Legwork builds and runs advertising campaigns on Meta for you. To do that you connect your own Meta account to us, and we act on it with your permission. This page explains exactly what we hold, why we hold it, and how to make us stop.
Legwork is a product of Roak LLC, 8300 FM 1960 West, Suite 450, Houston, TX 77070. Questions about anything here go to support@runlegwork.com.
We use your Meta connection to do the thing you hired us for: create campaigns, read their results, and show them back to you. We use your files to build the ads. We use your email to contact you about your account, including when your Meta connection is about to expire and your ads would otherwise stop. That is the whole list.
Your Meta access token is the sensitive part — it can spend money — so it gets the strongest handling we have. It is encrypted before it is stored, the encryption keys are kept apart from the data they protect, and the token is never written into logs or shown back to you or to us in readable form. Access to production systems is limited to people who need it to operate the service.
No system is perfect. If we ever discover a breach affecting your data, we will tell you what happened and what we're doing about it.
Your access token lives until you disconnect, until it expires, or until you delete your account — whichever comes first. Campaign and performance history stays while your account is open, because it's what makes the next campaign smarter. Uploaded and generated files stay for the length of your plan's storage window; we warn you before anything is removed. After you delete your account we erase your data within 30 days, except anything we're legally required to retain, such as billing records.
You can disconnect Meta at any time, from inside Legwork or from your Meta settings, and we lose our ability to act on your account immediately. You can ask us for a copy of your data, ask us to correct it, or ask us to delete it — see deleting your data. If you're in a place with data protection rights such as the UK, EU or California, those rights apply to you here, and we don't discriminate against anyone for exercising them. We do not sell personal information.
Legwork is operated from the United States, and your data is processed there. If you use it from elsewhere, you are asking us to process it in the US.
Legwork is a business tool and isn't for anyone under 18. We don't knowingly collect data from children.
If we change this policy in a way that matters, we'll email you before it takes effect. The effective date at the top always tells you which version you're reading.