Privacy notice
How Metarial handles the personal data you and your team bring into the portal. Metarial is operated by Finsec Associates Limited, a company registered in England and Wales, trading as TriangleOS.
What we process
Account details (name and email), your workspace's campaigns and results, the records you add to your vaults (mobile numbers, chat handles, Page and account names), your Meta connection (an encrypted access token and the ad account, Page and pixel you choose), and billing details held by Stripe. We never see or store your full card number.
Where it is stored and who processes it
Workspace data is stored in Supabase in the EU (Zurich). Payments are processed by Stripe. AI features send the text you submit to Google's Gemini models; on Google's free tier Google may use prompts to improve its products, so don't paste confidential personal data into the AI tools. The live avatar is provided by Anam. Campaigns, audiences and conversion events you send go to Meta under Meta's own terms. The site runs on Cloudflare.
Your vaults stay yours
Vault records belong to your workspace and are visible only to the people you invite. They leave Metarial only when you choose Send to Meta, and only consented numbers are sent, hashed with SHA-256 first. We don't sell data and don't mix one workspace's records with another's.
Lawful basis and consent
You are the controller of the records you upload. You must have a lawful basis, normally consent, before using numbers or contacts for advertising, and a way for people to opt out. Metarial processes that data for you as your processor.
Retention and deletion
Records stay until you delete them or close the workspace. Disconnecting Meta deletes the stored token. Billing records are kept as long as UK tax law requires.
Contact
Privacy questions, access requests and deletion requests: privacy@metarial.xyz.
This summary is written for clarity and is not legal advice — have your own counsel review it before you rely on it commercially.