Coral API调用 隐私政策
生效日期：2026年11月9日
适用应用：Coral API调用（Meta 应用编号：1304840571350134）
运营与数据责任主体：深圳市多边形信息服务有限公司
1. 本政策的范围
深圳市多边形信息服务有限公司（以下简称“我们”）运营珊瑚（Coral）广告账户服务。我们通过客户授权，使用 Meta 接口获取广告账户报告、进行账单核对及管理账户花费上限。本政策说明我们在这项服务中如何收集、使用、保存和处理相关数据，以及您如何联系我们提出隐私或数据删除请求。
客户保留其广告账户的所有权，并通过 Meta 的业务管理和账户授权机制授予访问权限。我们的内部授权员工及系统用户在授权范围内处理这些账户的数据。本政策适用于该应用和本隐私政策网页，不替代 Meta 自身的隐私政策，也不授权我们访问未经许可的账户。
2. 我们处理的数据及来源
为提供客户授权的服务，我们可能从 Meta 接口及客户提供的信息中处理以下必要数据：广告账户编号、名称、状态、币种、业务管理账户及账户授权关系的相关标识；按日期及国家/地区汇总的广告花费；累计花费、账户花费上限和相关账单记录。国家/地区分组属于广告报告的汇总维度，不表示我们通过这项功能收集个人的精确定位。
我们还处理提供服务所必需的业务联系人信息，以及您向我们提交的隐私或删除请求、用于核实请求权限的必要资料和处理记录。用于接口访问的授权凭证仅用于授权访问和维护服务，不会作为公开网页内容发布。请勿在隐私请求中向我们发送密码或访问令牌。
访问本隐私政策网页时，提供网页所必需的网络服务可能处理 IP 地址、访问时间、请求路径、浏览器或设备类型及错误记录，用于网页交付、安全和故障排查。本政策网页不设置广告追踪或第三方行为分析脚本。
3. 数据的使用目的
我们使用上述数据来识别获授权的广告账户，获取每日花费和国家/地区花费报告，进行费用汇总及账单核对，并在客户授权和实际业务操作范围内管理广告账户的花费上限。报告数据可由服务端定时任务更新。账户花费上限是广告账户层级的额度，不等同于广告系列或广告组预算。
我们也使用必要资料维护授权访问、保障服务安全、排查错误、回应客户支持及隐私请求，并履行适用的法律义务。我们不出售通过 Meta 获得的数据，也不将这些数据用于与上述授权服务无关的营销用途。若将来处理的数据种类或用途发生实质变化，我们会更新本政策，并在需要时取得相应授权。
4. 数据访问、共享与披露
客户相关数据仅在提供授权服务所必要的范围内供获授权人员访问，并可向相应客户或其授权代表提供与其账户有关的报告及业务记录。我们通过 Meta 接口读取数据或执行获授权的管理请求时，会向 Meta 发送完成该请求所必需的信息。Meta 对其平台及服务的数据处理适用其自身政策。
我们仅在提供服务、处理您的请求或履行适用法律义务所必要的范围内披露数据。如服务支持需要外部服务商参与，我们将把相关访问限制在必要范围，并要求其以书面协议接受适当的保密、安全及用途限制。我们不会因此允许其将 Meta 数据用于与本服务无关的目的。
对于公共机构的数据要求，我们会审查其合法性，适当质疑不合法要求，并将披露限制在必要范围，同时保留请求及处理记录。
5. 保留、撤销授权与删除
我们仅在提供客户授权服务、进行必要对账或履行适用法律义务所需期间保留数据。保留需求取决于数据种类、服务状态及适用义务，并非所有数据均有相同保留期限。数据不再需要或相关服务停止时，我们将尽快删除，或在适用规则允许时进行不可逆匿名化处理。
您可以通过 Meta 的相应业务或账户设置撤销相关访问授权，也可以通过下列联系渠道要求停止处理或删除与您有关的数据。撤销授权后，我们将停止继续读取已撤销授权的账户数据，并检查已保存的数据，删除不再必要的数据；法律或监管要求必须保留的记录除外。您也可以直接向我们提出删除请求。
收到删除请求后，我们会核实您的身份或代表该账户提出请求的权限，并尽快删除相关数据，依法必须保留的部分除外。如适用法律或监管要求必须保留部分数据（例如依法必须保存的账务记录），我们会向您说明原因，并将保留和使用限制在该法定义务所必需的范围。删除或停止处理某些数据可能影响相关账户服务。
6. 您的请求与联系方式
您可以要求了解与您有关的数据处理情况，并提出访问、更正、停止处理或删除请求。请发送电子邮件至 business@coralhk.com，邮件主题可写“Coral 隐私请求”或“Coral 数据删除请求”。请提供便于联系您的信息、相关公司或广告账户编号以及具体请求；无需提供账户密码或 Meta 访问令牌。
我们会在适用法律要求下处理请求，并在需要补充核实信息或存在保留义务时予以说明。责任主体为深圳市多边形信息服务有限公司。与隐私及删除有关的问题均可通过上述邮箱联系。
7. 安全与政策更新
我们采取与数据及服务风险相适应的访问控制和安全措施，限制未经授权的访问、使用或披露。任何网络传输或存储方式都不能保证绝对安全；若您发现涉及本服务的数据安全问题，请通过上述渠道联系我们。
我们可能根据服务及适用要求调整本政策，并在本网页公布更新后的内容和生效日期。重大变化会在适用要求下予以通知。本页面的中文与英文版本说明同一项服务；如有理解上的差异，请联系我们核实。
Coral API Privacy Policy
Effective date: 9 November 2026
Application: Coral API调用 (Meta App ID: 1304840571350134)
Operator and entity responsible for data: 深圳市多边形信息服务有限公司
1. Scope
深圳市多边形信息服务有限公司 (“we”, “us” or “our”) operates the Coral advertising-account service. With our customers’ authorization, we use Meta interfaces to retrieve advertising-account reports, reconcile billing records and manage account spending caps. This policy explains how we collect, use, retain and handle data for that service, and how you may contact us about privacy or data deletion.
