Privacy Policy
Effective 2026-11-02
Blair Gossett (blairgossett.dev) is an internal marketing administration panel operated by the Blair Gossett team. It is not a consumer product: only invited team members can sign in. This policy explains what data the panel handles, including data received from Meta Platforms (Facebook, Instagram and the Marketing API).
Who this applies to
This policy applies to team members who sign in to the panel and to the Facebook account that authorizes the panel’s Meta app to manage the team’s own advertising assets. The panel does not collect data from the general public and does not offer Facebook Login to anyone outside the team.
Data we receive from Meta
When an authorized team account connects the app, the panel receives, through the Meta Marketing API and Graph API:
- An access token for that account, its Meta user ID, the permissions granted and the token’s expiry.
- The ad accounts, campaigns, ad sets, ads, creatives, pixels, Facebook Pages and Instagram accounts the account can access.
- Advertising performance insights for those ad accounts (spend, impressions, clicks, conversions and similar aggregate metrics).
How we use it
Meta data is used only to run the team’s own advertising: creating and publishing campaigns, ads and creatives, managing targeting and budgets, and reporting on performance inside the panel.
We do not sell Meta data or any other data, we do not use it to build profiles of individual people, and we do not share it with data brokers or advertising networks. We do not use it for any purpose other than those described here.
Data about team members
For team members we store an email address, a display name, role and permission settings, and records of actions taken in the panel (for example who created or published a campaign). Optional integrations a member sets up, such as a Slack member ID for notifications, are stored as well. Product usage analytics are collected to improve the panel.
Where data is stored and who processes it
Data is stored in a managed PostgreSQL database and an analytics warehouse and is served by a hosting provider. Access tokens are stored server-side, are never shown in the panel and are readable only by the server. Service providers process data on our behalf solely to provide the panel: hosting, database, analytics warehouse, file storage, team messaging and AI features used to draft ad copy and creatives. They are bound to use it only for that purpose.
Retention
Access tokens are kept until they expire or are revoked. Advertising and performance data is kept while the team needs it for reporting. Team member data is kept while the member has access and is deleted on request after that.
Deleting your data
You can remove the app’s access and ask for your data to be deleted at any time. See blairgossett.dev/data-deletion for instructions.
Security
Access to the panel requires an invitation and a signed-in, active account, and each section is limited by role-based permissions. Credentials are kept server-side and transmitted only over HTTPS.
Changes and contact
We will update this page when our practices change; the effective date above shows the latest version. Questions or requests: privacy@blairgossett.dev.