Legal

Privacy Policy

Last updated: 8 September 2026

Who we are

Blackbox is an AI operating system for brands that run their own ads. We help teams plan, launch and report on campaigns across Meta, Snapchat, TikTok, Google and other ad platforms from one place.

Blackbox is operated by Blackowl Pte Ltd, a company registered in Singapore. Blackowl Pte Ltd is the data controller for the information described in this policy, including data we read from advertising platforms on your instruction.

What we collect

  • Account information — name, email and organization you provide when you sign up, authenticated via Google.
  • Connected ad-account data — when you connect a Meta, Snapchat, TikTok or Google ad account, we read campaign metadata, performance metrics, and (with explicit approval) execute campaign-management actions you've authorized. We never sell this data, and we never share it for anyone else's advertising or for any purpose of our own beyond running Blackbox for you. It is processed only by us and by the service providers listed below, each acting on our instructions.
  • Files you upload — documents you upload for AI indexing are stored encrypted at rest and used only to answer your team's queries.
  • Usage telemetry — basic logs of in-app actions for reliability and security.

How we use it

We use the data above to provide the product, generate recommendations, and execute campaign actions you approve. Connected ad-account data stays scoped to your organization; no other customer on Blackbox can see your accounts.

Analytics & cookies

On our public marketing site we use Google Analytics 4 and the LinkedIn Insight Tag to understand how visitors find us and to measure our advertising. These set cookies only after you accept them in the cookie banner — decline and they stay off. We don't use these trackers inside the authenticated app. You can change your choice at any time by clearing this site's cookies.

Third-party platforms

Blackbox integrates with Meta, Snapchat, TikTok, Google Ads, LinkedIn and similar advertising APIs via OAuth. Each platform's privacy policy applies to data we read from them. Tokens issued to Blackbox are scoped to your organization, never exposed through our API or interface, and used only on your behalf. Disconnecting a channel deletes the token and revokes our access at the platform.

Service providers

We use a small number of service providers to run Blackbox. Each processes data only on our instructions, only for the purpose listed, and none of them may use it for their own purposes. This list is the same one we declare to the advertising platforms we integrate with.

  • Hetzner Online GmbH (Germany) — hosting and storage. Your account data and connected-platform data live here.
  • Cloudflare, Inc. (United States) — website hosting, DNS and network protection for traffic to and from Blackbox.
  • Anthropic PBC (United States) — the AI models that generate recommendations. Campaign performance data is sent to produce the suggestions you see in your inbox.
  • OpenRouter, Inc. (United States) — routing for the same AI requests.
  • PostHog, Inc. (United States) — product analytics on in-app usage, used to improve reliability and the product itself.

We update this list when it changes. If you need a current copy for a vendor review, email us at the address below.

Data retention & deletion

You can revoke any connected ad account from Data → Connectors at any time. To delete your account and all associated data, follow the data deletion instructions or email hello@blackbox.plus.

Contact

Questions about this policy: hello@blackbox.plus.