Senditor Request access

Security

Your ad account stays yours.

What Senditor can do in your Meta account, what it never does, and where your sign-in is kept.

We add paused ads. Nothing else.

Senditor can create three things in your ad account: images, ad creatives and ads. Every ad is created PAUSED, in the ad set you chose.

It can’t create a campaign or an ad set, and it never writes a budget, a bid or targeting, or switches an ad on.

A rule checks every write before it leaves our server, and stops any that breaks it.

You sign in on Facebook, not on our page.

We never see your Facebook password. Facebook shows you the four permissions we ask for, and you choose to allow them: manage ads, read ads, manage business assets and list your Pages.

Facebook then gives our server an access key, never your password. The key is kept in a file only our server can read, and it never reaches a page, a log or your browser.The key and your clients’ data are encrypted before they are stored, and the key never reaches a page, a log or your browser.

Your client approves the exact version.

They get one link. No account, no password. If an ad changes after their yes, that yes no longer counts, and you send a new link.

You can withdraw a link at any time, and every link expires.

Encrypted twice, kept in the EU.

Each client’s data is locked with its own AES-256 key, on top of Cloudflare’s own encryption. Your Meta sign-in, approval links, images and your clients’ notes are all encrypted.

Everything is stored in the EU, on Cloudflare. A stolen copy of our database reads as noise.

You can cut us off at any moment.

In Senditor, Disconnect unlinks a client from your ad account at once.

You can also remove Senditor in your Facebook settings, under Business integrations, and our access stops.

Deleting a client destroys its key, so its data can no longer be read, backups included.

Questions about security? Write to support@senditor.ad.