Privacy Policy
Last updated: May 28, 2026
WhatCampaign ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at whatcampaign.com (the "Service").
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, organization name, and authentication credentials (via email magic link, Google Workspace, or Microsoft Azure AD).
Campaign & Ad Data
We store campaign briefs, ad creatives, budget allocations, targeting parameters, and performance data that you create or import through the Service. This includes data from connected ad platforms such as Google Ads and Meta Ads (Facebook & Instagram).
Data from Connected Platforms (Facebook / Meta)
When you connect your Facebook or Instagram ad account through Meta's official APIs using OAuth, we access only the data necessary to operate the Service, which may include: your ad account ID and name, the Pages and Instagram accounts you manage, campaign / ad set / ad metadata, performance metrics, and the email address associated with your Facebook login (if you sign in with Facebook). We do not access your personal messages, friends list, or photos.
Usage Data
We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, IP address, and device information.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Generate AI-powered campaign recommendations and insights
- Process campaign publishing to connected ad platforms
- Send transactional emails (magic links, approval requests, notifications)
- Analyze usage patterns to improve the product experience
- Respond to support requests and communicate with you
- Comply with legal obligations
3. AI & Data Processing
WhatCampaign uses AI models to generate campaign structures, ad copy, targeting suggestions, and performance insights. Your campaign data may be sent to third-party AI providers (such as Anthropic or OpenAI) for processing. We do not use your data to train AI models. AI-generated content is provided as suggestions and should be reviewed before publishing.
4. Third-Party Integrations
When you connect ad platform accounts (Google Ads, Meta Ads), we access your ad account data through their official APIs using OAuth. We only request permissions necessary to read performance data and publish campaigns on your behalf. You can revoke access at any time through your account settings or the respective platform.
5. Data Sharing
We do not sell your personal information. We may share your information with:
- Service providers who help us operate the platform (hosting, email, analytics)
- Ad platforms when you publish campaigns through the Service
- AI providers for generating campaign recommendations
- Law enforcement when required by law or to protect our rights
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS), encrypted database connections, secure authentication via Firebase, and role-based access controls within organizations. However, no method of electronic transmission or storage is 100% secure.
7. Data Retention
We retain your account and campaign data for as long as your account is active. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or compliance purposes.
8. How to Delete Your Personal Data
Quick steps to delete your data
- Email privacy@whatcampaign.com from the email address associated with your WhatCampaign account, with the subject line "Delete my account and data".
- We will verify your identity and confirm receipt within 3 business days.
- We will permanently delete or anonymize your personal data within 30 days and email you a confirmation once the deletion is complete.
If you signed in with Facebook and want to remove WhatCampaign's access to your Facebook data, you can also revoke the app's permissions directly in your Facebook Business Integrations settings. Revoking access in Facebook will trigger our automated deletion of the associated data within 30 days.
You may also delete your account directly from within the WhatCampaign app under Settings → Account → Delete account, which initiates the same 30-day deletion process.
Data we are legally required to retain (such as billing records for tax purposes) will be kept only for the minimum period required by law and then deleted.
9. Your Other Rights
Depending on your jurisdiction, you may also have the right to access, correct, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@whatcampaign.com.
10. Cookies
We use essential cookies for authentication and session management. We may also use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.
11. Children's Privacy
The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date at the top.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, email us at privacy@whatcampaign.com or visit our contact page.