Privacy Policy

Effective 24 August 2026 · Last updated 24 August 2026

This Privacy Policy describes how TakeTones (“TakeTones”, “we”, “us”), a United States company operating taketones.com and the ElwoLinks product at links.taketones.com, collects, uses, shares, and deletes personal data.

ElwoLinks is a music-promotion tool: artists and labels create smart links and, if they choose, connect a Meta (Facebook/Instagram) ad account so we can create, pause, and measure campaigns in their ad account at their request. This policy covers (1) ElwoLinks accounts and Facebook Login, and (2) public smart-link pages visited by listeners. Meta reviews this page for the ElwoLinks / Analist app.

Contact: [email protected]

1. Who is responsible

TakeTones is the controller of ElwoLinks account data (email, password hash, account settings). When you connect Facebook, you remain the advertiser and controller of your Meta ad account, Pages, pixels, and ad content. We act as your processor to run the actions you start in ElwoLinks. Meta Platforms, Inc. is an independent controller of data processed on Facebook and Instagram under the Meta Privacy Policy.

On public smart-link pages, the artist or label whose campaign you clicked is the controller of advertising measurement; we host the page and send events to Meta on their behalf.

2. Data we collect — ElwoLinks accounts

• Account: name, email address, password hash, role, trial and subscription status, support messages you send us.
• Session: an el_sid cookie so you stay logged in.
• Smart links you create: destination URLs, titles, cover images you upload, A/B settings, and aggregate visit/click counts.
• Campaign records: names, daily budget, countries, Meta campaign/ad set IDs we created for you, pause/resume history.

3. Facebook Platform data (Limited Use)

If you tap Connect Facebook, Meta shares data with us under Facebook Login. We request only what we need to provide ElwoLinks:

• public_profile — Facebook user id and name, to know which person connected.
• ads_management, ads_read — create, pause, resume, and read performance of campaigns you launch in ElwoLinks.
• business_management — list Business assets you grant so you can pick the correct ad account.
• pages_show_list, pages_read_engagement, pages_manage_ads — list Pages, attach ads to the Page you select, and read engagement needed for ads.
• From Graph after Login: ad account ids and names, Page ids and names, Instagram professional account ids linked to the Page, pixel ids and names, and an access token we store encrypted.

We do not request friends lists, timeline posts, private messages, or your Facebook password.

TakeTones complies with Meta’s Platform Terms and Limited Use of Data. In particular:

• We use Facebook Platform data only to provide ElwoLinks features you request (connect assets, launch/pause/measure your ads, show you stats in the cabinet).
• We do not sell Facebook Platform data.
• We do not use Facebook Platform data to build profiles for our own advertising, to retarget people off Meta, or for credit, employment, housing, insurance, or similar decisions.
• We do not transfer Facebook Platform data to other apps or advertisers, except to Meta as needed to run the ads you requested, to infrastructure providers who process it solely for us, or if required by law.
• When you disconnect Facebook, delete your account, or Meta sends a data-deletion callback, we delete stored tokens and Facebook identifiers as described in User data deletion.

4. Data we collect — public smart-link pages

Listeners who open a smart link do not create an ElwoLinks account. On those pages we may process:

• Technical data: browser, device, IP address and derived country.
• Events: page views and clicks on Spotify / Apple Music buttons.
• Campaign context from the URL (non-sensitive ad markup).
• Cookies: sl_vid (visitor id, 12 months), sl_sid (session, 30 minutes), sl_consent (choice, 6 months), sl_ab_* (design variant, 6 months), and Meta cookies _fbp / _fbc (up to 12 months) when measurement is allowed.

We do not ask listeners for name or email. Where law requires consent (including EU/EEA, UK, Switzerland), Meta Pixel and Conversions API (ElwoClick) start only after the notice on the page. You can withdraw by clearing cookies for this site.

5. Why we use data

• Create and secure your account, trial, and (later) billing.
• Build and host smart links you create.
• Create, pause, and measure Meta campaigns you launch, in your ad account.
• Show you visits, Spotify clicks, spend, and cost per click.
• Send ElwoClick to your pixel / CAPI so Meta can optimize for people who actually tap through.
• Security, fraud prevention, debugging, and legal compliance.

We do not sell personal information as that term is used in the CCPA/CPRA.

6. Sharing

• Meta Platforms — Login, Marketing API, Pixel, and Conversions API, as you authorize.
• Spotify / Apple — only as outbound links the listener chooses; we do not receive their account login.
• Infrastructure — hosting, database, and email/support tools that process data on our instructions.
• Paddle — when paid billing is enabled, checkout and invoices (not active in the current trial).
• Law — if required by a valid legal demand.

Ad spend is billed by Meta to you. We do not receive your card for Meta ads.

7. Retention

Account, smart-link, and campaign records are kept while the account exists and for a limited period afterward as needed for security, disputes, and legal obligations (typically up to 24 months unless a longer period is required). Encrypted Facebook tokens are kept only while Facebook stays connected. CAPI matching fields (IP, user agent) used to send events are dropped from our queue within 7 days after delivery. Deletion requests are handled as in section 8.

8. Your rights and deletion

Depending on where you live (including GDPR, UK GDPR, and CCPA), you may request access, correction, deletion, export, restriction, or objection, and you may withdraw consent. Email [email protected] from the address on your account. EU/UK users may also complain to their supervisory authority.

To delete ElwoLinks and Facebook connection data, follow links.taketones.com/legal/data-deletion. You can also remove the app in Facebook Settings → Apps and websites; Meta will call our deletion callback. We complete deletion within 30 days (usually sooner).

9. Children

ElwoLinks is for people 18 years or older. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.

10. International transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards (including contractual clauses) for transfers from the EEA/UK.

11. Security

Passwords are hashed. Facebook tokens are stored encrypted. Access to production systems is limited. No method of transmission is 100% secure.

12. Cookies on ElwoLinks itself

The cabinet uses a session cookie (el_sid) essential to keep you logged in. We do not run third-party advertising cookies on the signup, login, or cabinet pages.

13. Changes

We will post updates on this page and change the “Last updated” date. Material changes to Facebook data use will be reflected here before we expand that use.

14. Contact

TakeTones · ElwoLinks · links.taketones.com
Privacy: [email protected]
Data deletion: https://links.taketones.com/legal/data-deletion