How Intentos handles your data

What we store, what we never touch, where it is processed and how you delete it. Plain facts, taken from how the product is built.

The facts

Your account: name, email and sign in credentials
What you create: saved and captured ads, folders, boards, briefs, Creative Directions and generated media
For connected channels: messages, contact names and profile pictures, and the channel’s access token
For a connected ad account: identifiers, an access token and the figures the audit reads

Messages arrive through Meta’s official APIs and are stored only in your account
A lead is scored from the conversation; the log of each scoring call never stores the message text
Conversions API events are opt in, contain no message text and wait for your approval by default
Voice notes are served only through signed links that expire

Competitor ads come from the public Meta Ad Library, read in your own browser session
The extension never reads your Facebook login or cookies
Saved ad media is stored in a private bucket, uploaded with signed URLs
The audit reads your ad account; changes to ads only happen through actions you approve

Database, files and sign in: Supabase in Frankfurt, Germany (eu-central-1)
The web app is hosted on Vercel
Model providers process only the input of a single call; the full list of processors is in the privacy policy

Row level security on every table: an account can only read its own rows
Extension tokens and API keys are stored only as SHA-256 hashes, can be revoked and are rate limited
Live ad changes and Conversions API sends are behind switches that stay off until enabled

Delete a single lead with its messages from the Leads drawer
Export a lead as JSON at any time
Disconnect a channel, delete all leads of a channel, or delete your whole account in Settings
Optional retention: delete leads automatically after a period you choose (off by default)

No. Every table is protected by row level security, so each account can only read its own rows. Boards are only visible to members the owner invited.

No. Your data is used only to deliver the features you use. Model providers receive the input of a single call to answer it.

In a Supabase project in Frankfurt, Germany (eu-central-1): the database, file storage and sign in.

Intentos sends the replies you write in the inbox. Lead scoring and stage changes do not send messages.

Choose Delete account in Settings, or email privacy@intentos.eu from your registered address.

Start on the free plan. No credit card, no setup call, cancel any time.