Privacy Policy

AI Ad Engine is an internal tool used by Beyond (Global Support Limited) in New Zealand to draft TikTok advertising creative. It is not open to the public. It holds very little personal information: the email addresses of the handful of Beyond staff who use it, and advertising performance figures for Beyond’s own campaigns. It does not collect information about TikTok users, and it does not sell or share data for advertising or any other purpose.

Beyond (Global Support Limited), New Zealand, is responsible for the information described here. For any question about this policy, or to ask for your information to be corrected or deleted, contact kyle@gobeyond.co.nz.

We hold the following.

• Sign-in details for Beyond staff. The email address of each approved user, and the session record that keeps them signed in. There are no passwords: sign-in is by emailed link, one time code or passkey.
• Product pages you submit. The link, and the product information read from that public page.
• Generated creative. The ad angles and scripts the tool drafts, and whether a Beyond user approved or rejected each one.
• Advertising performance data. Aggregate figures for Beyond’s own TikTok campaigns, such as spend, impressions, clicks and conversions, read from TikTok’s advertising API using an account Beyond controls. These are campaign totals. They do not identify anyone who saw or clicked an advert.

We do not use cookies for advertising or analytics. The only cookies set are the ones that keep an approved user signed in.

Where the tool connects to TikTok, it does so against advertising accounts that Beyond owns or has been authorised to manage, using access granted through TikTok’s own authorisation flow. What it reads is limited to the scopes granted at that point.

That data is used for one purpose: to show Beyond which of its own ad angles performed best, and to improve the angles the tool drafts next. We do not combine it with data from other sources to profile individuals, we do not pass it to anyone outside Beyond, and we do not use it for any advertising other than Beyond’s own. Access can be revoked at any time from TikTok Business Center, and revoking it stops any further collection.

To run the tool for the purpose described: drafting advertising creative, keeping a record of what was approved, and reporting on how it performed. We do not use this information for anything else, and we do not sell it or make it available to anyone for their own purposes.

Only the service providers that make the tool work, and only so far as each needs in order to do its job.

• Supabase, for the database and authentication. Data is held in Supabase's Sydney region.
• Vercel, for hosting.
• Anthropic, which receives product page content and generates the ad angles.
• TikTok, where we read advertising performance for Beyond's own campaigns.

We may also disclose information where the law requires it. Because these providers operate internationally, some information is stored or processed outside New Zealand.

Product runs, generated angles and performance records are kept while they are useful for comparing past results, and deleted when they are not. Sign-in records are deleted when an address is removed from the access list. Anything may be deleted sooner on request.

Access requires sign-in as an approved Beyond address, checked on every page and every action rather than only at the front door. There are no shared passwords. Credentials for connected services are held as server-side environment variables and are never sent to the browser.

Under the New Zealand Privacy Act 2020 you may ask what personal information we hold about you, ask for it to be corrected, and ask for it to be deleted. Write to kyle@gobeyond.co.nz and we will respond within 20 working days. If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner at privacy.org.nz.

We may update this policy. The date at the top of this page shows when it last changed.