Privacy policy

Last updated 1 November 2026

Gimme Gimme makes Meta ads from your website. This policy explains what we collect, why, and what you can ask us to do with it. Gimme Gimme is run by Gimme Gimme Labs Ltd, a company registered in England and Wales (company number 17554252), which is the data controller. Contact: hello@getgimmegimme.com.

What we collect

Account details: your email address and, if you sign in with Google, your name and profile picture. We never see your Google password.
The website addresses you enter, plus the public pages, brand details and public ads we read to make your ads.
The ads and ad copy we make for you, and your credit balance and plan.
If you connect a Meta ad account, the ads and results we read from it. See If you connect your Meta ad account below.
Billing details handled by Stripe. We never see or store your full card number.
Abuse prevention: a cookie that identifies your browser for free runs, a one-way hash of your IP address, and a Cloudflare Turnstile check.
Product analytics: pages visited, the name of the website that linked you here (such as linkedin.com), and actions such as viewing pricing, starting or finishing a run, creating an account, and starting a plan. Visitors use a pseudonymous identifier. When you create an account or use the site while signed in, we send your account email address to PostHog so we can identify accounts in signup reports, unless you turn analytics off. We also record how you use the site, such as clicks, scrolling and pages viewed, to improve the product experience. These recordings carry the same identifier as the rest of your analytics, and anything you type is hidden from them.

Why we use it

To run the service you asked for: research your brand, generate ads and deliver downloads (contract).
To take payment and keep records we're required to keep (contract and legal obligation).
To stop abuse of free runs and keep the service secure (legitimate interests).
To understand use of the site, run outcomes and conversion, and improve the service. You can turn this off below.
To see which of our own Facebook and Instagram ads bring people who start a free run or create an account. Turning off analytics stops this.
To email you about your account, runs and billing. We don't send marketing without asking.

Who we share it with

We don't sell your data. We use these providers to run the service, only for that purpose:

Supabase (database and sign-in), Vercel (hosting), Cloudflare (file storage and Turnstile), Inngest (background jobs).
Stripe (payments) and Resend (email).
PostHog (site and product analytics, including your account email address when signed in, unless you turn it off).
Meta (measuring our own Facebook and Instagram ads, unless you turn analytics off). See Cookies below.
Meta, if you connect your ad account: we read your ads and their results from Meta. We send Meta nothing about your Brands or the ads we make for you.
AI model providers, including OpenAI and Google, which receive brand details and prompts to generate images, videos and copy.

Some of these providers process data outside the UK. Where they do, they use safeguards such as standard contractual clauses.

AI agents

You can connect Gimme Gimme to an AI app such as Claude, ChatGPT, Claude Code, Codex or Cursor, and make ads from a chat. When you do:

You sign in on our site and choose to connect. The app gets a sign-in token for your account, never your password.
We receive only what the app sends to our tools, such as a brand's name or website, a brief, an audience and how many ads to make. We don't see the rest of your chat.
We keep a log of every tool call, with what was sent, whether it worked and which app sent it, to run the service, fix problems and see how the connector is used. If analytics is on, PostHog learns which tool was used, not what was sent.
Your chat, including the ads and details our tools send back to it, is handled by the app's provider (such as Anthropic or OpenAI) under its own terms and privacy policy, not ours.
To disconnect, press Disconnect under Connected AI apps in your Gimme Gimme Settings, which ends the app's access at once. You can also remove Gimme Gimme in the app's own connector or MCP settings.

If you connect your Meta ad account

You can connect Gimme Gimme to your Meta (Facebook and Instagram) ads. An owner or admin of your Gimme Gimme account connects once in account settings, signing in with Facebook and giving us one permission, ads_read. Then each Brand picks its ad account in its own settings. It's read only: we can't create, change, pause or pay for ads.

What we read: once a day, for the ad account each Brand picked, the ads that have run in it. For each ad, its name and status; its picture or video (Meta's link to the picture, and the video's id), copy, headline, call to action and link; its ad set's goal, budget, audience (such as ages, genders, locations, interests and custom audience names) and placements; and its campaign's objective and budget.
Each ad's results over its lifetime and the last 28 days: amount spent, impressions, reach, frequency, clicks, link clicks, results, purchases and their value, video views and Meta's rankings for the ad. We also read the account's results for the last 28 days split by age and gender, by placement and by country. Amounts are in your account's currency.
We also keep your Meta user id for our app (a number Meta gives you for Gimme Gimme only, not your name or email address), the names and ids of the ad accounts you can see, and the access token Meta gives us.
Why: to show you how your ads, and the ads we made for you, perform, and to choose what to make next for that same Brand. What we read for a Brand is used only for that Brand. It is never shown to, or used for, any other customer.
How we protect it: the access token is encrypted and only our servers can read it. Only people in your Gimme Gimme account can see your results. We don't sell any of it.
How long: while you stay connected. When you press Disconnect, or remove Gimme Gimme in your Facebook settings, we delete the access token and everything we read from Meta, for every Brand, straight away. When you choose No ad account for one Brand, we delete what we read for that Brand. Meta's access also runs out after about 60 days unless you connect again; after that we read nothing new.
How to delete it: press Disconnect under Meta in your account settings. Or, in Facebook, go to Settings and privacy, Settings, Business integrations, and remove Gimme Gimme; you can ask for your data to be deleted there too. Or email hello@getgimmegimme.com. A deletion request from Facebook comes with a confirmation code, which you can check on our Meta data deletion page.

How long we keep it

We keep your account and ads while your account is open. If you ask us to delete your account, we delete it within 30 days, except billing records we must keep by law (usually six years).

Your rights

You can ask for a copy of your data, or ask us to correct it, delete it, or stop using it, by emailing hello@getgimmegimme.com. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use cookies for your sign-in session, free runs and to remember if you turn off analytics. We use the free-run browser cookie for limited anonymous analytics, without sending the cookie value to PostHog. Signup reports use an account identifier. PostHog sets no analytics cookies or browser storage.

We advertise Gimme Gimme on Facebook and Instagram. To see which of those ads work, when you enter a website and press Go, start a free run or create an account our server tells Meta, through its Conversions API. It sends your IP address and browser, the click id Meta adds to an ad's link when you arrived from one (kept on our server with your browser's id for a week, and with your account, so it still counts if you reload the page or confirm your email later), a scrambled (hashed) copy of your email address, and a hashed id of your account or browser. Meta uses these to match the visit to a Meta account, if you have one. We never send Meta your email address as text, your name, or anything about the websites you make ads for. "Turn off analytics" below stops this too.

If you press Accept on our cookie banner, we also load Meta's pixel, Meta's code that measures our ads in your browser. It sets Meta's cookies (_fbp, and _fbc when you arrive from one of our ads) and sends Meta the pages you visit here, the same moments as above, and the same hashed ids. We remember your choice in a cookie for a year. If you press Decline, or don't choose, we load no Meta code and set no Meta cookies. Declining doesn't turn off our own analytics: "Turn off analytics" does that, and it also keeps Meta's pixel off. You can change your choice at any time in Cookie settings.