Ads portal privacy policy

This policy covers the Monastic Media ads portal at dashboard.monastic.media/ads-portal and its sign-up page on tools.monastic.media. For the data of your account, the data fiduciary is ECOMFIRST VENTURES (trading as Monastic Media), 401, 4th Floor, Kalp Business Center, Citylight, Surat, Gujarat 395007, India. Contact: support@monastic.media.

What we collect, and why

Data	Why
Business name, e-mail, WhatsApp number and business category, given at sign-up	To create your account, sign you in, reach you about your account and your ads, and check that your category is accepted.
If you use Google sign-in: the e-mail and name of your Google account	To sign you in. Google tells us these; we never see your Google password.
Where you came from: the ad or page tags in the link (utm), a random visit id, and Meta's click ids (_fbp, _fbc) when you came from our ads page	To know which of our own ads bring sign-ups. See "Our own ads" below.
A hashed form of your IP address and the times of sign-up attempts, and, once it is switched on, a Cloudflare Turnstile check on the sign-up form	To stop fake and repeated sign-ups.
Business details: what you do, what makes you different, services, area served, offers, website, Facebook Page and Instagram links, languages	To prepare your ads and decide where they run.
Photos and logos you upload	To make your ads. They are stored privately, and you can delete them in the portal.
GST details: legal name, GSTIN, billing address and state	To issue GST invoices (the state decides IGST, or CGST and SGST).
Payments	Handled by Razorpay. We receive the payment reference, amount and status, never your card or UPI details.
Campaign records: proposed ads, what you approved and when, budgets, the Facebook Page you linked and the permissions you gave, Meta's ad ids and spend reports, wallet entries	To run your ads, keep spend inside the budgets you approved, and keep a record of your approvals and your money.
Enquiries from your ads: what people type into your lead form, usually name, phone, e-mail, city and answers	To show them to you in your portal. For these, your business decides how they are used, and we process them for you. A business with no privacy page of its own links its forms to our lead form privacy notice.

AI writing

The text of your proposed ads is written by an open-source AI running on Cloudflare Workers AI. We send it your business details only. Your photos, e-mail, WhatsApp number, payments and enquiries are not sent to it. Cloudflare does not use this data to train AI or to improve its services. You read every proposed ad, and nothing runs until you approve it.

Our own ads

The sign-up page tools.monastic.media/ads-for-small-business loads the Meta Pixel. When you press its sign-up button, Meta receives an event with a random visit id. When you create an account, and when you first add funds, our server tells Meta through its Conversions API, with the same random id, Meta's click ids, and a hashed (SHA-256) copy of your e-mail, WhatsApp number and account id. Hashing lets Meta match the event to a Facebook or Instagram account without us sending the e-mail or number itself. For the first top-up, Meta also receives its amount. We use this only to see how Monastic Media's own ads work, and to improve them.

The portal itself, on dashboard.monastic.media, does not load the Meta Pixel. Accounts we make for testing are never reported to Meta.

What we never do

We never sell your data. We never use your details, photos or enquiries to train AI. We never contact the people who send you enquiries, and we never use them for our own marketing.

Who processes data for us

Provider	Purpose	Location
Supabase	Database, sign-in, private file storage and the server functions of the portal	Japan (Tokyo)
Meta Platforms	Running your ads and lead forms on Facebook and Instagram; counting sign-ups from our own ads (Meta Pixel on the sign-up page, Conversions API)	Ireland and United States
Razorpay	Payments	India
Cloudflare	Workers AI: writing the text of your ads from your business details. Turnstile: checking the sign-up form for robots, once switched on. Not used for AI training.	United States, on Cloudflare's global network
Google	Sign in with Google, if you choose it. Google Workspace: the e-mails we send you, such as sign-in codes and receipts.	Global

How long we keep it

Data	Kept
Account and business profile	While your account is open, then 90 days after it closes.
Photos, logos and proposed ads	Until you delete them, or 90 days after your account closes.
Enquiries from your ads	Until your business deletes them, at most 12 months after they arrive. All are deleted 90 days after your account closes.
Sign-ups that are never completed	The sign-up lapses after 24 hours. The sign-up check, with a one-way hash of the network address, is kept for 30 days to enforce the sign-up limits.
Invoices, payments, wallet entries and campaign records, including approvals	8 years, because Indian tax and accounting law require it.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask for a summary of your data, correction, deletion, or withdraw a consent you gave, by writing to support@monastic.media from the e-mail address of your account. Records the law makes us keep are anonymised where possible. If you sent an enquiry to a business through one of its ads, ask that business first; we will help it answer you.

Complaints can also go to our grievance officer, Om Panwala (Grievance Officer, Monastic Media), at support@monastic.media. See Contact and grievances.

Children

The portal is for businesses. It is not meant for anyone under 18, and we do not knowingly collect their data.

Cookies and storage

The sign-up page on tools.monastic.media sets Meta's advertising cookies _fbp (and _fbc when you arrive from one of our ads), as described in the tools shop privacy policy. The portal on dashboard.monastic.media keeps only what it needs in your browser to keep you signed in. You can block advertising cookies in your browser; the portal works the same without them.

Data outside India

Some of the providers above store or process data outside India, in the places listed. They do so under their own terms with us.

Last updated 18 October 2026. Questions: support@monastic.media.