Privacy Policy
Updated 2026-09-21 · UnderMetrica, an internal service of Underdog
This is the privacy policy of Underdog for UnderMetrica ("the service"), the data controller for everything described below. It explains what data the service processes, why, how long it is kept and how to have it deleted.
Who can use the service
UnderMetrica is an internal tool. Its users are employees and contractors of Underdog who buy advertising for the company; access is granted by the company and protected by a password. The service is not offered to the public and does not collect data about people outside the company.
What we collect
- Account data: the sign-in name we issue, session cookies, and a log of sign-in attempts (time, result, IP) for security.
- Facebook profile of the employee who connects an account: user ID, name, e-mail address, granted permissions, and the access token itself.
- Ad accounts the employee is authorized to access: name, currency, time zone, status and disable reason, spend limit, balance.
- Ad structure: campaigns, ad sets and ads — identifiers, names, statuses.
- Delivery insights per day at ad level: amount spent, impressions, clicks, results (
ads_read). - Business Portfolio administrators of a connected portfolio — name, e-mail, role, and pending administrator invitations — read only to raise a security alert when privileged access changes (
business_management). - Our own business data: conversions and revenue from our tracker and affiliate reports, which we match against the spend above.
We do not read messages, friends, the feed, photos or any data unrelated to advertising accounts, and we never publish anything on an employee's behalf. No special categories of personal data are processed.
Why we process it
To show a media buyer the spend, delivery and result of the ad accounts they manage; to match that spend against our own revenue data; to alert the team about dead tokens, stalled accounts, spend anomalies and changes in privileged access; and, where an employee enables it, to apply automation rules to the accounts they already manage. The legal basis is our legitimate interest in running and controlling our own advertising, and the employment or contractor relationship with the users.
We do not use Meta data for consumer profiling, retargeting, resale, sharing with third parties or advertising to anyone. Data obtained for one ad account is used only to measure and optimize that account.
Where it is stored and for how long
- A private PostgreSQL database hosted by Railway in the EU; access is limited to the service and its administrators.
- Access tokens are encrypted with AES-256-GCM and used only by server-side sync jobs; they are never sent to the browser.
- The employee's Facebook profile and token are kept while the connection is active and are deleted when the app is removed or deletion is requested.
- Daily spend and delivery aggregates are kept for up to 24 months as internal financial records; after a deletion request they hold no link to a Facebook profile.
- Sign-in logs and API call counters are kept for 30 days.
- Business Portfolio administrator records are kept while the portfolio stays connected and are removed with it.
Who else sees the data
Only authorized employees and contractors of Underdog. Our infrastructure providers (Railway, as hosting) process the data on our behalf under their own terms. We do not sell data, do not share it with advertising networks and do not transfer it outside these processors.
How to delete your data
In Facebook: Settings & privacy → Settings → Apps and websites → UnderMetrica → Remove.
Meta then calls our data deletion callback and we erase the access token, the Facebook profile and its links
to ad accounts, and return a confirmation code with a status page at
/meta/data-deletion/status?code=…. You can also write to yanyermal@gmail.com and we will delete the data
manually, confirming within 30 days. The same address can be used to ask which data we hold about you or to
have it corrected.
Changes
If this policy changes we update the date at the top of this page and notify users inside the service.
Contact
Underdog · yanyermal@gmail.com