Privacy Notice — Codex Ads Local

Last updated: 10 September 2026

Human Space, trading as CityWhispers, uses Codex Ads Local as an internal tool to prepare, manage and measure CityWhispers advertising through Meta’s Marketing API.

This notice covers that integration. Our CityWhispers Privacy Policy separately covers our mobile application and website.

1. Information we process

Depending on the task, the tool processes:

• Account information: identifiers and names of authorized Meta advertising accounts, Facebook Pages and Instagram accounts.
• Advertising information: campaign settings, budgets, schedules, audience-targeting criteria, destination links, and advertising text, images or videos.
• Performance information: reports such as spending, impressions, reach, clicks and recorded advertising actions.
• Operational information: authorization credentials, proposed changes, API responses and troubleshooting records.
• Support information: information you provide when contacting us about this tool or your privacy.

Advertising materials may contain personal information, such as photographs of identifiable people.

The current integration does not retrieve lists identifying everyone who sees an advertisement. Audience-targeting settings describe the audience selected for advertising.

2. Why we process information

We use this information to prepare and manage our advertising, assess its performance, protect account access, troubleshoot errors and maintain records of changes.

Where this involves personal data, we rely on our legitimate interests in operating and promoting CityWhispers and securing our business systems, subject to the rights and interests of the people concerned. We also process information where necessary to meet applicable legal obligations.

We do not sell personal information.

3. Who receives information

Access is limited to authorized people and providers involved in operating the tool:

• Meta receives API requests and advertising content and operates the advertising platforms.
• OpenAI, through Codex, processes task instructions and information made available to the assistant, including relevant advertising content and API results.
• Storage and synchronization providers, including Apple iCloud where enabled, may store working files.

Information may also be disclosed where required by law or necessary to protect legal rights.

Credentials are intended for authorized API access and must not be included in advertising content, public documents or assistant messages.

4. Storage, retention and security

Working files may include advertising drafts, proposed changes, API results and operational records. These are stored in our working environment and may be synchronized or backed up.

We retain information for as long as reasonably necessary to manage advertising, investigate problems and meet applicable recordkeeping obligations. We delete or anonymize information when it is no longer needed. Backup copies may remain until the relevant backup retention cycle ends.

We restrict access to working files and credentials and use encrypted connections to supported provider services. No storage or transmission method can guarantee absolute security.

5. International processing

Our providers may process information outside the European Economic Area. Where this constitutes a restricted international transfer, appropriate safeguards are required, such as an applicable adequacy decision or contractual safeguards.

6. Your rights and contact

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data. You may also object to processing based on legitimate interests.

To make a request, contact support@citywhispers.me and identify the information or activity concerned. We may request information reasonably necessary to verify your identity.

You may lodge a complaint with the CNIL in France or your relevant data protection authority.

7. Changes to this notice

We will update this notice when the integration or our information-handling practices change. The latest version will remain available at this page.