CampaignStack

Privacy Policy

Last updated:

1. Overview

CampaignStack ("we", "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

Account Data

When you create an account, we collect your email address and name. If you subscribe to a paid plan, our payment processor (Stripe) handles billing information. We do not store credit card numbers.

Lead Data

You import lead data from third-party sources (Apollo, Clay, etc.) into CampaignStack. This data may include names, email addresses, job titles, company information, and LinkedIn profile URLs. You are the data controller for this data. We process it on your behalf to provide the Service.

API Keys (BYOK)

You provide API keys to connect third-party services. These keys are encrypted at rest using AES-256 and are only used to perform actions you request. We never share your keys with third parties.

Usage Data

We collect anonymous usage data (pages visited, features used, campaign metrics) to improve the Service. This data is aggregated and cannot identify you personally.

LinkedIn Session Data

If you connect a LinkedIn account for outreach, we store your LinkedIn session cookie securely. This cookie is used solely to execute actions you configure (connection requests, messages) and is encrypted at rest.

3. How We Use Your Data

  • Providing the Service: Importing leads, generating AI strategies, executing campaigns
  • Improving the Service: Aggregated, anonymized analytics to identify patterns and improve AI recommendations
  • Communication: Account notifications, product updates, and marketing emails (opt-out available)
  • Security: Detecting and preventing fraud, abuse, and unauthorized access

4. Data Sharing

We do not sell your data. We share data only with:

  • Infrastructure providers: Convex (database) and Cloudflare (CDN, DNS), bound by their respective privacy policies and DPAs
  • Payment processor: Stripe, for billing only
  • AI providers: Anthropic (Claude), for AI strategy generation. Lead data sent to AI providers is not used for model training per our agreements.
  • Error tracking: Sentry, for capturing application errors. Only technical data (stack traces, browser info) is sent. No personal or lead data is included.

5. Global Knowledge Graph

CampaignStack maintains an anonymized knowledge graph to improve suggestions across the platform (e.g., "campaigns targeting VP Sales in SaaS convert better with X approach"). This graph uses aggregated patterns only. Individual lead data is never exposed to other users.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated data may be retained indefinitely.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Delete your data ("right to be forgotten")
  • Export your data in a portable format
  • Object to processing based on legitimate interest
  • Withdraw consent for marketing communications at any time

To exercise these rights, contact privacy@campaignstack.io.

8. Security

We implement industry-standard security measures including:

  • AES-256 encryption for API keys and session data at rest
  • TLS 1.3 for all data in transit
  • Role-based access control within the application
  • Regular security reviews

9. Cookies

We use essential cookies for authentication and session management. With your consent, we use PostHog for privacy-friendly analytics and Sentry for error tracking. We do not use third-party advertising cookies. See our Cookie Policy for full details.

10. Children's Privacy

CampaignStack is not intended for users under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.

12. Contact

For privacy inquiries: privacy@campaignstack.io