Data Security
Last updated: 27 July 2026
We built Dukun Adsto connect to your Meta Ads and social accounts, so we take the security of that access seriously. This page explains where your data lives, how it is protected, and how to stay in control — including disconnecting Meta and deleting your data. Dukun Ads is operated by ASEA Studio (Digital Heroes Enterprise), Malaysia.
Where is my data stored?
Your data is stored in a PostgreSQL database on a private VPSthat we control — it is not on a shared public database. Data is encrypted in transit using TLS between your browser, our servers, and the platforms we integrate with. Access tokens for your connected accounts are stored securely and used only to perform the actions you request.
How is advertising data protected?
- Access to production systems is restricted to authorized operators only.
- Connected-account tokens are scoped to the specific permissions you granted and used only on your behalf.
- We do not sell your advertising data or share it for others’ marketing.
- We do not authorize third-party AI providers to train their models on your business content beyond what is needed to return your result.
- Payment card data never touches our servers — see below.
Can Dukun Ads launch ads without my approval?
No. Every campaign created through Dukun Ads defaults to a PAUSED state. Nothing goes live and no ad budget is spent until you review the campaign, ad set, budget, and creative, and explicitly approve it. You stay in control at all times, and you can pause or edit any campaign directly in Meta Ads Manager as well.
What Meta permissions are required?
When you connect Meta, we request only the permissions needed for the features you use, such as:
- Managing your ad accounts and campaigns (create, read, pause, and update).
- Reading ad insights and performance metrics for reporting.
- Publishing and managing posts on Pages and connected social profiles.
- Managing pixels and lead forms so we can track conversions and collect leads.
We do not request permissions we do not need, and we use this access strictly to operate the features you ask for.
Can I disconnect my Meta account?
Yes, at any time. Go to Accounts (or Settings → Connected accounts) inside the app and choose Disconnect for the Meta connection. This revokes the access token Dukun Ads holds so we can no longer act on your behalf. You can also remove Dukun Ads directly from your Meta account under Business Settings or App permissions. Disconnecting does not delete campaigns already created in your Meta account.
How do I delete my account?
You can delete your Dukun Ads account from Settings in the app, or by emailing support@dukunads.com from your account email. Deleting your account removes your access and revokes connected-account tokens.
How do I delete my data?
To request deletion of the data associated with your account, email support@dukunads.comwith the subject “Data deletion request”. We will delete your stored personal data and connected-account tokens within a reasonable period, except where we are required to retain limited records for legal or accounting purposes.
Does Dukun Ads access my payment card?
No. Payments are handled entirely by our payment processors, Stripe and CHIP. Your card details are entered on their secure systems — Dukun Ads never sees or stores your full card number.
Reporting a security concern
If you believe you have found a security issue, please email support@dukunads.com so we can investigate promptly.