Privacy Policy

This Privacy Policy describes how Dhow Khasab Tours (“we”, “our”, or “us”) collects, uses, processes, and protects data in connection with our advertising automation and campaign management tools operated through our Model Context Protocol (MCP) server environment (“Antigravity MCP”) integrated with Meta platforms.

This policy applies to our marketing operations, automated campaign tools, and related digital services accessible via dhowkhasabtours.com.

1. Information We Access and Process

To run, manage, and monitor advertising campaigns for Dhow Khasab Tours via Meta Marketing APIs and MCP tool execution, we process the following categories of data:

• Meta Authentication & Account Data: User account identifiers, app-scoped user IDs, authorization tokens, and permission scopes granted during authentication (such as ads_management and ads_read).
• Campaign & Creative Data: Ad account IDs, tour promotion campaign structures, ad sets, promotional media, custom audiences, targeting criteria, budget allocations, bidding models, and live delivery status.
• Performance Metrics: Aggregated reporting data including impressions, clicks, lead conversion events, reach, frequency, and spend metrics.
• MCP Execution Logs: Automated tool invocation parameters, query context, timestamped API interaction logs, and delivery status messages within our secure MCP workflow.

2. How We Use the Data

The collected information is used strictly to conduct and optimize advertising campaigns for Dhow Khasab Tours, specifically to:

• Authenticate automated workflows with the Meta Marketing API.
• Create, schedule, adjust, publish, and pause targeted travel and tour advertisements.
• Retrieve and evaluate analytics to optimize ad spend and campaign performance.
• Monitor operational reliability, prevent API rate-limit errors, and maintain system security.

3. Data Sharing and Third-Party Disclosure

We do not sell, rent, lease, or trade any personal, account, or advertising data to third parties. Data is shared exclusively with:

• Meta Platforms, Inc.: Transmitted directly through official Meta Graph/Marketing APIs to execute ad deployment and fetch operational metrics.
• Infrastructure & Hosting Providers: Secure cloud server environments utilized to run our MCP bridge, under strict confidentiality and security configurations.
• Legal & Regulatory Authorities: Only when strictly mandated by applicable laws, legal processes, or government requests.

4. Data Retention and Security

We adhere to strict data security and hygiene practices:

• All API access tokens, keys, and credentials are encrypted at rest and transmitted using secure TLS encryption.
• Temporary tool execution logs and operational payloads are kept only for the duration required for debugging, monitoring, and performance auditing, after which they are purged.
• We do not store customer payment details or raw sensitive personal user data inside the advertising MCP layer.

5. Data Deletion and Revocation of Access

You maintain full control over the connection between Meta and our application:

• Revoking Access: You can disconnect and revoke permissions for this application at any time directly through your Meta account under Settings & Privacy → Settings → Apps and Websites.
• Data Deletion Requests: If you wish to request the manual deletion of stored authentication tokens, identifiers, or associated operational log records, you may submit a request to our administrative team at [email protected]. Requests will be confirmed and executed within 30 days.

6. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our tools, Meta platform guidelines, or legal standards. Revisions will be posted directly to this page with an updated modification date.

7. Contact Information

For questions, data access requests, or privacy concerns regarding our Meta advertising integration, please contact: