STSearch Privacy Policy

Effective date: August 7, 2026
Last updated: August 7, 2026

STSearch is a product operated by CyberSleuths, LLC, a Delaware limited liability company ("CyberSleuths," "STSearch," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you access or use the STSearch website, application, and related services (collectively, the "Service").

Business address: 2261 Market Street, STE 86474, San Francisco, California 94114, United States
Privacy contact: heyitssugar@outlook.com

1. Scope of this Policy

This Policy applies to information processed through STSearch. It does not govern the independent privacy practices of Meta Platforms, Inc. or other third parties. Your use of Meta products remains subject to Meta's own terms and privacy policies.

STSearch is initially designed as a restricted, internal, read-only Meta Ads monitoring application for one authorized operator and one authorized Meta advertising account. It is not intended for children or for consumer social-networking use.

2. Information We Collect

Depending on how the Service is configured and used, we may process the following categories of information.

2.1 Identity and account information

• Your app-scoped Meta user identifier.
• Your Meta display name and profile information made available through the permissions you grant.
• Your email address, when provided by Meta or directly by you.
• Internal account status, allowlist status, authentication timestamps, and session records.

2.2 Meta advertising account information

When an authorized operator separately connects a Meta advertising account, STSearch may process:

• Meta Business and advertising account identifiers and names.
• Campaign, ad set, ad, and creative identifiers and configuration metadata.
• Delivery and learning-status information.
• Advertising performance information, including spend, impressions, reach, clicks, conversions, conversion value, CPA, ROAS, CTR, CPM, CVR, frequency, and related reporting fields.
• Account timezone, currency, attribution settings, reporting dates, and synchronization status.
• Meta API responses required to ingest, reconcile, troubleshoot, and validate the connected advertising data.

The initial STSearch MVP requests read-only advertising access. It is not designed to change campaign budgets, bids, statuses, targeting, creatives, or other advertising settings.

2.3 Authentication and technical information

• OAuth authorization data and authorization status.
• Encrypted Meta access credentials required to perform authorized read-only synchronization.
• Session identifiers, security events, access logs, IP address, browser information, device information, and timestamps.
• Synchronization logs, API request metadata, rate-limit information, error records, and data-health diagnostics.

We do not intentionally place Meta access tokens, app secrets, authorization headers, or other credentials in browser-visible logs or public pages.

2.4 Information you provide directly

We may collect information you send to us through support requests, privacy requests, account configuration, or other communications.

3. How We Use Information

We may use information to:

• Authenticate and authorize the permitted STSearch operator.
• Connect and display an authorized Meta advertising account.
• Retrieve, normalize, store, reconcile, and present historical advertising information.
• Maintain synchronization, data freshness, duplicate detection, missing-date checks, and data-health reporting.
• Secure the Service, detect misuse, investigate errors, and maintain audit records.
• Respond to support, privacy, security, and data-deletion requests.
• Maintain, debug, and improve the reliability and usability of the Service.
• Comply with applicable law, legal process, and enforceable governmental requests.
• Enforce our Terms of Service and protect our rights, users, systems, and third parties.

We do not sell personal information. We do not use Meta Platform Data for unrelated advertising, data brokerage, credit eligibility, employment eligibility, insurance eligibility, or similar purposes.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we process information based on one or more of the following:

• Your consent and the permissions you grant through Meta.
• Performance of a contract or steps requested before entering a contract.
• Our legitimate interests in operating, securing, maintaining, and improving the Service, provided those interests are not overridden by your rights.
• Compliance with legal obligations.

You may withdraw a permission or disconnect Meta access, but doing so may prevent STSearch from providing connected-account features.

5. How We Share Information

We may disclose information only as reasonably necessary to operate the Service, including to:

• Hosting, database, infrastructure, monitoring, backup, authentication, security, and support providers acting on our behalf.
• Meta, where required to complete authorization, validate credentials, retrieve authorized data, or comply with Meta's platform requirements.
• Professional advisers such as lawyers, accountants, auditors, and insurers under appropriate confidentiality duties.
• Government authorities or other parties when required by law, legal process, or to protect rights, safety, security, and integrity.
• A successor or transaction participant in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.

We require service providers to process information only for authorized purposes and to apply reasonable safeguards.

6. Meta Platform Data

Information obtained from Meta is processed only for the user-facing functionality described in this Policy and in accordance with applicable Meta Platform Terms and developer policies.

STSearch limits access to authorized personnel and systems. We do not sell Meta Platform Data, use it to build or augment unrelated user profiles, or disclose it except as permitted by applicable terms and law.

If Meta requires deletion, restriction, review, or certification concerning Platform Data, we will take the actions required by applicable Meta terms.

7. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including security, reconciliation, backup, dispute resolution, legal compliance, and enforcement.

The intended initial retention approach is:

• Active authentication and account-connection information: while the connection or account remains active, plus a limited period required for security and legal records.
• Encrypted Meta credentials: until the connection is revoked, expires, becomes invalid, or is deleted.
• Raw Meta API payloads used for troubleshooting and reconciliation: generally up to 30 days, unless a shorter or longer period is reasonably required.
• Normalized historical advertising metrics and reconciliation records: while the operator uses the Service or until deletion is requested, subject to legal and backup limitations.
• Security, synchronization, and audit logs: for a period reasonably necessary to protect and operate the Service.

Backup copies may remain temporarily after deletion until overwritten through the normal backup-retention cycle. Deleted information will not be restored to active use except when necessary for disaster recovery, security, or legal compliance.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including restricted access, encrypted transport, server-side sessions, credential encryption, secret separation, logging controls, backups, and access monitoring.

No security measure is perfect. We cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur.

9. International Processing

CyberSleuths, LLC is a United States company, and service providers may process information in the United States or other countries. Those countries may have privacy laws different from those where you live. Where legally required, we use appropriate transfer mechanisms and safeguards.

10. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Request access to information associated with you.
• Request correction of inaccurate information.
• Request deletion of information.
• Request restriction of or object to certain processing.
• Request a portable copy of certain information.
• Withdraw consent where processing is based on consent.
• Appeal or complain to an applicable data-protection authority.

To submit a request, email heyitssugar@outlook.com with the subject STSearch Privacy Request. We may need to verify your identity and authority over the relevant STSearch or Meta account before completing the request.

Authorized agents may submit requests where permitted by law, but we may require proof of authorization and identity verification.

11. Disconnecting Meta and Deleting Data

You may revoke STSearch's Meta permissions through your Meta account settings. You may also request deletion by following the instructions at https://stsearch.com/data-deletion.

Revoking Meta access prevents future authorized retrieval but may not automatically delete information already stored by STSearch. Submit a deletion request if you also want eligible stored information removed.

12. Children's Privacy

The Service is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can investigate and delete it where required.

13. Changes to this Policy

We may update this Policy when our Service, data practices, legal obligations, or platform requirements change. We will post the updated version with a revised "Last updated" date. Where required, we will provide additional notice or obtain consent before materially different processing begins.

14. Contact Us