Privacy Policy

1. Scope and responsible operator

This policy covers getfamilyops.com, Dad Ops Reset, our diagnostic and FamilyOps Ads MCP. The responsible operator is Xpbox Desenvolvimento de Sistemas e Marketing Direto, reachable at [email protected].

The Meta MCP integration is currently for internal management of FamilyOps-owned accounts by authorized personnel. Visitors and product buyers are not required to connect a Facebook or Instagram account.

2. Information from our website and product

• Diagnostic: the name and email you provide, your answers and result, submission times, and associated source and event identifiers.
• Purchase and access: purchaser and contact details provided by Stripe, checkout and payment identifiers, amount, currency, payment status, enrollment, private access token and email-delivery records. Stripe processes card details; our application does not receive the full card number or card security code.
• Plan activity: mission completion, reopening, dates and the notes you choose to save.
• Technical information: request and security logs, IP address, browser/device information, cookies, referring information and interactions with our pages.
• Correspondence: information you send when asking for support, a refund or help with your data.

Please avoid entering sensitive health details or identifying information about children, your partner or other people in diagnostic responses, notes or support requests.

3. Meta Platform Data and MCP access

When authorized personnel connect FamilyOps Ads MCP through Meta, the integration can access the assets and information allowed by the permissions they grant. This can include:

• Business, ad-account, Facebook Page and professional Instagram account identifiers and profile information.
• Campaigns, ad sets, ads, creatives, budgets, targeting settings, status, activity history and performance reports.
• Instagram media eligible for advertising, including captions, media identifiers and links.
• Catalogs, product data, audience configuration and event-source information when the corresponding tools and permissions are used.

These permissions are used to perform requested internal advertising, reporting and asset-management tasks. We do not request access to unrelated third-party businesses as part of the current internal application.

Meta handles the authorization screen. The current connection uses Meta's remote MCP service at mcp.facebook.com/ads through an authorized MCP client. Access tokens and connection credentials may be held by that client or its credential store. Requests and tool results may be processed by the selected AI client and its provider, according to that provider's terms and the account's settings. The public FamilyOps website is not a Facebook or Instagram password-collection service.

We do not sell Meta Platform Data. We use it for the authorized integration functions, support, security and legal obligations, subject to Meta's applicable platform terms. Operators should avoid submitting unnecessary personal information in prompts.

4. Why we use information

We use information to return your diagnostic and first action, provide paid access, save progress, send product and service emails, handle checkout reminders, process refunds, provide support, secure our systems and measure the website and advertising funnel.

Where data-protection law requires a legal basis, the relevant basis depends on the activity: providing a requested service or contract, complying with legal obligations, pursuing legitimate interests such as security and service administration where permitted, or consent where required. A request for a diagnostic email is not authorization to access your Meta accounts.

5. Cookies, local storage and measurement

The site uses session and anti-forgery cookies for its forms. The diagnostic also uses browser local storage to retain draft answers and a saved result on the same device. Clearing that storage removes those local copies, but does not by itself delete data already saved on our server.

On marketing and checkout flows, we use a randomly assigned first-party visitor identifier (dadops_visitor_id) to match browser and server events. That cookie can remain for up to 90 days. When a Meta click identifier is present in the arrival URL, we preserve it in the _fbc cookie, also for up to 90 days. We read the _fbp browser identifier when available.

Our marketing pages load Google Analytics 4 and Meta Pixel. Meta Pixel also loads on the buyer app and the page that asks buyers to use their access link. These services can use cookies and receive page URLs, information about visits, device/browser details and interactions. We also use Meta's Conversions API to send events such as Lead, InitiateCheckout and Purchase from the server.

Server events can include event identifiers, transaction value and currency, a pseudonymous visitor identifier, hashed email and phone number when provided, IP address, user agent and Meta cookie identifiers when available. Hashing contact information does not make it anonymous. Checkout matching context is encrypted in our database and becomes eligible for routine deletion after 30 days; payment records have separate retention requirements.

You can restrict or clear cookies through your browser and manage choices available through Google and Meta. Blocking browser cookies or scripts does not necessarily stop server-side processing needed to administer a purchase or service. Contact us about your applicable objection or consent-withdrawal rights.

6. Providers and disclosures

Information is processed by service providers as necessary for their functions, including Stripe for payments, Mailgun for email, Google Analytics for website measurement, Meta for advertising and events, Cloudflare for DNS, traffic delivery and security, and our hosting infrastructure. Authorized MCP use can also involve the AI client and provider selected by the operator.

We may disclose information when required by law, to protect rights and security, or in connection with a lawful business transfer with appropriate protections. Some providers act as independent controllers for their own purposes.

For more information, see Stripe's Privacy Policy, Mailgun's Privacy Policy, Google's Privacy Policy, Meta's Privacy Policy and Cloudflare's Privacy Policy.

7. Retention, transfers and security

We retain information as needed to provide the service, manage access and support, resolve disputes and meet legal obligations. Retention depends on the type of record and the purpose; a deletion request may not remove records that must be kept for accounting, fraud prevention or legal claims.

Service providers may process information in countries other than your own. Where required, applicable transfer protections and contractual arrangements govern those transfers.

We use access controls, HTTPS and operational safeguards to protect information. No system can guarantee absolute security. Keep your private product access link and MCP credentials confidential.

8. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, portability or restriction of processing, object to certain processing, withdraw consent, or complain to a competent data-protection authority. This may include rights under Brazil's LGPD or the GDPR where those laws apply.

Send requests to [email protected]. We may ask for information reasonably necessary to verify identity or authority. We will respond within the period required by applicable law and explain any lawful limitation.

For the Meta integration, you can remove the application in your Facebook settings and disconnect it from your MCP client. Revocation and deletion are different actions. See our Data Deletion Instructions for the request procedure and its scope.

9. Children and policy changes

Our services are intended for adults, not for children to use directly. If you believe a child has provided personal data to us, contact us so we can review and address it.

We may update this policy as services or requirements change. The date above identifies the current version. We will provide additional notice where required for material changes.