This policy explains what data Subyect collects when you use the Subyect dashboard and the Subyect app for Meta, why we collect it, and what you can ask us to do with it. It applies to Subyect staff and to people at client companies who are invited to use the dashboard.
Who we are
Subyect is a creative agency based at Herengracht 451, Amsterdam, the Netherlands. For the data described here we act as the data controller for our own users and as a processor on behalf of the client company that owns an advertising account. You can reach us at info@subyect.com.
What the dashboard does
The dashboard is a private reporting and creative-strategy tool. It shows a client company the performance of its own advertising, the creative concepts Subyect makes for it, and analyses of those creatives. It is not a public app and it has no public sign-up.
Data we collect
- Account data. Your name, email address and login events, held by our authentication provider (Clerk) when you are invited to the dashboard.
- Advertising data from Meta. For each advertising account a client authorises through Meta Business Manager we read ads, ad creatives (images, videos and their text), and daily performance figures such as spend, impressions, clicks and conversions, including breakdowns by age, gender, placement and country as Meta provides them. We read this data only for accounts the client has granted us access to.
- Creative work. Briefings, concepts, personas and copywriting that Subyect creates for a client, held in our own tools (Notion and Figma) and mirrored into the dashboard.
- Usage logs. Technical logs of requests to the dashboard, used for security and to fix problems.
How we use Meta platform data
We use data received from Meta only to provide reporting, analysis and creative strategy to the client whose advertising account it belongs to. We do not sell it, we do not use it for advertising of our own, and we do not share it with anyone other than the client and the service providers listed below. Our use complies with the Meta Platform Terms and Developer Policies.
Service providers
We store and process data with Cloudflare (hosting, storage and background processing), Neon (database hosting), Vercel (dashboard hosting) and Clerk (authentication). Ad creatives and their text may be processed by AI model providers to generate the analyses shown in the dashboard. Each provider processes data on our instructions under its own data processing terms.
How long we keep data
We keep a client's advertising data and creative work for as long as Subyect works for that client, and delete it within 30 days after the relationship ends or on request. Account data is deleted when a user's access is removed. Technical logs are kept for at most 90 days.
Data deletion
You can ask us to delete your account data, or a client can ask us to delete all data held for its advertising accounts, by emailing info@subyect.com from an address associated with the account. We confirm the request and complete the deletion within 30 days. Removing the Subyect app from a Meta Business Manager stops new data from being read; data already held is deleted on request as described here.
Security
Data is encrypted in transit. Access to the dashboard is limited to Subyect staff and to the client users a client invites, and each client can only see its own data.
Your rights
Under the GDPR you can ask to access, correct, export or delete the personal data we hold about you, and object to or restrict its processing. Email info@subyect.com. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Cookies
The dashboard uses only the cookies needed to keep you signed in. It does not use advertising or tracking cookies.
Changes
We will post any change to this policy on this page and update the date at the top.