Privacy Policy
Last updated: May 01, 2025
This Privacy Policy describes how CampaignPilot ("Company", "we", "us", or "our") collects, uses, and shares information about you when you use our services, including our website, platform, and any related applications (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.
WHAT THIS POLICY COVERS
This Privacy Policy applies to information we collect when you use our Services. It does not apply to information collected by third parties, including Facebook and Meta Platforms, which have their own privacy policies. We encourage you to review the privacy policies of any third-party services you use in connection with our Services.
INFORMATION WE COLLECT
We collect several types of information in connection with the Services:
Information You Provide to Us
Account Information: When you register for an account, we collect your name, email address, password, and other information you choose to provide.
Payment Information: If you subscribe to a paid plan, we collect payment information such as credit card details, billing address, and other payment-related information. This information is processed by our payment service providers.
Communications: When you contact us for support or otherwise communicate with us, we collect the information you provide.
Facebook / Meta Account Data: To provide our Services, we require you to connect your Facebook Business account. We access data from Facebook's Marketing API, including campaign data, ad account information, audience data, creative assets, and performance metrics, based on the permissions you grant.
Information We Collect Automatically
Usage Data: We collect information about your interactions with our Services, such as pages visited, features used, actions taken, and time spent.
Device Information: We collect information about the device you use to access our Services, including hardware model, operating system, browser type, IP address, and device identifiers.
Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
Log Data: Our servers automatically record information when you use our Services, including your IP address, browser type, referring/exit pages, and operating system.
HOW WE USE YOUR INFORMATION
We use the information we collect to:
- Provide, maintain, and improve our Services
- Process transactions and send related information
- Send technical notices, updates, security alerts, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities in connection with our Services
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Comply with legal obligations
- Personalize and improve the Services and provide content or features that match user profiles or interests
We use Facebook API data exclusively to provide and improve the Services. We do not use Facebook data to serve advertising or for other purposes beyond what is necessary to operate the Services.
HOW WE SHARE YOUR INFORMATION
We may share your information as follows:
Service Providers
We share information with third-party vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, including payment processing, analytics, hosting, and customer support.
Business Transfers
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
With Your Consent
We may share your information with your consent or at your direction.
We do not sell your personal information to third parties.
DATA RETENTION
We retain your information for as long as your account is active or as needed to provide you the Services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your information, unless we are legally required to retain it.
YOUR RIGHTS AND CHOICES
Account Information
You may update or correct information about yourself by logging into your account or contacting us. You may delete your account by contacting us, but please note that some information may remain in our records after deletion.
Cookies
Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject browser cookies. Removing or rejecting cookies may affect the availability and functionality of our Services.
Marketing Communications
You may opt out of receiving promotional communications from us by following the instructions in those messages or by contacting us directly. If you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.
YOUR RIGHTS UNDER GDPR
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data. You have the following rights:
- Right to Access – You have the right to request copies of your personal data.
- Right to Rectification – You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure – You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing – You have the right to object to our processing of your personal data, under certain conditions.
- Right to Data Portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us using the contact information provided below.
LEGAL BASIS FOR PROCESSING (EEA USERS)
If you are from the EEA, our legal basis for collecting and using the personal information described in this Privacy Policy depends on the personal information concerned and the specific context in which we collect it:
- We need to perform a contract with you
- You have given us permission to do so
- The processing is in our legitimate interests and it is not overridden by your rights
- We need to comply with the law
YOUR RIGHTS UNDER CCPA
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- The right to know about the personal information a business collects about you and how it is used and shared.
- The right to delete personal information collected from you (with some exceptions).
- The right to opt-out of the sale of your personal information.
- The right to non-discrimination for exercising your CCPA rights.
We do not sell personal information as defined by the CCPA. To exercise your rights, please contact us using the information below.
FACEBOOK DATA AND API COMPLIANCE
Our Services use the Facebook Marketing API. Our use of data obtained from Facebook is subject to Facebook's Platform Terms and Developer Policies, in addition to this Privacy Policy. Specifically:
- We only access Facebook data that is necessary to provide the Services you have requested.
- We do not use Facebook data for purposes beyond what is disclosed to users and permitted by Facebook's Platform Terms.
- We do not transfer Facebook data to third parties except as necessary to provide the Services, or as required by law.
- We maintain security measures to protect Facebook data from unauthorized access, use, or disclosure.
- We allow users to revoke our access to their Facebook data at any time through Facebook's account settings.
DATA SECURITY
We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. However, no security system is impenetrable and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and notify those individuals whose information may have been compromised.
INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.
CHILDREN'S PRIVACY
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe that a child under 16 has provided us with personal information, please contact us.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
YOUR CALIFORNIA PRIVACY RIGHTS (SHINE THE LIGHT LAW)
California Civil Code Section 1798.83 permits users of our Services who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the contact information provided below.
DO NOT TRACK
Some browsers have a "Do Not Track" feature that lets you tell websites that you do not want to have your online activities tracked. Because there is not yet a common understanding of how to interpret the Do Not Track signal, our Services do not currently respond to browser Do Not Track signals.
CONTACT US
If you have any questions about this Privacy Policy, please contact us.