Privacy Policy

1. Who we are

XINGCHEN MANJING AI ENTERTAINMENT PTE. LTD. is a private company limited by shares incorporated in Singapore (UEN 202628927K), with its registered office at 3 Gambas Crescent, #04-01, Nordcom One, Singapore 757088. We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the "PDPA") and other laws that apply to us.

2. About LX_AdPilot and our role

LX_AdPilot is a software-as-a-service platform for advertisers and agencies ("Customers"). After a Customer authorises its advertising accounts on Meta (Facebook and Instagram) and TikTok, LX_AdPilot lets the Customer create and manage campaigns, ad sets and ads, view performance reports, run automated rules that the Customer configures (for example, creating ads, adjusting budgets, or pausing and resuming ads), and manage and review creative assets.

• For the account and contact information of the people who use LX_AdPilot on behalf of a Customer ("Users"), we decide how that information is used and are responsible for it.
• For data in, or obtained from, a Customer's advertising accounts ("Advertising Data"), we process the data on the Customer's behalf and on its instructions. If your personal data is contained in a Customer's Advertising Data, please contact that Customer to exercise your rights; we will help the Customer respond.

LX_AdPilot is intended for business use only. It is not directed at consumers or at individuals under 18.

3. Information we collect

3.1 Account and contact information

Name, business email address, company name, role, login credentials, and the communications you send us.

3.2 Information from Meta and TikTok when you connect your accounts

When a User authorises LX_AdPilot through Meta's or TikTok's authorisation process, we receive only the information and permissions the User grants, which may include:

• the authorising person's name, platform user ID and, where granted, email address;
• access tokens that allow LX_AdPilot to act on the authorised accounts;
• identifiers and names of business portfolios or business centers, ad accounts, Pages and other identities used for advertising;
• campaign, ad set and ad settings, including budgets, schedules, targeting settings and creatives; and
• performance and reporting data, such as spend, impressions, reach, clicks and conversions.

Performance data we receive from the platforms is aggregated reporting data. We do not use it to identify individual people who saw or interacted with ads.

3.3 Creative assets

Images, videos, ad copy and related files that Users upload to LX_AdPilot, and the results of the risk review we run on them.

3.4 Usage and technical information

Log data such as IP address, browser and device type, the pages and features used, and timestamps, and cookies or similar technologies that are needed to keep Users signed in and to secure the Services.

4. How we use information

• to provide and operate LX_AdPilot, including carrying out the actions Users request and the automated rules they configure;
• to generate reports and dashboards for the Customer;
• to review uploaded creatives for policy and brand-safety risks before they are submitted to advertising platforms;
• to authenticate Users, secure the Services, and prevent fraud and misuse;
• to provide customer support and send service-related communications;
• to comply with legal obligations and enforce our agreements; and
• to maintain and improve the Services, using aggregated or de-identified information.

5. Data from Meta and TikTok

We use data received from Meta and TikTok only to provide LX_AdPilot to the Customer that authorised it, and in accordance with the Meta Platform Terms, Meta's developer policies and TikTok's applicable terms. In particular, we:

• do not sell, license or rent this data, or share it with data brokers;
• do not use it to build profiles of individuals, or for any purpose other than providing the Services to the Customer;
• do not use it to make decisions about eligibility for credit, employment, housing, insurance or similar opportunities; and
• delete it when it is no longer needed to provide the Services, when the Customer disconnects the account, or when deletion is requested, unless we are legally required to keep it.

6. How we share information

• Advertising platforms. We send information to Meta and TikTok as needed to perform the actions Users request, such as creating ads or changing budgets.
• Service providers. We use providers for cloud hosting, storage, email, customer support and content review (which may include automated or AI-based tools used to check creatives). They may process personal data only on our instructions and must protect it.
• Legal and safety. We may disclose information where required by law, or to protect the rights, property or safety of our Customers, Users, the public or us.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell personal data.

7. International transfers

We and our service providers may process personal data in Singapore and in other countries. When we transfer personal data outside Singapore, we take steps to ensure that it receives a standard of protection comparable to that under the PDPA.

8. Retention

We keep account information while the Customer's account is active. When a User disconnects an advertising account, or a Customer closes its account, we delete or de-identify the related access tokens and Advertising Data within 30 days, unless we need to keep certain records to comply with law, resolve disputes or enforce our agreements. Backup copies are overwritten in the normal backup cycle.

9. Security

We use reasonable administrative, technical and physical safeguards to protect personal data, including encrypted connections (HTTPS), access controls and restricted handling of access tokens. No method of transmission or storage is completely secure, but we work to protect the information we hold.

10. Your choices and rights

• Disconnect access. You can revoke LX_AdPilot's access at any time in your Meta settings (Business integrations) or in your TikTok for Business account.
• Deletion. See our Data Deletion Instructions.
• Access, correction and withdrawal of consent. Under the PDPA you may ask to access or correct your personal data, or withdraw consent to its use. Depending on where you are located, you may have additional rights under local law.

To make a request, contact us using the details below. We may need to verify your identity before responding.

11. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date above shows when it was last revised. If we make material changes, we will notify Customers through the Services or by email.

12. Contact us

XINGCHEN MANJING AI ENTERTAINMENT PTE. LTD.
3 Gambas Crescent, #04-01, Nordcom One, Singapore 757088
UEN: 202628927K
Data Protection Officer: contact@xmaient.com