Privacy Policy

The data controller for the CampaignOS application is CampaignOS LLC, reachable at jeroen@livingcleangroup.com. Where your business uses CampaignOS to manage its own advertising, your business is the controller of the lead and customer data it collects through its campaigns, and CampaignOS acts as its processor.

We only collect what the tool needs to function. In practice that is:

• Account data. Your email address, a hashed password (or a Google sign-in reference), and the workspaces and roles you belong to.
• Business information you enter. Company name, markets and countries, services and how you describe them, landing pages and phone numbers, brand description, tone of voice, client profiles and competing alternatives. You can also ask us to read this from your own website, which we do by fetching the public pages you point us at.
• Google Ads data. After you connect an account, we read and write campaign structure, budgets, targeting, keywords, ads, assets and performance metrics (impressions, clicks, cost, conversions), and keep a working copy in our database so the dashboards and the optimisation engine can use it. Your Google access token is stored server-side and used only to make the calls the application needs.
• Creative assets. Logos, photos and videos you upload, import from your website or generate, stored in our file storage together with their dimensions, format checks and approval status.
• Leads and funnel data. Records of people who enquired through a campaign — typically contact details, the campaign or keyword that produced them, the stage they reached and the commercial value of that stage. This is what allows return on advertising spend to be measured.
• Compliance and certification records. Rules, restricted terms and any written permission or certificate you register (for example a written confirmation from Google for a specific country), including its expiry date.
• Audit and usage records. Who requested what, when, the before and after values of every change, and any errors. This is a core feature of the product.

• No medical, clinical or diagnostic records, and no health data about patients.
• No call recordings and no conversation transcripts.
• No payment card data; there is no payment processing in the application today.
• No advertising data is pooled or shared between different customers' workspaces.

Where a lead record contains a phone number or email address, that is contact data, not health data. We ask you to keep clinical detail out of lead notes for the same reason Google Ads must never receive it.

• To run the workspace you signed up for: planning, publishing, measuring and reporting.
• To check each campaign against your compliance rules before it can be approved.
• To send a text description of your business and goals to an AI service that drafts campaign plans, ad copy and fix proposals; the draft is returned to you for approval and is never published automatically.
• To generate images or video when you ask for them, optionally using a photo of your own facility as the base.
• To keep an auditable history so a change can be understood or rolled back.
• To keep the service secure and to contact you about your account or the service.

We do not sell personal data, we do not use it to advertise our own products to your leads, and we do not use the contents of one customer's workspace to train a shared model that other customers benefit from.

Where the GDPR applies, we process data on the basis of performing our contract with you (providing the workspace), your consent (connecting a Google or YouTube account, and any marketing emails), our legitimate interest in securing and improving the service, and legal obligation where we must retain records.

• Google. Your campaigns, assets, videos and metrics are processed by Google Ads and, if you connect it, YouTube, under Google's own privacy terms. We send the data needed to create or change what you approved.
• Our cloud hosting provider. The database, file storage and authentication are hosted by our platform provider, which processes data on our instructions.
• Our AI provider. Text and image prompts are processed by an AI service to produce drafts you can review.
• Advisers and authorities, where we are legally required or to protect our rights.

Data is stored in our hosting provider's data centres, and Google Ads and YouTube data sits in Google's infrastructure. Some of these services process data outside your country; where that is required for a transfer from the EEA or UK, we rely on the standard contractual clauses or an equivalent safeguard that the provider applies.

Business, campaign and audit data is kept for as long as your workspace is active. Account data is deleted when you close your account, and lead records are deleted when you remove them or close the workspace, except where we must keep a record for legal reasons. Backups are cleared on a rolling schedule. You can ask us to delete a specific workspace and we will confirm what has gone.

• Every workspace is isolated by its own identifier; access is checked on each request.
• Role-based access: only people you give a role in your workspace can see its data.
• Secrets and tokens are held server-side and never shown inside the application.
• Every change to a live account is recorded with before and after values, and no campaign is ever switched on or funded without an explicit human action.
• Access is over HTTPS, and we monitor for errors and misuse.

You can ask for access to your personal data, a correction, deletion, a copy in a portable format, a restriction on processing, or to object to processing. You can also withdraw a consent, such as disconnecting Google or YouTube, at any time from inside the application. If you are a lead of one of our customers, please contact that business directly — we act on their instruction. You also have the right to complain to your data protection authority.

CampaignOS is a business tool for adults and is not directed at children. We do not knowingly collect data from anyone under 16.

If we change this policy in a way that matters to you, we will say so in the application and update the date at the top of this page.

Questions, requests or complaints about this policy: jeroen@livingcleangroup.com, CampaignOS LLC. We aim to answer within 30 days.