Privacy Policy

Who We Are

Lanci ("we", "our", "the app") is a web-based tool that helps businesses launch and manage Facebook ad campaigns using AI. The application is accessible at gentle-daffodil-857905.netlify.app.

By using Lanci, you agree to the collection and use of information as described in this policy.

Information We Collect

We collect only the information necessary to provide our service:

• Account information — your name, email address, and password (hashed, never stored in plain text)
• Business information — your brand name, website, and country you provided during onboarding
• Facebook credentials — your Facebook access token, Ad Account ID, Page ID, Instagram ID, and Pixel ID — used solely to launch campaigns on your behalf
• Google Drive access — a read-only access token to your Google Drive, used only to list and access video folders you select for your ads
• Anthropic API key — your personal Claude API key, stored securely and used only to power the AI assistant in the app
• Campaign data — names, budgets, strategies, and ad copy for campaigns you create

How We Use Your Information

We use your information exclusively to operate the app:

• To authenticate your account and keep your data secure
• To launch Facebook ad campaigns on your behalf using your credentials
• To access video files in the Google Drive folders you select
• To power the AI assistant that helps you create and manage campaigns
• To save your campaign history so you can track and manage past campaigns

Google Drive Access

Lanci requests read-only access to your Google Drive (drive.readonly scope) for the sole purpose of listing folders and reading video files you select to use in your Facebook ad campaigns.

• We only access folders and files you explicitly select
• We never modify, delete, or upload anything to your Google Drive
• We never store or cache your Drive files on our servers
• Your Drive access token is stored locally on your device and in our database only to maintain your session
• You can revoke Drive access at any time from your Google Account settings

Data Storage & Security

Your account data is stored in a Google Sheets database secured by Google's infrastructure. Sensitive credentials (passwords, API keys, tokens) are encrypted or hashed before storage.

• Passwords are hashed using SHA-256 and never stored in plain text
• All data transmission is encrypted via HTTPS
• API keys and tokens are stored securely and never exposed to other users
• Campaign data is also cached locally on your device for offline access

Third-Party Services

Lanci integrates with the following third-party services to function:

• Facebook / Meta — to create and manage ad campaigns via the Facebook Marketing API
• Google Drive — to access video files for your ad creatives
• Anthropic Claude — to power the AI campaign assistant using your personal API key
• n8n — our automation backend that orchestrates campaign creation

Each of these services has its own privacy policy and terms of service that also apply to your use of their platforms.

Your Rights

You have full control over your data:

• You can update your account information at any time from Settings
• You can disconnect Google Drive or Facebook at any time from Settings → Integrations
• You can request deletion of your account and all associated data by contacting us
• You can revoke Google Drive access from your Google Account at myaccount.google.com/permissions

Cookies & Local Storage

Lanci uses your browser's local storage to cache your account data and campaign history for a faster experience. We do not use third-party tracking cookies or advertising pixels.

Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.