baohefa Technology Co., Ltd.; “we”). The associated Meta app is ByAds Paused Test.
Registered address: Room 401-2, No. 186 Dongxing Road, Donghuan Subdistrict, Panyu District, Guangzhou, Guangdong, China, 511400. Privacy contact: tarren@mybuildinglist.com.
The service is in controlled testing and does not offer public self-service registration. External customer access depends on applicable Meta authorization and review requirements. This website does not represent Meta certification, endorsement or approval.
Information we process
| Context | Information involved | Purpose |
|---|---|---|
| Website visits | Network records such as IP address, browser details, requested page, time and response status. | Page delivery, security and troubleshooting by the hosting provider. |
| Support and deletion requests | Your email, name, business or asset identifiers, request and necessary attachments. | Responding, checking identity and authority, and handling requests. |
| Meta authorization | App-scoped user ID, name, profile image URL, available email, granted permissions, tokens and expiry. | Identifying the authorized user and maintaining permitted API access. |
| Advertising tools | Authorized business assets, ad accounts and Pages; requested ad structures, status, performance data, video URLs, copy, destinations, operation results and object IDs. | Checking assets, retrieving data and performing authorized operations at your direction. |
The actual scope depends on your permissions and the features used. Requested permissions currently include public_profile, email, ads_read, ads_management, pages_show_list, pages_read_engagement and business_management; review the live consent screen. We do not ask you to give us your Facebook password or verification codes.
Purposes and authorization boundaries
We use information for requested connections, account checks, advertising operations, support and security diagnostics. Advertising changes require the relevant authorization. Controlled testing only permits creating paused ads within specified assets; granting permissions does not approve every advertising operation.
We do not sell Meta Platform Data or use it for profiling unrelated to the requested service. Tool results may be processed by your selected MCP client or AI assistant. Review that client’s and model provider’s data policies and configuration before connecting.
Local processing and storage
ByAds runs in an operator-controlled local environment. This public website stores no Meta access tokens and exposes no ad-management API. The current test deployment keeps server-side user records, Meta authorization records and session indexes in memory. Meta tokens are encrypted in their stored representation and decrypted when used. Restarting the service clears these in-memory records.
Local client credentials, diagnostic logs, exports, verification screenshots and support email may be retained separately and are not automatically erased by a restart. File access restrictions, token encryption and restricted interfaces reduce risk but cannot guarantee absolute security. A move to persistent storage or additional recipients will be reflected in updated information and authorization where required.
Service providers and international processing
- Meta provides login, permission management and advertising APIs, receiving the corresponding authorization and tool requests.
- Cloudflare currently relays the temporary HTTPS login callback and may process the one-time authorization code, state and connection metadata. The app secret remains local. The callback is separate from this website.
- Netlify hosts this static company website and may process network-access and security records needed to deliver it.
- Your chosen client or AI assistant may receive tool inputs and results, with further processing governed by its configuration and policies.
- Email services process support and deletion correspondence.
These providers may use infrastructure outside China. Local operation does not mean all processing stays on the computer or in China. This public website does not upload ad-account data, authorization tokens or original business-license documents. See the policies of Meta, Cloudflare and Netlify for their independent processing.
Cookies and tracking
This company website has no application cookies, online forms, advertising pixels or third-party analytics scripts. The host may still process access records for delivery and security. Meta login and local ByAds authorization use necessary session and security cookies within those services; these are separate from website advertising tracking.
Retention and deletion
Information is retained within the scope needed for authorized service, support and security. The current test version has no single automatic purge schedule for all local logs, exports or support email. Session expiry or a restart should not be treated as deletion of all data.
You may revoke Meta authorization and request access, correction or deletion by email. Requests are checked and handled manually, covering associated authorization and user records, client credentials, identifiable local exports and test materials under our control. Any legally required retention or separately held copies that cannot immediately be removed will be explained in our response. See data deletion instructions.
Your choices, contact and updates
You may choose not to connect, limit assets, or revoke access; dependent features may stop working. This service is intended for authorized business personnel, not children. Contact tarren@mybuildinglist.com if you believe we hold information we should not have or object to its processing. You may also raise a concern with an applicable data-protection authority.
Updates will show a revised date here. Material changes to purposes, recipients or permissions will be explained before continued use of the relevant service, with renewed consent where applicable.