1. Who we are
Tru3Meta is a business software service operated by GoodWhale Pte. Ltd. (“Tru3Meta”, “we”, “us”, or “our”). The service helps authorized teams review Meta advertising performance, prepare changes, and approve controlled actions.
Privacy questions and requests may be sent to hello@tru3meta.com.
2. Information we collect
Account and workspace information
We collect information needed to create and secure your account and workspace, such as your name, email address, role, workspace membership, authentication records, and support communications.
Meta authorization and business data
When an authorized workspace owner or administrator connects Meta, we receive the permissions and business assets selected during Facebook Login for Business. Depending on the permissions granted, this can include Meta user identifiers, business portfolio details, Page and ad account identifiers, campaign configuration, delivery status, advertising insights, and lead-form information.
Meta access tokens and Page tokens are encrypted at rest. They are used by our server to make authorized API requests and are not returned to the browser or exposed to the conversational model.
Workspace content and activity
We process conversations, uploaded campaign assets, goals, drafts, approvals, automation definitions, and audit events created through the service. We also collect ordinary technical and security data, such as timestamps, request metadata, error information, and device or browser details needed to protect and operate the service.
3. How we use information
- Provide, secure, and support the Tru3Meta service.
- Connect the business assets you explicitly authorize.
- Retrieve and present advertising performance and account data.
- Prepare drafts and execute a Meta action only after the required in-product approval.
- Maintain audit, security, reliability, and reconciliation records.
- Respond to support, privacy, and legal requests.
- Improve service quality using aggregated or de-identified analysis.
Where applicable, we rely on the performance of our contract with you, our legitimate interests in providing a secure business service, your consent, and compliance with legal obligations.
4. How information is shared
We share information only as needed to provide the service, including with Meta when you authorize or approve a Meta API action; hosting, database, security, analytics, and AI service providers acting for us; professional advisers; or authorities where disclosure is legally required. Providers are given only the information needed for their function and are subject to appropriate obligations.
We do not sell personal information or Meta business data.
5. Your Meta connection
Your organization controls which Meta business assets it selects and which permissions it grants. You can revoke Tru3Meta from your Facebook business integrations settings to stop future API access. Revoking access does not automatically erase records already held by Tru3Meta; use our data deletion process for that request.
6. Retention and deletion
We retain information while your account or workspace is active and for as long as reasonably necessary to provide the service, resolve disputes, maintain security and audit integrity, and meet legal obligations. Retention periods vary by record type. When a verified deletion request applies, we delete or de-identify the relevant data unless retention is required by law, security, fraud prevention, or the establishment or defense of legal claims. Residual copies may remain temporarily in protected backups until they expire.
7. Security and international processing
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption of sensitive credentials, tenant-level authorization, and auditable approval records. No service can guarantee absolute security. Our providers may process information in countries other than yours, subject to applicable transfer safeguards.
8. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. To make a request, email hello@tru3meta.com. We may verify your identity and authority over the relevant workspace before acting on the request.
9. Children
Tru3Meta is a business service and is not directed to children. You must be legally able to enter into a binding agreement and authorized to act for the organization whose assets you connect.
10. Changes to this policy
We may update this policy as the service or applicable requirements change. We will post the updated version here and revise the date above. Material changes may also be communicated through the service or by email where appropriate.