Privacy Policy

Last updated: October 24, 2026

This policy explains which personal data we process when you visit voltads.ai and when you use Voltads, and what rights you have.

1. Who is responsible

Martini & Radl OG
Garnisongasse 4/11
1090 Vienna, Austria
Email: office@ecombeat.com

For all privacy questions, write to office@ecombeat.com.

2. What Voltads is

Voltads is a remote MCP server. You add it to Claude Code or Codex, log in with Facebook, and your AI assistant can then read and manage your Meta ad accounts through the Meta Marketing API on your instruction.

Your videos and images are uploaded by your AI assistant straight from your computer to Meta. They never pass through or get stored on our servers.

3. Visiting our website

Our website is delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). To deliver and protect the site, Cloudflare processes technical data such as your IP address, browser type, the requested page and the time of the request. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and working website. Cloudflare is certified under the EU-U.S. Data Privacy Framework.

We load the Geist font from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your browser connects to Google servers for this, which transmits your IP address to Google. Legal basis: Art. 6(1)(f) GDPR, our interest in a consistent presentation.

X conversion tracking. On voltads.ai and on the Voltads login and payment pages we use the X pixel of Twitter International Unlimited Company (One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland). It tells us whether our ads on X lead to visits and to the steps that follow: opening the setup, copying the connection URL or command, connecting Voltads and subscribing. It also lets us show our ads on X to people who visited our site. For this the pixel sets cookies and sends X your IP address, browser details, the page you visit and these steps. X may process this data in the USA. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in measuring and improving our advertising. You can object at any time by blocking cookies from static.ads-twitter.com and ads-twitter.com in your browser, and in your X settings under Privacy and safety.

Website statistics. We count visits to voltads.ai with Cloudflare Web Analytics (Cloudflare, Inc., see above). It sets no cookies and does not identify or follow you across sites. It records the page, the referring site, your browser, device type, country and loading times, and shows us only totals. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding how our website is used.

4. Using Voltads

Facebook login. When you connect Voltads, Meta shares your Facebook user ID, your name and an access token with the permissions you approve in the login dialog (for example ads_management, ads_read, business_management, pages_show_list, pages_read_engagement and pages_manage_ads). We use them only to carry out what you ask your AI assistant to do. Legal basis: Art. 6(1)(b) GDPR, performance of our contract with you.

Access token. We store your access token encrypted and use it only for your requests. If your trial or subscription ends and you do not continue within seven days, we revoke it at Meta. For uploads, your AI assistant saves the token on your computer for one batch, in a file only your user account can read, and deletes it when the batch is done.

Voltads account. To subscribe, you create a Voltads account with your email address. It is run by Clerk, Inc. (USA), which processes your email address and sign-in data on our behalf. Legal basis: Art. 6(1)(b) GDPR.

Ad account data. Campaigns, ad sets, ads, creatives and performance data are fetched from Meta when your AI assistant requests them and passed back to it. We do not store this data beyond what a request needs, we do not sell it and we do not use it to train AI models.

Usage data. To run the free trial and subscriptions, to keep the service secure and to stay within Meta's limits, we record which functions you use, when, whether they succeeded, and the IDs and names of the ad accounts they concerned. We keep this for 90 days. Legal basis: Art. 6(1)(b) and (f) GDPR.

Error reports. When something goes wrong, we keep a technical error report for 30 days. It carries a pseudonymous code instead of your Facebook user ID. Our team is alerted about errors by Slack and by email; these alerts contain only the pseudonymous code. Server logs at Cloudflare are deleted after at most seven days.

Your AI assistant. Claude Code (Anthropic) and Codex (OpenAI) run under your own account with those providers. Whatever you and your assistant exchange is governed by their privacy policies, not ours.

5. Payments

Subscriptions are paid through Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe processes your payment details, and we receive your name, email address, billing address and payment status. Legal basis: Art. 6(1)(b) GDPR for the contract and Art. 6(1)(c) GDPR for our legal duty to keep invoices for seven years (§ 132 BAO).

6. Who receives your data

We share data only with service providers that we need to run Voltads and that process it on our behalf: Cloudflare (website, servers and database), Clerk (Voltads accounts), Stripe (payments), Resend (Plus Five Five, Inc., USA, delivers alert emails to our team) and Slack (internal alerts, pseudonymous codes only). Where a provider is outside the EU, the transfer is covered by the EU standard contractual clauses or the EU-U.S. Data Privacy Framework. Meta receives the requests your AI assistant makes through Voltads, because that is how your ads are read and changed.

7. Deleting your data

You can disconnect Voltads at any time: in Facebook, open Settings & privacy, then Settings, then Business integrations, and remove Voltads. This immediately revokes our access to your ad accounts. In the same place, Facebook lets you ask us to delete your data. You then get a confirmation code and a link where you can follow the status.

You can also email office@ecombeat.com from the address you signed up with, or tell us your Facebook user ID. We then revoke our access at Meta, delete your Voltads account and your records, anonymize your usage data and end a running subscription at the end of its period. This happens within 30 days, usually within minutes. Invoices we are legally required to keep stay with Stripe.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. To use these rights, email us.

You can also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at) or the authority in your country.

9. Changes

We update this policy when Voltads changes. The date at the top always shows the current version.