Bavian
Try it now

Privacy Policy

Last updated October 30, 2026

Bavian is operated by Ninety ApS (“Bavian”, “we”, “us”) and is committed to safeguarding your privacy. This Privacy Policy clearly outlines how we handle your information.

Information We Collect

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

  • Your name, business email address, company name, company address, and payment details (credit card information).
  • Non-personal data accessed via integrations with Google Ads, Google Search Console, Content Management Systems, and Google Merchant Center, which does not contain personal identifiers, and is solely used to optimize our services.
  • Meta data: Data from your Meta (Facebook and Instagram) ad accounts when you connect Meta, as described under "Meta (Facebook and Instagram) Data" below.

Google User Data

Bavian does not share, transfer, or disclose Google user data. We do not use data obtained through Google Workspace APIs to develop, improve, or train generalized AI or ML models.

Meta (Facebook and Instagram) Data

When you connect Meta, you sign in with Facebook Login and choose what Bavian may access. We never see your Facebook password, and we don't store your Facebook profile.

What we access

  • Ad accounts: The name, ID and currency of the ad accounts your login can use, so you can choose the one to connect.
  • Ads and results: Your campaigns, ad sets and ads, their images, videos and text, their budgets and settings, and results such as spend, impressions, reach, frequency, clicks and conversions.
  • Audience insights: Results broken down by age group, gender, region, placement, device and time of day. These are totals for groups of people, never data about individual people.
  • Meta Ad Library: Public ads that competing businesses run, so you can see how your ads compare.
  • Ad management (where available): If you let Bavian manage your Meta ads, also the Facebook Pages you manage and the likes, comments and shares on the posts behind your ads.

How we use it

  • Reporting: To show you how your Meta ads perform, check your ad account's health, and write your weekly review and recommendations.
  • Managing your ads: If you let Bavian manage your Meta ads, to make the changes you approve or allow, such as pausing an ad, adjusting a budget, creating a new version of an ad or keeping your product catalog up to date.
  • Only for you: We use your Meta data only for your own ad account. We keep each customer's Meta data separate and never use it for anyone else.
  • What we never do: We don't sell your Meta data, use it to target or retarget ads, build profiles of people, or use it for campaigns on other ad platforms such as Google Ads. Neither we nor our providers use it to train AI models.

How we store it

  • Access token: Your Meta access token is stored encrypted and lasts about 60 days. We use it to read your ad account when you use Bavian and on a schedule, for example for health checks and your weekly review. Reconnecting renews it.
  • Our providers: Your data is hosted on Amazon Web Services. OpenAI analyses it to write your weekly review, and Sentry handles our error monitoring. Each processes it only on our behalf, under a data processing agreement.

How to delete your Meta data

  • Disconnect: In Bavian, go to Connections, find Meta and click Disconnect. We delete your access token straight away and stop reading your Meta data. Reports and reviews already created stay in your project until you delete it.
  • Remove Bavian in Facebook: In Facebook, go to Settings & privacy › Settings › Business integrations, choose Bavian and click Remove.
  • Delete everything: Delete the project in Bavian, or email support@bavian.com with the subject "Delete my Meta data" from the email address on your account. We delete all data we received from Meta within 30 days and confirm by email.

Our use of data received from Meta follows the Meta Platform Terms and Developer Policies. How Meta itself handles your data is described in Meta's Privacy Policy.

Purpose and Legal Basis for Processing

We process personal information strictly for the following purposes:

  • Contractual Necessity: To establish and maintain your account, process payments, and deliver our services effectively.
  • Legal Obligations: To fulfill our regulatory responsibilities related to accounting, tax, and financial compliance.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes described above and comply with applicable legal obligations. Upon expiration of these purposes or at your request, information is securely deleted.

International Data Transfers

Bavian may transfer personal information outside the European Economic Area (EEA). Such transfers are secured by Standard Contractual Clauses or other EU-approved safeguards to ensure compliance with GDPR.

Google Analytics and Google Tag Manager (optional).

If you connect a Google Analytics 4 property or a Google Tag Manager container, Bavian reads its configuration (events, key events, tags, triggers and variables) and aggregated reports (such as event counts and page views). Bavian uses this only to find and repair your conversion tracking: it may create or update events, key events, tags, triggers and variables. Tag Manager changes are published only after you approve each change in Bavian. We don’t sell this data and you can disconnect at any time. Bavian’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Security Measures (Enterprise-Grade Security)

Bavian is trusted by leading global enterprises. We employ industry-leading enterprise-grade security practices, including:

  • Secure Infrastructure: Hosted securely on Amazon Web Services (AWS) cloud infrastructure, featuring advanced security protocols, network firewalls, intrusion detection systems, encryption (both at rest and in transit via SSL), and robust access controls.
  • Payment Security: Payment transactions are securely processed by our trusted third-party payment provider, Stripe, adhering to the highest security standards (PCI DSS compliance).
  • Reporting Security Issues: To report a security vulnerability, email support@bavian.com with "Security" in the subject line.

Data Breach Notification

In the unlikely event of a data breach, Bavian is committed to informing affected individuals and relevant supervisory authorities within 72 hours of discovery, consistent with GDPR guidelines.

Your Rights

Under GDPR, you have the right to:

  • Access, rectify, or delete your personal information.
  • Restrict or object to processing of your personal information.
  • Request data portability.

Contact Information

For questions or requests related to privacy or data protection, please contact our Data Protection Officer at:

Email: support@bavian.com

Ninety ApS Diplomvej 381, 2800 Kongens Lyngby, Denmark Business registration number: DK43096990