Privacy Policy

Merci is a service run by theNetwork, a proprietorship owned by [PROPRIETOR NAME], with its address at [REGISTERED ADDRESS] (“we”, “us”).

For the information about you and your business that you give us, we decide why and how it is used, so we are the “Data Fiduciary”. For the personal data of your own customers that you bring to us (for example email addresses for email marketing), you decide why and how it is used and we only process it on your instructions. In that case you are the Data Fiduciary and we are your “Data Processor”.

• Account and business details: your name, email address, phone number, business name, website, what you sell, your brand and customers, and the budget limit you set.
• Your Meta account data: when you connect your Meta ad account and you grant permission, we can see and, within the permissions you grant, act on your ad accounts, pages, campaigns, ads, creatives, audiences, spend and performance results. We also hold the access tokens that let us act for you.
• What we create for you: your customer profile, brand profile, ad creatives, reports and a log of every action taken in your account.
• Your customers’ data (email marketing): email addresses, phone numbers and records of when and how each person agreed to hear from you.
• Payment and billing details: handled by our payment provider. We do not store full card numbers. We keep invoice and GST details.
• Technical data: IP address, device and browser type, and security logs.
• Messages: what you send us when you contact support.

• To run the service you asked for: learn your business, build your profiles, create ads, launch them paused, and manage them inside the limits you set.
• To send you reports and service messages.
• To keep a record of every action for your safety, for security, and to find and fix problems.
• To take payment and meet tax and accounting rules.
• To prevent misuse and protect your account and ours.
• To meet legal obligations.

We use data we receive from Meta only to provide the service to you. We do not sell personal data. We do not use it for advertising of our own.

We process your personal data with your consent, which you give when you sign up and connect your accounts, and for the limited “legitimate uses” the Act allows, such as meeting a legal obligation. You can withdraw consent at any time. Withdrawing is as easy as giving it (see section 9). If you withdraw consent we may no longer be able to provide the service.

We use AI models from other companies to study your business and ads and to write and check ad content. We send them only what a task needs, such as business descriptions, ad content and performance numbers. We do not knowingly send your customers’ personal contact details, such as email addresses or phone numbers, to AI models.

• Meta, because you ask us to create and manage ads in your Meta account.
• Service providers who work for us under contract: hosting, AI model providers, payment processing, email delivery and similar.
• Authorities, courts or regulators when the law requires it.
• A buyer or successor if our business is transferred. We will tell you first.

We do not sell your personal data.

Our providers may process data on servers in India or in other countries. Where Indian law allows transfers abroad, we make them only to providers that protect data appropriately.

We keep your data while your account is active. When you close your account or ask us to delete your data, we delete it within 30 days, except records we must keep by law, such as tax and accounting records, which we keep for the period the law requires. Backups are overwritten on their normal cycle.

You can ask us to delete your data at any time:

• Disconnect Meta: remove Merci from the apps and integrations in your Meta business settings. This stops our access straight away.
• Email us: write to [CONTACT EMAIL] from the email address on your account with the subject “Delete my data”. We will confirm that we received it and tell you when deletion is complete.
• Through Meta: if you ask Meta to delete the data it shared with us, we receive that request, delete the data, and give you a link and confirmation code to check the status.

We will tell you if we cannot delete something because the law requires us to keep it, and why.

Under the Act you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it;
• make a complaint to us about how we handle your data (see section 14);
• name another person to exercise these rights for you if you die or cannot act.

Email [CONTACT EMAIL] to use any of these rights. We reply within the time the law requires. If you are not satisfied with our reply you can complain to the Data Protection Board of India.

We use reasonable security measures, including encrypting data in transit, limiting who can access it, and protecting access tokens. If there is a personal data breach we will tell the Data Protection Board and the people affected as the law requires.

Merci is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.

Our website uses only the cookies and storage it needs to work. We do not use advertising cookies. If we add analytics or other tools later, we will update this policy and ask for your consent where needed.

Grievance contact: [GRIEVANCE OFFICER NAME], theNetwork, [REGISTERED ADDRESS]. Email: [CONTACT EMAIL].

We may update this policy. When we make a material change we will tell you by email or on the site before it applies. The date at the top shows when it was last updated.