Customers retain ownership of their advertising accounts and grant access through Meta’s business-management and account-authorization mechanisms. Our authorized internal employees and system users process account data within the granted access. This policy covers the application and this privacy-policy webpage. It does not replace Meta’s own privacy policy or authorize access to accounts without permission.
2. Data we process and its sources
To provide the authorized service, we may process necessary information from Meta interfaces and information provided by customers: advertising-account IDs, names, status and currency; identifiers relating to business accounts and account authorization; advertising spend aggregated by date and country or region; total spend, account spending caps and related billing records. Country or region breakdowns are aggregate advertising-report dimensions; this feature does not collect individuals’ precise location.
We also process business contact information needed to provide the service, privacy or deletion requests you submit, information necessary to verify your authority to make a request, and records of how we handle it. API authorization credentials are used only for authorized access and service maintenance, and are not published as public webpage content. Do not send passwords or access tokens in a privacy request.
When you visit this policy webpage, the network services needed to deliver it may process your IP address, access time, request path, browser or device type, and error records for delivery, security and troubleshooting. This policy webpage does not include advertising-tracking or third-party behavioral-analytics scripts.
3. How we use data
We use the data to identify authorized advertising accounts, retrieve daily spending and country or region spending reports, aggregate costs and reconcile billing, and manage account spending caps within customer authorization and the relevant business workflow. Server-side scheduled jobs may update reporting data. An account spending cap is an account-level limit, rather than a campaign or ad-set budget.
We also use necessary information to maintain authorized access, secure the service, investigate errors, respond to support and privacy requests, and meet applicable legal obligations. We do not sell data received from Meta or use it for marketing unrelated to the authorized service described above. If the categories of data or purposes materially change, we will update this policy and obtain any required authorization.
4. Access, sharing and disclosure
Customer data is accessible to authorized personnel only as needed to provide the authorized service. Account reports and related business records may be provided to the relevant customer or its authorized representatives. When we read data or submit authorized management requests through Meta interfaces, we send Meta the information necessary to complete the request. Meta’s own policies govern its processing on its platforms and services.
We disclose data only as necessary to provide the service, handle your requests or meet applicable legal obligations. If external service providers are involved in supporting the service, we will limit their access to what is necessary and require appropriate confidentiality, security and purpose restrictions in written agreements. This does not permit them to use Meta data for purposes unrelated to this service.
For requests from public authorities, we assess their legality, challenge unlawful requests where appropriate, limit any disclosure to what is necessary, and maintain records of requests and our responses.
5. Retention, withdrawal of authorization and deletion
We retain data only for the period needed to provide the authorized service, perform necessary reconciliation or meet applicable legal obligations. Retention needs depend on the type of data, service status and applicable obligations; not all data has the same retention period. When data is no longer needed or the relevant service ends, we delete it as soon as reasonably possible or, where applicable rules permit, irreversibly anonymize it.
You may revoke the relevant access in Meta’s applicable business or account settings. You may also contact us below to request that we stop processing or delete data relating to you. After access is revoked, we will stop further retrieval of data from the affected account, review data already held and delete data that is no longer necessary, except records required by applicable law or regulation. You may also submit a deletion request directly to us.
When we receive a deletion request, we will verify your identity or authority to act for the account and delete the relevant data as soon as reasonably possible, except where retention is required by law. If applicable legal or regulatory requirements mandate retention of some data, such as legally required accounting records, we will explain the reason and limit retention and use to what that legal obligation requires. Deletion or cessation of processing may affect the related account service.
6. Your requests and how to contact us
You may ask about processing of data relating to you and request access, correction, cessation of processing or deletion. Email business@coralhk.com with a subject such as “Coral Privacy Request” or “Coral Data Deletion Request”. Include your contact details, the relevant company or advertising-account ID, and the action you request. Do not include passwords or Meta access tokens.
We will handle requests in accordance with applicable legal requirements and explain when additional verification is needed or retention obligations apply. The responsible entity is 深圳市多边形信息服务有限公司. You may use the email address above for privacy and deletion questions.
7. Security and changes to this policy
We apply access controls and security measures appropriate to the risks associated with the data and service to limit unauthorized access, use or disclosure. No transmission or storage method can guarantee absolute security. If you identify a data-security concern involving this service, please contact us through the channel above.
We may update this policy as the service or applicable requirements change. Updated content and its effective date will be published on this page. Material changes will be communicated as required. The Chinese and English versions describe the same service; please contact us if a difference in interpretation needs clarification.