1. Introduction
Welcome to BruteForce.ai ("we," "our," or "us"), a creative analysis SaaS platform that helps brands analyze their Meta (Facebook) ad performance.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at bruteforceai.rocketshiphq.com (the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
App Name: BruteForce.ai
App Purpose: Creative analysis platform for Meta advertising performance
Company: RocketShip HQ LLC
Contact: shamanth@rocketshiphq.com
2. Information We Collect
2.1 Information You Provide Directly
When you register for BruteForce.ai, we collect:
- Account Information: Email address, name, password (encrypted)
- Profile Information: Company name, role (optional)
- Project Data: Project names, custom notes, analysis preferences
2.2 Meta Platform Data
When you connect your Meta (Facebook) ad account through OAuth, we collect:
Ad Account Information:
- Ad account IDs and names
- Campaign names and IDs
- Ad set names and IDs
- Individual ad IDs and names
Ad Creative Assets:
- Video files from your ad campaigns
- Image files from your ad campaigns
- Ad copy and headlines
- Call-to-action buttons
Performance Metrics:
- Ad spend data
- Impressions, Clicks, Click-through rates (CTR)
- Cost per result
- Other standard Meta Insights metrics
Important: We ONLY access data from ad accounts you explicitly authorize. We do NOT access:
- Personal Facebook profiles
- Private messages
- Friend lists
- Non-advertising data
2.3 Automatically Collected Information
- Usage Data: Pages viewed, features used, time spent
- Device Information: Browser type, IP address (for security)
- Cookies: Session cookies for authentication
3. How We Use Your Information
3.1 Core Service Delivery
- Fetch and display your Meta ad creative assets
- Analyze ad performance using AI-powered tools
- Generate insights and recommendations
- Store your analysis history for future reference
- Enable project organization and collaboration
3.2 Service Improvement
- Improve our AI analysis algorithms
- Optimize platform performance
- Develop new features based on usage patterns
- Troubleshoot technical issues
3.3 Legal and Security
- Comply with Meta Platform Terms and policies
- Prevent fraud and unauthorized access
- Respond to legal requests when required
4. Data Storage and Security
4.1 Where We Store Your Data
- Cloud Storage: Google Cloud Platform (GCP)
- Ad videos and images stored in Google Cloud Storage (bruteforce-flask-storage)
- Encrypted at rest using Google-managed encryption
- Database: Google Firestore
- Analysis results, project data, account information
- Located in us-central1 (Iowa, USA)
- AI Processing: Google Vertex AI / Gemini
- Ad content analyzed using Google's AI models
- Processed in compliance with Google's data policies
4.2 Security Measures
We implement industry-standard security measures:
- Encryption: TLS/SSL for data in transit
- Authentication: Firebase Authentication with OAuth 2.0
- Access Control: Role-based access, user-specific data isolation
- Meta API Security: OAuth tokens stored securely, never exposed
- Regular Updates: Security patches applied promptly
4.3 Data Retention
- Active Accounts: Data retained as long as your account is active
- Deleted Accounts: Data permanently deleted within 30 days of account deletion
- Meta API Data: Cached for performance, refreshed on each import
- Analysis Results: Retained until you delete them or close your account
5. How We Share Your Information
5.1 We DO NOT Sell Your Data
We do not sell, rent, or trade your personal information or Meta ad data to third parties for marketing purposes.
5.2 Third-Party Service Providers
We share data with trusted service providers ONLY for service delivery:
Google Cloud Platform (GCP)
- Purpose: Cloud storage, database, AI processing
- Data: Ad videos, images, analysis results
- Location: us-central1 (Iowa, USA)
- Privacy Policy: https://cloud.google.com/terms/cloud-privacy-notice
Meta/Facebook
- Purpose: Fetch ad data via official Meta Marketing API
- Data: OAuth access tokens (never stored permanently)
- Privacy Policy: https://www.facebook.com/privacy/policy
5.3 Legal Requirements
We may disclose your information if required by law, such as:
- Responding to subpoenas or court orders
- Complying with Meta Platform Terms enforcement
- Protecting our legal rights and user safety
6. Your Data Rights
6.1 Access and Portability
- View all your stored data within the platform
- Export your analysis results at any time
- Request a full data export (contact us)
6.2 Correction
- Update your account information anytime
- Correct inaccurate project or analysis data
6.3 Deletion
- Delete individual projects and analyses
- Delete your entire account and all associated data
- Request complete data deletion (contact us)
6.4 Meta Connection Control
- Disconnect your Meta account at any time
- Revoke our app's access via Meta Business Settings
- Previously imported data remains until you delete it
6.5 How to Exercise Your Rights
To exercise any of these rights:
- In-App: Use account settings and project management features
- Email: Contact us at shamanth@rocketshiphq.com
- Response Time: We will respond within 30 days
7. Compliance with Meta Platform Terms
We comply with Meta Platform Terms 4.a and all applicable Meta policies:
- We provide this publicly accessible privacy policy
- We do not use Meta data for purposes beyond our disclosed use case
- We respect user permissions and only access authorized data
- We delete user data upon request or account disconnection
- We do not share Meta data with unauthorized third parties
Meta Platform Terms Reference: https://developers.facebook.com/terms/
8. Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.
9. Cookies and Tracking
We use minimal cookies:
Essential Cookies:
- Session authentication (Firebase Auth)
- User preferences (theme, layout)
Analytics: We do not use third-party analytics tracking cookies.
You can disable cookies in your browser, but this may limit Service functionality.
10. International Data Transfers
If you are accessing the Service from outside the United States:
- Your data may be transferred to and stored in us-central1 (Iowa, USA)
- We comply with applicable data protection laws (GDPR, CCPA, etc.)
- By using the Service, you consent to this transfer
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via:
- Email notification
- In-app notification
- Prominent notice on the website
Continued use of the Service after changes indicates acceptance.
12. Contact Us
If you have questions about this Privacy Policy or our data practices:
Email: shamanth@rocketshiphq.com
Website: https://bruteforceai.rocketshiphq.com
Company: RocketShip HQ LLC
Response Time: Within 72 hours
13. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), our legal basis for processing:
- Contract: Necessary to provide our Service
- Consent: You explicitly consent when connecting your Meta account
- Legitimate Interest: Improve Service and prevent fraud
- Legal Obligation: Comply with Meta Platform Terms
You have the right to withdraw consent at any time without affecting lawful processing before withdrawal.
14. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold (we do not sell data)
- Right to request deletion of personal information
- Right to non-discrimination for exercising your rights
To exercise these rights, contact us at shamanth@rocketshiphq.com.
15. Data Breach Notification
In the event of a data breach affecting your personal information:
- We will notify you within 72 hours of discovery
- Notification will include nature of breach and remedial actions
- We will comply with all applicable breach notification laws
Acknowledgment
By using BruteForce.ai, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.
BruteForce.ai Creative Analysis Platform
Operated by RocketShip HQ LLC
Last Updated: October 30, 2025