Privacy Policy

SiteWave Creative ("we," "us," or "our") operates the META Ad Catalog service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service at catalog.sitewave.ai.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using the Service, including:

• Account Information: Name, email address, password, and company affiliation
• Profile Information: User role, preferences, and settings
• Content: Advertising creative assets, captions, images, and other content you upload or create
• Communications: Messages, feedback, and support requests you send to us

1.2 Information from Third-Party Services

When you connect your Facebook or Instagram accounts, we collect:

• Social Media Account Information: Page names, page IDs, account IDs
• Access Tokens: OAuth tokens that allow us to publish content on your behalf (stored encrypted)
• Permissions: List of permissions you grant to our application
• Publishing History: Records of content published through the Service

1.3 Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Pages visited, features used, time spent, and actions taken
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, error logs, and performance data
• Cookies: Session cookies for authentication and functionality

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: Enable account creation, content management, and social media publishing
• Authentication: Verify your identity and manage your account access
• Social Media Integration: Publish content to your connected Facebook and Instagram accounts
• Improve the Service: Analyze usage patterns, fix bugs, and develop new features
• Communications: Send service updates, security alerts, and support messages
• Security: Detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service
• Analytics: Understand how users interact with the Service to improve user experience

3. How We Share Your Information

3.1 With Your Consent

We share your information with third parties when you explicitly authorize us to do so, such as when you connect your social media accounts and authorize us to publish content on your behalf.

3.2 With Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and storage providers
• Database management services
• Analytics and monitoring services
• Customer support tools

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.3 Within Your Organization

If you are part of a company or team using the Service, your content and activity may be visible to other members of your organization based on your role and permissions.

3.4 For Legal Reasons

We may disclose your information if required by law or in response to valid legal requests, such as:

• Subpoenas, court orders, or other legal processes
• To protect our rights, property, or safety, or that of our users or the public
• To investigate or prevent fraud, security issues, or technical problems
• To enforce our Terms of Service

3.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and provide choices regarding your information.

3.6 Aggregated Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, such as usage statistics or industry trends.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All sensitive data, including social media access tokens, is encrypted using AES-256-GCM encryption
• Secure Transmission: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Access Controls: Role-based access controls limit who can view and modify data
• Authentication: Secure password hashing and session management
• Monitoring: Continuous monitoring for security threats and vulnerabilities
• Regular Audits: Periodic security assessments and penetration testing

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period after account closure
• Content: Retained until you delete it or close your account
• Social Media Tokens: Retained while accounts are connected; deleted immediately upon disconnection
• Audit Logs: Retained for security and compliance purposes, typically for 1-2 years
• Deleted Content: Soft-deleted content is permanently purged after 30 days

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information at any time through your account settings.

6.2 Delete Your Account

You may delete your account at any time. Upon deletion, we will remove your personal information from our active databases, though some information may be retained in backups for a limited period.

6.3 Disconnect Social Media Accounts

You can disconnect your Facebook and Instagram accounts at any time through the Service settings. This will immediately revoke our access to publish content on your behalf and delete your stored access tokens.

6.4 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email. Note that you will still receive essential service-related communications.

6.5 Cookies

You can control cookies through your browser settings. Note that disabling cookies may limit your ability to use certain features of the Service.

6.6 Data Portability

You may request a copy of your personal information in a structured, machine-readable format by contacting us at [email protected].

7. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

9. Third-Party Links and Services

The Service may contain links to third-party websites or services, including Facebook and Instagram. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us at [email protected]. We will verify your identity before processing your request.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of whether we process your personal data and access to such data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restriction: Request restriction of processing under certain circumstances
• Right to Data Portability: Receive your personal data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data under certain circumstances
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority in your country.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the Service

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.