Privacy Policy

1. Introduction

Welcome to Shido AI CMO ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Facebook Ads analytics platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Facebook Connection: Facebook access tokens to retrieve your advertising data
• Journal Entries: Notes and updates you log about your advertising campaigns

2.2 Information from Facebook

When you connect your Facebook account, we access:

• Facebook Ad Account data (campaigns, ad sets, ads)
• Advertising insights and metrics
• Performance data for your advertisements

2.3 Automatically Collected Information

• Usage data and analytics
• Device information and browser type
• IP address and location data

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Analyze your Facebook advertising performance
• Generate AI-powered insights and recommendations
• Improve our platform and user experience
• Communicate with you about service updates
• Ensure platform security and prevent fraud

4. Facebook Data Handling

We comply with Facebook's Platform Policy and Data Use Policy:

• We only access data you explicitly authorize
• Facebook data is used solely to provide our analytics service
• We do not sell or share your Facebook data with third parties
• You can revoke our access at any time through Facebook settings
• We automatically refresh your access tokens to maintain connection

5. Data Storage and Security

We implement industry-standard security measures:

• Data is stored securely using Supabase (PostgreSQL database)
• All connections use HTTPS/SSL encryption
• Access tokens are encrypted at rest
• We implement Row Level Security (RLS) to isolate user data
• Regular security audits and updates

6. Data Retention

We retain your data as follows:

• Account Data: Until you delete your account
• Facebook Tokens: Until you disconnect your Facebook account
• Journal Entries: Until you delete them or close your account
• Analytics Data: Cached for up to 24 hours for performance

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Revoke Facebook access permissions
• Opt-out of communications

8. Data Deletion

You can request deletion of your data by:

• Deleting your account through Settings
• Disconnecting your Facebook account
• Contacting us directly

Upon deletion request, we will remove your data within 30 days, except where retention is required by law.

9. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Facebook Graph API: Advertising data retrieval
• Google Gemini AI: AI-powered insights generation

Each service has its own privacy policy governing data handling.

10. Cookies and Tracking

We use essential cookies for:

• Authentication and session management
• Remembering your preferences
• Analytics and performance monitoring

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: connect@talktoyourcmo.com
Address: Unit 23-11, i-Zen Kiara 1, Jalan Kiara, 50480 Kuala Lumpur, W.P. Kuala Lumpur, Malaysia

15. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with supervisory authority

16. California Privacy Rights (CCPA)

California residents have specific rights regarding their personal information under the California Consumer Privacy Act (CCPA).