Privacy policy

Who we are

Nimbuz helps small businesses run ads on Facebook and Instagram. We provide software: you connect your own Page and your own ad account, and the service assembles and launches the ad once you confirm it.

Ads run in your own ad account and are paid for with your own card directly to Meta; we never take money for advertising. Our revenue is the subscription to the software.

What data we process

• Contact details: name, phone number, email address, Telegram identifier.
• Advertising data: the id and name of your Facebook or Instagram Page, ad texts and images, budgets, and the impression, click and spend statistics Meta reports.
• Requests people submit to you through the form in your ad: name, phone and any other fields you included in the form yourself.
• Conversations of your Page and Instagram account (Messenger and Instagram Direct), if you connect them: the other person’s name or handle, message text and attachments, time. We receive them from Meta with your permission and keep them only to show them to you in the app; they are deleted together with your account.
• Subscription payments: amount, date and transaction id. We never receive or store card details.
• Technical records: a log of our calls to Meta and of actions in the service, needed to investigate failures.

Why we process it

Only to deliver the service: to create and run your ads, to show you statistics and leads, to accept subscription payments, to answer you in support, and to meet legal requirements.

We do not use your data to show you someone else’s advertising and we do not build profiles from it.

Who we share it with

• Meta Platforms Ireland Ltd. / Meta Platforms, Inc. — to deliver the ads: Page data, ad texts and images, audience settings and budgets.
• OpenRouter, Inc. (USA) — routing requests to artificial intelligence models; the request is then processed by Anthropic PBC (USA) or Google LLC (USA), depending on the model. Sent: your Page name, the text of your posts, your brief, the ad copy and the link. Your phone number, email, name and Telegram identifier are never sent to the models.
• Telegram Messenger Inc. — delivering notifications about your ads, leads and new conversations to your chat with our bot: the notification text (it may include the other person’s name and the start of their message) and your Telegram identifier are sent.
• Eskiz (Uzbekistan) — delivering the login code by SMS: the phone number and the message text with the code are sent.
• Click (Uzbekistan) — accepting subscription payments: amount and transaction id. Card details are not passed to us and are not stored by us.
• Payme (Uzbekistan) — accepting subscription payments: amount and transaction id. Card details are not passed to us and are not stored by us.

We do not sell data and never use one client’s data for the benefit of another. The list of recipients may grow — the current version is always on this page.

Access to your Page and ad account

You grant access yourself through the official Facebook Login, and we use it solely to launch and analyse your advertising.

You can revoke it at any moment in your Facebook settings — after that we stop working with your Page. Ads that are already live keep running in Meta until you stop them yourself.

Data retention

Data is kept while you use the service, and afterwards only to the extent required for accounting and tax records.

We keep your customers' lead requests with no time limit — until you delete them. They are never erased automatically after a set period, including after your plan ends. A deleted request stays in the bin for 30 days (you can restore it) and is then erased; “Delete” in the bin erases it at once. Deleting the account erases all requests.

Facebook access tokens are stored encrypted and are deleted together with the connection.

How to delete your data

There are three ways, and any of them works:

• In the app: Profile → Delete account. This removes your profile, Facebook connections, Pages, ads, uploaded files and history.
• Through Facebook: Settings → Apps and Websites → Nimbuz → Remove, choosing data deletion. Facebook sends us the request, we delete the data automatically and issue a confirmation code.
• By email to our address, from the address or phone number the account is registered with — we delete it manually within 30 days.

Detailed data deletion instructions

What remains after deletion

Ads in your own Meta ad account are not stopped and not deleted — they belong to you.

We keep only the payment records we are legally required to keep: amount, date, plan and the transaction number in the payment system — not linked to you. They are never used for advertising and never shared.

So that the free trial cannot be claimed again, we keep an irreversible fingerprint of your sign-in method (Telegram, phone number, email or Google) marked “trial already used”. We do not keep the number, Telegram ID or email address itself, and they cannot be recovered from the fingerprint. Signing in again the same way gives no free days.

Contacts

Questions about your data: mail@nimb.uz