Privacy policy

Last updated 19 October 2026

Noctad ("we") operates noctad.com and the Noctad application. This policy explains what we collect, why, and how to remove it.

What we collect

Account data: name, email, WhatsApp number, password (hashed). Meta advertising data: when you connect an ad account through Meta's official API, we read campaign, ad set, ad and insight data (spend, results, metrics) and, if you enable it, make changes you or your rules authorise (pause, resume, budget changes). We store the access token encrypted. WhatsApp messages: messages you exchange with Nabih, including voice notes, to answer you and improve your account's memory. Usage data: pages visited, actions taken, device and browser information.

Why

To run the service you asked for: monitoring your ad accounts, acting inside your limits, sending reports and alerts, and billing. We do not sell your data and do not use your advertising data to train models shared with other customers.

Sharing

We use processors to run the service: Supabase (database and authentication, EU), Vercel (hosting), Meta (advertising and WhatsApp APIs), an AI model provider for analysis, and a payment processor for billing. Each receives only what it needs.

Retention and deletion

Data is kept while your account is active. You can disconnect an ad account at any time; its data is deleted within 30 days. You can delete your whole account from Settings or by request; see our data deletion page. You can also revoke Noctad's access from your Facebook settings.

Contact

hello@noctad.com · Casablanca, Morocco.