プライバシーポリシー
最終更新 6月 2026
This Privacy Policy explains how CO8 (“CO8”, “we”, “us”, or “our”), operating the website co8.ai and the CO8 application, collects, uses, shares, stores, and protects your information. It also describes the choices you have, including how to request deletion of your data.
CO8 is a creative-operations platform that helps brands create, test, and scale advertising creatives. Where you choose to connect your Meta (Facebook and Instagram) accounts, we process certain data made available through the Meta platforms strictly to provide the features you request. This policy forms part of, and should be read together with, our Terms of Service and Cookie Policy.
1. Who is responsible for your data
CO8 (co8.ai) is the controller of personal data processed through this site and the CO8 application. For any privacy question or request, contact us at [email protected].
2. Information we collect
2.1 Information you provide directly
- Account & contact details — such as your name, email address, company, and the messages you send us through our contact form or by email.
- Billing information — where you purchase a paid plan, payment is processed by our payment provider; we receive limited transaction details (such as plan, status, and the last digits of a card) but not your full card number.
- Content you upload — brand assets, briefs, images, and other materials you provide so that CO8 can generate or manage creatives for you.
2.2 Information we receive from Meta platforms
If you connect a Facebook or Instagram account, CO8 receives data through Meta’s APIs only with the permissions you grant during authorization. Depending on the features you enable, this may include:
- Facebook Login — your name, profile picture, email address, and Facebook user ID, used to create and authenticate your CO8 account.
- Meta Marketing API — the ad accounts, campaigns, ad sets, ads, ad creatives, audiences, and performance/insights metrics associated with the accounts you authorize, so CO8 can create, manage, and report on advertising on your behalf.
- Pages & Instagram management — the Facebook Pages and Instagram business accounts you connect, including profile details and the posts, media, and assets needed to publish or manage creatives you request.
- Pixel & Conversions data — measurement and conversion event data from the Meta pixel or Conversions API for advertising accounts you authorize, used for performance reporting and optimization.
We access this data solely to deliver the functionality you ask for. We do not request permissions you have not approved, and you can revoke access at any time (see Data deletion).
2.3 Information collected automatically
- Technical & usage data — IP address, browser and device type, pages viewed, referring URLs, and timestamps, used to operate, secure, and improve the service.
- Cookies & similar technologies — as described in our Cookie Policy.
3. How we use your information
- To provide, operate, and maintain the CO8 platform and your account.
- To create, test, publish, manage, and report on advertising creatives and campaigns you request, including via the Meta Marketing API.
- To authenticate you and keep your account secure.
- To respond to your enquiries and provide customer support.
- To send you service messages and, where you have opted in, product updates.
- To analyze usage and improve the performance, features, and safety of the service.
- To detect, prevent, and address fraud, abuse, and security incidents.
- To comply with legal obligations and enforce our terms.
4. How we share your information
We do not sell your personal data. We share information only as follows:
- Service providers (subprocessors) — hosting, storage, analytics, payment, and communication providers who process data on our behalf under appropriate confidentiality and data-protection obligations.
- Meta platforms — to deliver the advertising features you request, we exchange the necessary data with Meta through its APIs, subject to your authorization.
- Legal & safety — where required by law, regulation, legal process, or to protect the rights, property, or safety of CO8, our users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information consistent with this policy.
5. Use of Meta Platform data
Our use and transfer of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements. We use Meta data only to provide and improve the features you have requested, we do not sell it, and we do not use it for any purpose unrelated to operating CO8 for you.
6. Data retention
We keep personal data only for as long as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you disconnect a Meta account or close your CO8 account, we delete or anonymize the associated data within a reasonable period, except where retention is required by law.
7. Data deletion & your control
You can request deletion of your data at any time using either method below:
- Email us at [email protected] with the subject “Data Deletion Request”. We will verify your request and delete your personal data, including data obtained from Meta, within 30 days.
- Revoke access from Meta — go to your Facebook Settings & Privacy → Settings → Apps and Websites, remove “CO8”, and any active tokens are invalidated. You can also disconnect Meta accounts from within the CO8 app.
When you revoke access or request deletion, we stop processing the relevant Meta data and remove it from our active systems, subject to the limited legal retention noted above.
8. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with your local data-protection authority.
9. International transfers
CO8 operates globally, and your information may be processed in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards consistent with applicable data-protection laws.
10. Security
We use technical and organizational measures — including encryption in transit, access controls, and restricted credentials — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.
11. Children’s privacy
CO8 is a business tool not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact [email protected] and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where changes are material, provide additional notice. Continued use of CO8 after an update means you accept the revised policy.
13. Contact us
Questions, requests, or concerns about this policy or your data? Email [email protected] or reach us via the contact page.