1. Who we are and who controls your data

Campaign Medic is a software platform operated by ISEQO LTD, a company registered in England and Wales under company number 17341372, with its registered office at 124-128 City Road, London, England, EC1V 2NX. In this policy, "Campaign Medic", "we", "us" and "our" refer to ISEQO LTD operating the Campaign Medic product.

For the purposes of applicable UK data-protection law (the UK GDPR and the Data Protection Act 2018), ISEQO LTD is the controller of the personal data described in this policy. You can contact us about privacy at privacy@campaignmedic.com.

2. Information we collect

Account information — your name, email address, and (for email/password sign-up) a hashed password. If you sign in with Google, we receive your name, email address and profile image from Google.
Authentication data — a session token that keeps you signed in, and, for password accounts, email-verification and password-reset tokens.
Advertising and analytics access tokens — when you connect Google Ads, Meta Ads, LinkedIn Ads, Pinterest Ads, Reddit Ads, TikTok Ads, X Ads, Google Analytics 4 or Google Search Console, Campaign Medic stores the access credentials those services issue. Depending on the provider, these are OAuth access and refresh tokens or OAuth 1.0a access tokens and secrets. They are encrypted at rest and used to provide the connected features you request.
Campaign and performance data — depending on the platform, campaign, ad group, ad, keyword, search-term, placement and demographic information, together with metrics such as impressions, clicks, spend, conversions and conversion value, retrieved from your connected accounts when an audit or analysis runs. We store the recommendations produced, the operations you approve, and before/after measurement snapshots so the audit history and Impact Monitor work. A short-lived cache of your campaign list (a few minutes) may be held in memory to reduce repeated API calls during chat.
Chat content — messages you send in the in-app assistant and the assistant's replies, stored so your conversation history is available to you.
Billing information — subscriptions are processed by Stripe. We store your Stripe customer and subscription identifiers and your plan status. We never receive or store your full card number or security code.
Usage and audit logs — records of audits you run, operations you approve or undo, and plan-usage counts, used to show your history, measure impact and enforce plan limits.

3. How we use your data

To provide the service — reading your connected accounts, producing recommendations, applying changes you approve, and measuring their impact.
To operate your account, authenticate you, and keep the service secure.
To send service and transactional emails (such as verification, password resets, billing notices, audit results and, where you have not opted out, product notifications). You can control optional notification emails in Settings and unsubscribe from them at any time.
To process payments and enforce plan limits.
To detect, prevent and investigate abuse, fraud and security issues.

We do not sell your personal data, and we do not use your advertising data to build profiles for advertising to you.

4. Advertising and analytics integrations

We connect to Google Ads, Meta Ads, LinkedIn Ads, Pinterest Ads, Reddit Ads, TikTok Ads and X Ads when you choose to authorize an account. Google Ads, Meta Ads, LinkedIn Ads, Pinterest Ads, Reddit Ads and TikTok Ads use their respective OAuth flows; X Ads uses OAuth 1.0a. We request the provider permissions needed for the features available to your account. These permissions can allow Campaign Medic to read ad account, campaign and performance information. For channels where campaign status changes are supported, Campaign Medic can pause or re-enable a campaign only after you approve that action. It does not create campaigns through Reddit, TikTok, X or Pinterest integrations. Google Analytics 4 and Search Console use read-only scopes when you choose to connect them. Meta Ads access can include campaigns delivered on Instagram placements. Access tokens and OAuth secrets are encrypted at rest and are used only to provide the connected features. You can disconnect an integration in the app or revoke access from the provider's account-security settings. An in-app disconnect removes the stored connection credentials and account link and stops future requests; previously created audit history and operation records are retained under the period described in section 7.

We access Google Ads using OAuth 2.0 with the adwords scope. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. AI processing

Audits and the in-app assistant use large language models to analyse your campaign data and generate recommendations. Depending on the provider selected for your workspace, the relevant campaign data and your chat messages are sent to Anthropic (Claude), OpenAI or Google (Gemini) for processing. These providers act as processors on our behalf and may process data outside the UK (see section 9). If you use a Bring-Your-Own-Key plan, requests are made using your own API key with the provider you choose.

6. Cookies

We use strictly-necessary cookies to keep you signed in and to remember your active workspace. We do not use advertising cookies or third-party tracking pixels. Where a cookie notice is shown, it reflects this limited use.

7. Data retention

We retain your account data for as long as your account is active. Audit history, recommendations and operation logs are retained according to your plan's history window — 30 days on the Free plan and up to 730 days (two years) on paid plans. When you delete your account, your account data and connected-account tokens are removed from our live systems, and any residual copies in routine encrypted backups are deleted in the normal backup-rotation cycle.

8. Account deletion

You can delete your account at any time from Settings. Deleting your account removes your personal data, workspaces you solely own, and the connected-account tokens they contain. You can also export your data before deleting. Deletion is permanent.

9. International processing

We are based in the United Kingdom. Some of our processors — including our AI providers, Stripe (payments) and our self-hosted SMTP mail server — may process data outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent contractual protections.

10. Your rights

Under UK data-protection law you have the right to access, correct, delete or receive a portable copy of your personal data, and to object to or restrict certain processing. To exercise any of these rights, email privacy@campaignmedic.com and we will respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

11. Security

All data is transmitted over HTTPS. Passwords are hashed with bcrypt. OAuth and integration tokens are encrypted at rest using AES-256-GCM. We apply least-privilege access across our infrastructure. No system is perfectly secure — if you believe you have found a vulnerability, please disclose it responsibly to security@campaignmedic.com.

12. Requests from public authorities

We may receive requests from law enforcement, regulators or other public authorities for personal data we hold. We handle every such request as follows.

Legality review. Every request is reviewed to confirm it is lawful, validly issued, and that the requesting authority has jurisdiction. We do not disclose data in response to informal or unverified requests.
Challenge. Where we consider a request unlawful, overbroad or improperly issued, we will challenge it, including through legal proceedings where appropriate.
Data minimisation. Where disclosure is required, we disclose only the minimum data necessary to satisfy the request. We never grant bulk or direct access to our systems.
Documentation. We record each request, the legal basis relied on, our response, and the individuals involved in the decision.
Notification. Where we are legally permitted to do so, we notify the affected customer before disclosing their data, so they have an opportunity to object.

13. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by a notice in the app. Continued use of the service after a change takes effect constitutes acceptance of the updated policy.

14. Company information

ISEQO LTD · Registered in England and Wales, company number 17341372 · Registered office: 124-128 City Road, London, England, EC1V 2NX · Privacy contact: privacy@campaignmedic.com.

Privacy Policy