1. Introduction
Crowdrift Limited ("Crowdrift," "we," "us," or "our") operates an AI-powered advertising platform that creates and manages digital ad campaigns for small businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at crowdrift.com or use our services (collectively, the "Service").
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.
2. Information We Collect
Information You Provide
When you create an account, use our Service, or contact us, you may provide information such as:
- Account information - your name, email address, and phone number, which may be collected through Google OAuth or other authentication methods.
- Business information - details about your business that you provide to help us create and manage advertising campaigns on your behalf.
- Payment and billing information - necessary to process subscriptions and payments for the Service. Payment processing is handled by third-party payment processors; we do not store complete payment card details on our servers.
- Communications - information you provide when you contact our support team or otherwise communicate with us.
Information We Collect Automatically
When you use the Service, we may automatically collect certain information, including:
- Usage data - information about how you interact with the Service, including pages viewed, features used, and actions taken.
- Device and browser information - such as your IP address, browser type, operating system, and device identifiers.
- Analytics data - we use analytics services, including Google Analytics, to understand how the Service is used and to improve our offerings.
Information from Third Parties
To deliver our advertising services effectively, we may collect business-related information from third-party sources, including advertising platforms such as Meta and Google. This information helps us optimize campaigns, measure performance, and provide insights related to your advertising activities.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Create, manage, and optimize advertising campaigns on your behalf.
- Process transactions and manage your subscription.
- Communicate with you, including sending service-related notices and responding to inquiries.
- Analyze usage patterns to improve the Service and develop new features.
- Detect, prevent, and address fraud, abuse, or technical issues.
- Comply with legal obligations and enforce our terms.
4. Sharing Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service providers - we share information with third-party vendors who perform services on our behalf, such as payment processing, analytics, cloud hosting, and customer support.
- Advertising platforms - to create and manage campaigns on your behalf, we share necessary business information with advertising platforms including Meta (Facebook/Instagram) and Google.
- Legal requirements - we may disclose information if required by law, regulation, legal process, or governmental request.
- Business transfers - if Crowdrift is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- With your consent - we may share information for other purposes with your explicit consent.
5. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to operate and improve the Service.
Essential Cookies
These cookies are necessary for the Service to function properly. They include session authentication cookies that keep you logged in and remember your preferences.
Analytics Cookies
We use Google Analytics to collect aggregated usage data that helps us understand how the Service is used. Google Analytics uses cookies to identify unique visitors and track browsing behavior across sessions. You can learn more about how Google uses data at policies.google.com/technologies/partner-sites.
Third-Party Cookies
Certain third-party services integrated into the Service, such as advertising platform pixels, may place their own cookies to track performance and conversions. These cookies are governed by the respective third party's privacy policy.
Managing Cookies
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete cookies that have already been set. Note that disabling cookies may affect the functionality of the Service.
6. Data Storage & Security
Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the United States (us-east-1 region). We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
These measures include, but are not limited to:
- Encryption of data in transit and at rest.
- Regular security assessments and monitoring.
- Access controls limiting who can access personal data.
- Secure development practices.
While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.
The 90-day retention period following account deletion allows us to fulfill obligations related to third-party advertising platforms and comply with applicable data retention requirements.
8. Your Rights & Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access - you may request a copy of the personal data we hold about you.
- Correction - you may request that we correct inaccurate or incomplete information.
- Deletion - you may request that we delete your personal data, subject to certain legal exceptions.
- Data portability - you may request a machine-readable copy of your personal data.
- Objection and restriction - you may object to or request restriction of certain processing of your personal data.
- Withdraw consent - where processing is based on consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
California Residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of personal information. As noted above, we do not sell personal information.
European Economic Area (EEA) Residents
If you are located in the EEA, our legal bases for processing your personal data include: performance of a contract (to provide the Service), legitimate interests (to improve and secure the Service), compliance with legal obligations, and your consent where applicable. You also have the right to lodge a complaint with your local data protection authority.
9. International Data Transfers
Your information is primarily stored and processed in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
By using the Service, you consent to the transfer of your information to the United States. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.
10. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from anyone under 16 years of age. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us at [email protected].
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Crowdrift Limited
Email: [email protected]
We aim to respond to all inquiries within 30 days.