1. Introduction
EcomCockpit ("we," "our," or "us") operates the EcomCockpit platform available at ecomcockpit.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including when you log in through Facebook.
2. Information We Collect
When you use EcomCockpit, we may collect the following information:
- Facebook Account Information: When you log in via Facebook, we receive your name, user ID, and an access token. This token allows us to manage ads on your behalf through the Meta Marketing API.
- Ad Account Data: We access your Meta ad accounts, campaigns, ad sets, and ads to display and manage them within the Service.
- Google Drive Data: If you connect Google Drive, we access files and folders you select to use as ad creatives. We only access files in read-only mode.
- Creative Files: Files you upload directly or select from Google Drive for use as ad creatives.
- Usage Data: Destination URLs, product profiles, and ad copy you create within the Service.
3. How We Use Your Information
We use the information we collect to:
- Authenticate you and provide access to the Service
- Create, manage, and launch ads on your Meta ad accounts on your behalf
- Analyze your creative assets using AI to generate ad copy suggestions
- Store your preferences, saved URLs, product profiles, and ad copy for your convenience
- Improve and maintain the Service
3a. Google Drive Data Use
EcomCockpit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- Purpose: We access your Google Drive in read-only mode solely to let you browse and select video and image files to use as ad creatives. We do not modify, delete, or create files in your Google Drive.
- Limited use: Google Drive data is used only to display your folders and files within the Service and to download selected files for ad creation. We do not use this data for advertising, analytics, or any other purpose.
- No server storage: Your Google Drive files are not permanently stored on our servers. Files are downloaded temporarily during ad creation and are not retained after the ad is submitted to Meta.
- No sharing: We do not share your Google Drive data with third parties, except as necessary to create ads via the Meta Marketing API (i.e., uploading the creative files you selected to your Meta ad account).
- Token storage: Your Google OAuth access token and refresh token are stored only in your browser's local storage. They are never stored on our servers. You can revoke access at any time by disconnecting Google Drive within the app or by removing EcomCockpit from your Google Account permissions.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share data with:
- Meta Platforms, Inc.: To create and manage ads via the Meta Marketing API. Meta's use of your data is governed by the Meta Privacy Policy.
- Google: To access your Google Drive files. Google's use of your data is governed by Google's Privacy Policy.
- AI Service Providers: Creative content may be sent to AI services (Anthropic Claude, Google Gemini) for analysis and copy generation. No personal data is included in these requests.
- Legal Requirements: If required by law, regulation, or legal process.
5. Data Retention
We retain your data only for as long as necessary to provide the Service. Access tokens are stored locally in your browser and are not stored on our servers. You can clear your data at any time by logging out, which removes all locally stored tokens and preferences.
6. Data Deletion
You can request deletion of your data at any time by contacting us at info@lundquistecom.se. Upon receiving a deletion request, we will delete all data associated with your account within 30 days. You can also delete your local data immediately by logging out of the Service.
To remove EcomCockpit's access to your Facebook account, visit your Facebook Business Integrations settings and remove EcomCockpit.
To remove EcomCockpit's access to your Google Drive, disconnect Google Drive within the app or visit your Google Account permissions and revoke access for EcomCockpit.
7. Data Security
We implement appropriate technical and organizational security measures to protect your information. Access tokens are stored in your browser's local storage and transmitted over HTTPS. We do not store your Meta or Google credentials on our servers. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.
8. Cookies and Local Storage
EcomCockpit uses browser local storage (not cookies) to store your authentication tokens and preferences. This data is stored only on your device and is not transmitted to third parties. You can clear this data at any time through your browser settings or by logging out.
9. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at info@lundquistecom.se.
10. Third-Party Services
Our Service integrates with third-party platforms. Your use of these platforms is subject to their respective privacy policies:
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at: info@lundquistecom.se