Legal

Privacy Policy

Last Updated: August 3, 2026

1. Introduction

Campgn is operated by Arbor AI Studio Ltd. (“Arbor AI Studio,” “we,” “our,” or “us”). Campgn is a marketing intelligence workspace that connects your marketing platforms (Meta, Google Ads, Google Analytics 4, and Google Search Console) to the AI assistant you already use. This Privacy Policy explains what information we collect when you use the Campgn web application and the Campgn MCP service (together, the "Service"), how we use it, and the choices you have.

By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account data. When you sign in with Google, we receive your Google account email address and a unique Google user ID. We use these to identify your workspace.

Company profile. Information you enter in the setup form: company name, website URL, target audience, team size, monthly ad budget, and company stage. This tailors the reports your AI assistant produces.

Platform connection data. When you connect a marketing platform, we store the OAuth tokens required to access it on your behalf, plus identifying metadata about the connection (for example: connected account email, ad account IDs and names, page names, GA4 property IDs, Search Console site URLs, token expiry, and granted scopes).

Preferences. Settings you choose in the workspace, such as your preferred report output format.

Usage data. Basic technical logs from our hosting infrastructure (requests, errors, performance) used to operate and debug the Service.

3. How We Use Your Information

Operate your workspace and keep your connections active.
Fetch your marketing data on demand, on your behalf, when you or your AI assistant request a report.
Remember your company profile and preferences across sessions.
Maintain, secure, and improve the Service.

We do not sell your data, and we do not use your marketing data to train AI models.

4. Connected Marketing Platforms

Campgn requests the permissions required to connect with supported marketing platforms. Depending on the platform, these permissions may include access to advertising accounts, Pages, business assets, messaging, leads, and reporting data.

Although some requested permissions technically allow broader platform access, in the current version of Campgn the Service is used only to retrieve reporting and account information and does not expose features that allow users to create, edit, publish, pause, resume, or delete campaigns, ads, Page content, messages, budgets, creatives, audiences, or account settings.

OAuth tokens are encrypted at rest and are used only to authenticate requests on your behalf. Campgn accesses connected platform data only when needed to provide requested reports, insights, or other features of the Service. You may disconnect any connected platform at any time from the dashboard, which removes the stored access token.

5. AI Assistants and the MCP Service

When you connect an AI assistant (Claude, Kimi Code, Codex, or another MCP-compatible client), your assistant calls the Campgn MCP service with your credentials. Each request is authorized with your own OAuth identity, and responses contain only data from platforms you connected. Your conversations with the assistant happen inside the assistant's own product (Anthropic, OpenAI, etc.) and are governed by that provider's privacy policy. We do not see or store your chat content.

6. Service Providers

We share limited data with the providers required to run the Service: Google (sign-in, Ads, Analytics, and Search Console APIs, Cloud Run hosting), Meta (Marketing API), and Supabase (database). Each processes data under its own privacy policy.

7. Data Retention & Deletion

We keep your account data, company profile, and connection records while your workspace is active. Disconnecting a platform deletes its stored token immediately. You may request deletion of your company profile and account data at any time (see Section 10). Basic infrastructure logs are retained per our hosting providers' default windows.

8. Security of Your Information

We protect your information using OAuth tokens encrypted at rest, TLS encryption for all network traffic, secure storage of platform credentials, and per-user authorization for every API request. Although some connected platforms grant permissions that could support additional capabilities, Campgn currently uses those permissions only to provide reporting and analysis features and does not expose functionality that modifies advertising assets, Page content, messages, or account settings. No method of transmission or storage is perfectly secure, but we design so that even a compromised component exposes as little as possible.

9. International Processing

Arbor AI Studio is based in Dhaka, Bangladesh. Your information may be processed and stored in Bangladesh and other countries where we or our trusted service providers operate. By using the Service, you acknowledge that your information may be transferred to and processed in these locations.

10. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing contact@arboraistudio.com with "Privacy Request" in the subject line. You can also disconnect any platform yourself, instantly, from the dashboard.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date above shows the current version; changes take effect when posted. Continued use of the Service after an update means you accept the revised policy.

12. Contact Us

Questions about this policy or your data:

Arbor AI Studio
Unit 2N, Dhanmondi Garden City, Dhaka 1209, Bangladesh
Email: contact@arboraistudio.com (include "Privacy Request" in the subject line for privacy matters)