Privacy Policy — 草菴廣告中心
Last updated: 2026-11-11
1. Who we are
Herban Design (草菴, also known as Herban Studio; registered as 草菴行銷設計有限公司) is a small creative-led advertising agency based in Kaohsiung, Taiwan. We operate the Meta app "草菴廣告中心" (App ID 1724529592170371) and its connect page at https://connect.herbandesign-co.com. In this policy they are together called "the Service".
- Email: caoandesign@gmail.com
- Address: 2F, No. 351, Makadao Rd., Gushan Dist., Kaohsiung 804, Taiwan
2. Who this policy is for
The Service is a business tool. It is used by owners or authorized representatives of businesses who sign in with Facebook Login for Business and choose which Facebook Pages and ad accounts to connect. It is not meant for consumers and is not directed at anyone under 18.
Meta is a separate company. How Meta handles your information is described in Meta's own policies.
3. What we access through Meta
When you sign in, Meta lets us see the business portfolios, Pages and ad accounts your Facebook account manages, within the permissions you approve. We read their IDs and names to show you a list. You then choose which ones to link, and only those are saved in your connection record. While you are signed in, the connect page can show posts and performance for any of these assets; assets you did not link are not saved in your connection record.
| Permission | What we use it for |
|---|---|
pages_show_list | Show the Pages you manage so you can choose which to connect. |
business_management | See the business portfolios, ad accounts and Pages your account manages, so you can choose which to connect. |
pages_read_engagement | List your own Page's posts so you can pick one to promote. |
ads_read | Read performance summaries (impressions, reach, clicks, spend, results) for your ad accounts. |
pages_manage_ads | Create ads that use a post from your Page. Ads are always created paused. |
ads_management | Create ads from your Page posts (always created paused) and pause ads that are running. |
We do not access your followers' personal profiles, the names of people who commented or reacted, private messages, or any customer lists.
4. What we store
a. Connection record. Your app-scoped Facebook user ID, the ID and name of the business portfolio you choose (if any), the IDs and names of the Pages and ad accounts you connected, each ad account's currency, time zone and status, the time you connected and were last seen, and the version of these policies in effect when you linked.
b. Sign-in session. Your Meta access token is held only inside your sign-in session, encrypted (AES-256-GCM). A session ends after 30 minutes of inactivity or 2 hours at most, and our copy of the token is erased within about an hour after that. Pressing Sign out ends your session and erases our copy at once; it does not revoke the token at Meta or remove your connection record. The token Meta issues may stay valid on Meta's side for up to about 60 days; pressing "Disconnect & delete my data" also revokes it at Meta. We never renew or extend it.
c. Activity log. For safety and accountability we log each action taken on the connect page: time, a request ID, your app-scoped user ID, the type of event (for example viewing, creating a paused ad, pausing an ad, disconnecting), the IDs and names of the Pages, ad accounts and ads involved, the values before and after a change (including budget values that were checked), the safety checks that were applied, and the result. The log never contains access tokens. It is deleted after 90 days.
d. Duplicate-request protection. A request ID and its result (for example the ad name and budget used) are kept for 2 days so that pressing a button twice does not create two ads.
e. Deletion records. When you ask for deletion we keep a minimal record (confirmation code, app-scoped user ID, time, status) so that you can check the status of your request. We keep it for 1 year; after that the status link no longer finds the confirmation code.
f. What we do not store. Post content, performance figures and ad creative shown on the connect page are read live from Meta each time and are not saved by the connect page.
Cookies. The connect page sets one strictly necessary session cookie and a short-lived (10-minute) cookie that protects the login redirect. We use no analytics or advertising cookies and load no third-party scripts. Cloudflare, which protects the page, may set its own strictly necessary security cookie.
5. If you are a contracted client
If your business has a signed service agreement with us, we also use the access you granted (through this app or through Meta Business partner access) to manage and report on your advertising. In that case we additionally keep: ad performance figures and report history for your ad accounts, links to your Page posts used in production tracking, and internal settings for your account (for example budget limits you approved). We keep these for the term of the agreement and for 90 days after it ends, unless the law requires us to keep certain records longer (for example accounting records).
6. How we use the information
- Only to provide advertising and reporting services to the business that connected the assets.
- We do not sell Platform Data, do not share it with data brokers, and do not use one client's data for another client.
- We do not use Platform Data to build profiles of individuals.
- Every change to advertising is triggered by a person. On the connect page that person is you, and the only changes possible there are creating a paused ad and pausing a running ad.
7. Service providers
These companies process data on our behalf, under their own security commitments:
| Provider | Purpose | Location |
|---|---|---|
| Railway | Hosting of the connect page, our internal automation and the database | Singapore |
| Cloudflare | Network delivery and protection in front of the connect page | Global network |
| Slack | Internal notifications and approvals among our staff | United States |
| Notion | Internal production tracking and reports (contracted clients) | United States |
| Anthropic | Drafting plain-language summaries from aggregated ad performance figures (contracted clients); no personal data is sent | United States |
| LINE (LY Corporation) | Delivering reports to a contracted client's own LINE chat at the client's request | Japan |
If you only use the connect page and are not a contracted client, your data is handled by Railway and Cloudflare; our staff may also receive internal notices (through our internal automation and Slack) when a connection is made, an ad is created or paused on the connect page, or a deletion request needs manual handling (that notice carries the confirmation code, not your user ID). We keep copies of these notices for 90 days.
8. International transfers
Our database is hosted in Singapore, and some providers listed above are in the United States. By using the Service you understand that your information is processed outside Taiwan and may be processed outside your own country.
9. How long we keep it
| Data | Kept until |
|---|---|
| Connection record | You disconnect, remove the app, or ask us to delete it |
| Sign-in session and token | Until 30 minutes idle, 2 hours, or you press Sign out, whichever comes first; our copy of the token is erased within about an hour after that (at once on Sign out or Disconnect) |
| Activity log | 90 days |
| Duplicate-request protection | 2 days |
| Internal notices to our staff | 90 days |
| Deletion records | 1 year |
| Contracted-client reports and settings | Term of the agreement plus 90 days |
10. Your choices and rights
- Disconnect. On the connect page, press "Disconnect & delete my data". This revokes the permissions and deletes your connection record and sessions.
- Remove the app on Facebook. In Settings & privacy → Apps and websites, or Business settings → Integrations → Connected apps (Meta renames these menus from time to time). Meta notifies us and we automatically delete your connection record and sessions.
- Ask us. Email caoandesign@gmail.com. See our Data Deletion page: https://herbandesign-co.com/data-deletion.html
- Under Taiwan's Personal Data Protection Act you may ask to access, copy, correct, stop the use of, or delete your personal data. We answer access requests within 15 days and correction or deletion requests within 30 days.
11. Security
All traffic uses HTTPS. Session data is encrypted. The connect page's database account has only the rights it needs. Requests from Meta are verified by signature. Access tokens are never written to logs. We can switch the Service off at once if we detect a problem. If an incident affects your data we will notify you as the law requires.
12. Legal requests
We disclose data to authorities only when required by valid legal process. Unless the law forbids it, we will tell the affected client first.
13. Changes
If we change this policy we will update the date above. For significant changes we will notify contracted clients directly.
14. Contact
Herban Design · caoandesign@gmail.com · 2F, No. 351, Makadao Rd., Gushan Dist., Kaohsiung 804, Taiwan