01 Who We Are
This Privacy Policy explains how YKEY DIGITAL A.N. LTD, operating the Y360 brand (“Y360”, “we”, “us”, or “our”), collects, uses, processes, and protects information in connection with our website, advertising services, and authorized integrations with third-party platforms, including the Meta Marketing API.
- Legal entity
- YKEY DIGITAL A.N. LTD
- Country
- Israel
- Website
- https://y360.co.il/
- Privacy contact
- assafnoff@ykeydigital.com
This Privacy Policy also applies to the Meta application operated by YKEY DIGITAL A.N. LTD for authorized advertising and marketing workflows.
02 How We Use the Meta Marketing API
Y360 uses the Meta Marketing API solely for advertising accounts and business assets that Y360, its employees, authorized users, or clients are permitted to access and manage.
Authorized uses may include
- Advertising account review
- Campaign performance reporting and analytics
- Campaign, ad set, ad, and creative review
- Budget and spend monitoring
- Campaign structure analysis
- Creating or updating advertising assets when specifically authorized
- Troubleshooting and operational support
- Auditing authorized advertising activity
We do not use the Meta Marketing API to obtain unauthorized access to accounts, advertising assets, or personal information.
03 Information We May Process
Depending on the permissions granted and the specific authorized workflow, we may process Meta Platform Data such as:
- Business and advertising account identifiers
- Ad account names and configuration information
- Campaign, ad set, advertisement, and creative information
- Advertising performance and insights data
- Spend, impressions, clicks, conversions, and related advertising metrics
- Page, Instagram business account, catalog, or other business asset information when specifically authorized
- Technical metadata required to authenticate, route, audit, and troubleshoot authorized API requests
We may also collect information provided directly through our website or business communications, such as name, company name, business email address, and message content.
04 Facebook Login and Consumer Profile Data
Our website does not use Facebook Login for the purpose of collecting consumer social profile information.
We do not use our Meta application to collect information such as a consumer’s Facebook friends, birthday, personal interests, gender, or similar consumer profile information for unrelated purposes.
Our Meta integration is intended for authorized business and advertising account workflows.
05 How We Use Information
We may use information to:
- Provide advertising management and reporting services
- Analyze advertising performance
- Prepare reports, recommendations, and operational insights
- Carry out advertising actions approved by authorized users
- Maintain account and workspace security
- Verify that requests are made against the correct authorized resources
- Prevent unauthorized access
- Troubleshoot technical problems
- Maintain audit records
- Respond to support and privacy requests
- Comply with applicable legal and regulatory requirements
We do not sell Meta Platform Data.
We do not use Meta Platform Data for data brokerage or unrelated advertising targeting.
06 AI-Assisted Processing and Service Providers
Some authorized workflows may use technology service providers to process information on our behalf.
Where an authorized workflow uses AI-assisted processing, Meta Platform Data may be processed by Anthropic PBC in connection with the operation of the authorized workflow.
Such processing is limited to the business purpose for which access was authorized and is subject to applicable contractual, technical, and organizational safeguards.
We may also use infrastructure, hosting, security, analytics, and technology providers where necessary to operate our services.
Y360 may use Outloop as a third-party technology service provider and as a runtime and access-control layer for certain authorized API workflows.
07 API Credentials and Security
We take reasonable technical and organizational measures to protect credentials and Platform Data.
Where Outloop is used, Meta credentials are maintained through approved secure storage and are used for authorized API requests without intentionally exposing raw credentials to AI agents.
We do not intentionally store or disclose Meta access tokens, API secrets, passwords, or Authorization headers in chat conversations, public documents, screenshots, or ordinary project files.
Access to business resources is limited according to the permissions and resources authorized for the relevant account or workspace.
08 Data Sharing
We may disclose information:
- To authorized employees and contractors who require access to perform their duties
- To service providers acting on our behalf
- To clients or authorized account owners in connection with requested services
- When required by applicable law, court order, regulatory authority, or lawful government request
- Where necessary to protect the security, rights, or integrity of our systems, customers, or users
We do not sell Meta Platform Data to third parties.
09 Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining security and audit records, complying with legal obligations, resolving disputes, and enforcing agreements.
When information is no longer required, we may delete, anonymize, or securely dispose of it as appropriate.
10 Data Deletion Requests
Users, clients, or authorized representatives may request deletion of personal information or Meta Platform Data held by us, where applicable.
To request deletion, contact assafnoff@ykeydigital.com using the subject line:
Data Deletion Request
Please include sufficient information for us to identify the relevant account or business relationship.
Do not send API keys, access tokens, passwords, Authorization headers, or other credentials.
We may need to verify the identity or authority of the requester before deleting information.
Some information may be retained where necessary to comply with legal, security, accounting, fraud-prevention, or regulatory obligations.
Full instructions are available on our Data Deletion page.
11 International Processing
Some technology and service providers that support our operations may process information in countries other than the country in which the information originated.
Where applicable, we take reasonable steps to ensure that such processing is subject to appropriate contractual, technical, and organizational safeguards.
12 Your Privacy Rights
Depending on applicable law, individuals may have rights relating to their personal information, including rights to request access, correction, deletion, restriction, or information about how their personal information is processed.
Requests may be sent to assafnoff@ykeydigital.com.
13 Children’s Data
Our services and Meta Marketing API workflows are intended for businesses and authorized business users.
They are not directed toward children, and we do not knowingly use the Meta Marketing API to collect personal information from children for the purposes described in this policy.
14 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or data-processing practices.
The current version will be published on this page with an updated “Last updated” date.
15 Contact Us
For questions, privacy requests, or concerns regarding this Privacy Policy:
