Privacy Policy

1. Introduction

DIGITAL DATA CAPITAL S.R.L., cu CUI 50475197 ("we," "our," or "us"), operator of CampaignPilot AI, is committed to protecting your privacy. Our company, established in 2024 and headquartered at Str. Londra, Nr. 32, Subsol, Birou Nr. 11, Municipiul București, Sector 1, Romania, provides advertising agency services (CAEN 7311). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Organization information
• Authentication credentials (securely hashed passwords)
• Profile information you provide

2.2 Google Account Data

When you connect your Google Ads account, we access:

• Google Ads account information (account ID, name, currency)
• Campaign data (campaigns, ad groups, keywords, and ads)
• Campaign performance metrics
• Basic profile information from your Google account

2.3 Usage Information

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and feature interactions
• Campaign generation and deployment history

3. How We Use Your Information

We use your information solely to provide and improve our application's user-facing functionality:

• Provide, operate, and maintain our services
• Generate AI-powered campaign strategies and content for your use within the application
• Deploy campaigns to your Google Ads accounts on your behalf
• Analyze campaign performance and provide recommendations within the application
• Communicate with you about service updates and support
• Improve and enhance our application's features and user experience
• Ensure security and prevent fraud
• Comply with legal obligations

4. Google API Services User Data Policy

CampaignPilot AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

4.1 Limited Use Disclosure

CampaignPilot AI only uses Google user data to provide and improve user-facing features that are prominent in our application's user interface. Our use of Google user data complies with the following Limited Use requirements:

• We do not allow humans to read Google user data unless: (a) we have the user's affirmative agreement, (b) it is necessary for security purposes (such as investigating abuse), (c) it is necessary to comply with applicable law, or (d) the data (including derivations) is aggregated and anonymized and used for internal operations in accordance with applicable privacy and data protection laws.
• We do not transfer Google user data to third parties unless: (a) it is necessary to provide or improve user-facing features that are prominent in the requesting application's user interface, (b) to comply with applicable laws, (c) as part of a merger, acquisition, or sale of assets with prior notice to users, or (d) for security purposes (such as investigating abuse).
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not use or transfer Google user data for any purpose other than providing or improving user-facing features that are visible and prominent in CampaignPilot AI's user interface.

4.2 Google Ads Data Usage

We access your Google Ads data exclusively to provide the following user-facing features within our application:

• Display your existing Google Ads accounts and campaigns within our platform
• Create and deploy new campaigns to your Google Ads accounts on your behalf
• Read campaign performance data to provide insights and recommendations within the application
• Manage campaign settings and configurations on your behalf as directed by you

We do NOT:

• Use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising
• Share your Google Ads data with third parties for advertising, marketing, or any purpose unrelated to providing our application's functionality
• Use your Google user data to build user profiles for purposes unrelated to providing our application's user-facing features
• Sell, rent, or lease your Google user data to any third parties
• Use Google user data to develop, improve, or train generalized or non-personalized AI/ML models
• Allow human access to your Google user data outside of the limited exceptions described in this policy

5. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share data
• Service Providers: With third-party service providers who assist in operating our platform (e.g., cloud hosting, database infrastructure) under strict confidentiality agreements and solely to provide our application's user-facing features. These providers are bound by obligations consistent with the Google API Services User Data Policy and are prohibited from using your data for any other purpose.
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice to you)

Important: With respect to data obtained through Google APIs, we only share such data as permitted under the Google API Services User Data Policy, including its Limited Use requirements. Google user data is never shared for purposes unrelated to providing or improving our application's user-facing features.

6. Third-Party Services

Our application integrates with:

• Google OAuth & Google Ads API: For authentication and campaign management. Google Ads data accessed through these APIs is used exclusively to provide the application's user-facing features as described in Section 4.
• Google Gemini AI: For generating campaign strategies and content based on user-provided inputs. Google user data obtained from Google APIs is not sent to Gemini AI for processing.

These services have their own privacy policies, and we encourage you to review them.

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest in our database
• Secure authentication using NextAuth.js with JWT tokens
• Regular security audits and updates
• Access controls and role-based permissions
• Secure API credential storage

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data only as long as necessary to provide our services and comply with legal obligations. Campaign data and generated content are retained for the duration of your account. When you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

9. Your Rights and Choices

You have the right to:

• Access and review your personal data
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a portable format
• Revoke Google Ads access at any time through your Google Account settings
• Opt-out of marketing communications
• Object to certain data processing activities

To exercise these rights, please contact us at the email address provided below.

10. Revoking Access

You can revoke our access to your Google Ads account at any time by:

• Visiting your Google Account Permissions page
• Removing CampaignPilot AI from the list of connected apps
• Disconnecting the account from within our application settings

11. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: