Privacy Policy

1. Who We Are

Camply Labs, Inc. ("Camply", "we", "our", "the Company") is an artificial intelligence platform for creating digital advertising campaigns, video scripts, marketing strategies, and managing creative content. The company is incorporated in Delaware, USA and provides services to business owners, marketers, and agencies worldwide.

2. Who This Policy Applies To

This policy applies to:

• Registered users of the application/platform
• Leads who filled out a waitlist or contact form
• Visitors to our website and landing pages

3. Types of Information We Collect

3.1 Account Information

Full name, email, phone number (if provided), business type, fields of activity.

3.2 Authentication and Access

Encrypted passwords (bcrypt), activation tokens, JWT, OAuth credentials (if you connect external accounts).

3.3 Integrations

Connection details and permissions for Meta (Facebook Ads API) and TikTok Ads – only with your explicit authorization.

3.4 Campaign and Creative Information

Ad copy, scripts, targeting settings, budgets, media files (images/videos) you upload or generate.

3.5 Leads and Forms

Name, email, phone number (if collected), business details, free-text messages.

3.6 Telemetry and Analytics

IP address, browser type, device/OS, pages viewed, timestamps, interaction logs, anonymous or identified usage events.

3.7 Payments (If Applicable)

Transaction IDs and non-sensitive billing details processed via a secure payment provider. We do not store card numbers.

4. Legal Basis for Processing

We process personal information under:

• Contract performance – to provide and operate the service
• Consent – e.g., for non-essential cookies and marketing
• Legitimate interest – product improvement, fraud prevention, security
• Legal obligation – compliance with applicable laws and authorities

5. How We Use Information

• Operating and improving the service
• Personalizing the user experience and optimizing creative assets
• Service and marketing communication (with consent; can be revoked at any time)
• Security monitoring, error tracking, and abuse prevention
• Compliance with legal and regulatory requirements

6. Cookies and Tracking Technologies

6.1 Types of Cookies

• Essential
• Functional
• Performance/Analytics
• Marketing/Advertising

6.2 Consent Management

Non-essential cookies are used only after user consent. You may update preferences anytime via the Cookie Settings center on the site.

7. Sharing Information with Third Parties

7.1 Data Processors

We work with third-party processors such as:

• Supabase (database, storage)
• OpenAI / Anthropic (AI content processing)
• Stripe (payments)

Each operates under a Data Processing Agreement (DPA) and industry-standard security protections.

7.2 Optional Integrations (Your Choice)

Meta, TikTok Ads – enabled only after your explicit authorization and used according to their platform policies.

7.3 Legal Compliance

We may disclose data if required by law or legal process.

7.4 No Sale of Personal Data

We do not sell personal information. Advertising data sharing occurs only with consent and in accordance with law.

8. Your Rights

Depending on your jurisdiction (GDPR, CCPA/CPRA, and applicable local privacy laws):

• Access to your data
• Correction and deletion
• Restriction of processing
• Objection to processing
• Data portability
• Withdrawal of consent

California residents may also request limitations on advertising-related sharing. A "Do Not Sell/Share" link will be provided if required.

Requests can be sent to our contact details below.

9. Information Security

We implement SSL/TLS encryption, bcrypt password hashing, access controls, activity logs, backups, and optional two-factor authentication. No system is entirely secure, but we take reasonable measures to protect data and will report incidents as required by law.

10. Information Retention

• Active accounts: information is retained as long as necessary to provide the service.
• Deleted accounts: permanently deleted within up to 30 days unless legal retention is required.
• Leads: retained up to 12 months without activity or earlier upon request.
• Analytics/logs: retained up to 24 months in reduced or anonymized form.

11. International Data Transfers

Data may be transferred outside your country (e.g., EU or USA). We rely on recognized transfer mechanisms such as Standard Contractual Clauses (SCCs) and apply appropriate safeguards.

12. Children's Privacy

The service is not intended for children under 16 (or a higher age as required locally). We do not knowingly collect data from minors. If such data is found, we will delete it promptly.

13. Changes to This Policy

We may update this policy periodically. Material changes will be announced on our website and sent to registered users. Continued use after updates constitutes acceptance of the revised policy.

14. Special Disclosure for Advertising Integrations

When you connect advertising integrations (Meta / TikTok), certain campaign data may be transferred to those providers as required for service operation. You may revoke permissions at any time through your Camply account or directly on the external platform.

15. Data Deletion Policy

Camply respects your right to delete your personal data.

15.1 Quick Account Deletion Within the System

You can delete your account directly:

• Log in to your Camply account
• Go to Settings
• Open "Data & Privacy"
• Click "Permanently Delete My Account"

15.2 Data Deleted Upon Account Removal

• User profile and personal details
• Campaigns, ads, leads
• Uploaded media
• Connections to Meta/Facebook/Instagram or other integrations

15.3 What Might Remain

• Anonymous or aggregated data that cannot identify you
• Information required to comply with tax or legal obligations

15.4 Additional Ways to Request Deletion

If you cannot access your account, you may request deletion by:

Email: office@camply.ai

Subject: "Data Deletion Request – Camply"

Include:

• Full name
• Email used in your Camply/Meta account
• Short description of your use (e.g., "campaign management", "ad account connection")

15.5 Processing Time

Verified deletion requests will be processed within up to 30 days unless the law requires longer retention.

If you have additional questions regarding data privacy or deletion, contact us anytime.