Privacy Policy

2.2

Sign-In with Google or Facebook

This section covers signing in only. Connecting a Meta advertising account is a separate, optional step described in section 2.5. When you sign in using Google or Facebook, we may collect:

• •Your name and email address from your Google or Facebook account
• •Profile picture (if you grant permission)
• •Basic profile information as permitted by the OAuth provider

We only request the minimum permissions necessary to provide our services. We do not post to your social media accounts without your explicit consent, and we do not access your private messages or contacts.

2.3

Content and Usage Data

We collect and store:

• •AI Personas: All personas you create, including their characteristics, backgrounds, and behavioral parameters
• •Test Content: Social media content you submit for testing (text, images, videos, or other media)
• •AI Responses: Generated responses from AI personas to your test content
• •Interaction Data: How you interact with our platform, including features used and time spent
• •Test History: Records of all content tests you run and their results

2.4

Automatically Collected Information

• •IP address and device information
• •Browser type and version
• •Operating system
• •Cookie data and similar tracking technologies
• •Usage statistics and analytics data

2.5

Connected Meta Advertising Accounts

Connecting a Meta (Facebook and Instagram) advertising account is optional. CrowdLab works without it, and you can disconnect at any time. If you choose to connect one, we request read-only access and use it to compare the predictions from your simulated tests against how your advertising actually performed.

What we access

• •Your Meta ad account identifier, account name, currency and time zone
• •Campaign, ad set and ad names, objectives, status and configuration
• •Ad creative content you have published: headlines, body copy, calls to action and media references
• •Aggregate performance metrics such as impressions, reach, clicks, click-through rate, conversions and spend

What we do not access

• •We request read-only access. We cannot create, edit, pause or delete your campaigns, and we never spend your advertising budget.
• •We do not access Custom Audiences, customer lists, or any personal data about the individuals your ads reached
• •We do not access private messages, comments, contacts, or payment and billing details
• •We do not post to your accounts

How we use and store it

• •Performance data is shown back to you in your own dashboard and used to measure our predictions against real outcomes
• •We may use aggregated, de-identified results that cannot be traced to you or your business to improve the accuracy of our simulation models
• •Access tokens are encrypted at rest, are never exposed to your browser, and are transmitted only to Meta
• •We do not sell this data, use it for advertising, or share it with other customers

Retention and deletion

• •Advertising data is retained while your account is connected, and for no more than 24 months
• •Disconnecting revokes our access and deletes the stored token immediately, so we stop reading your account
• •Performance figures already imported are kept as your own accuracy history, since they are a record of results you cannot regenerate. Delete your CrowdLab account, or email us, to have them removed
• •You can also revoke access from Meta directly, under Settings → Business Integrations on your Facebook account
• •Deleting your CrowdLab account deletes all connected advertising data on the schedule described under Data Retention below