SNAP CAMPAIGNS

Privacy Policy

Effective Date: June 16, 2026

1. Introduction

Snap Campaigns is an AI-powered marketing automation platform provided by Outer Limits AI LLC ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding it.

By using Snap Campaigns (the "Service"), you agree to this Privacy Policy. If you do not agree, do not use the Service.

Contact: legal@outerlimits.ai | Outer Limits AI LLC, 3801 N Capital of Texas Hwy, Ste E240-3703, Austin TX 78746

2. Information We Collect

2.1 Information You Provide Directly

When you register and use the Service, we collect:

• Account information: email address, full name, company name, and company website. You may register with an email and password or with a supported single sign-on provider (such as Google Sign-In).

• Campaign inputs: campaign titles, objectives, product descriptions, target URLs, audience definitions, and your selected advertising channels

• Advertising platform credentials you provide to enable campaign creation (see Section 2.4)

• Communications: messages you send us via email or support channels

2.2 Information We Collect Automatically

When you use the Service, we automatically collect:

• IP address, browser type and version, device type, and operating system

• Pages you visit, features you use, and actions you take in the Service

• Date and time of your visits and referring website

• Errors you encounter and performance metrics

2.3 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not collect or store your credit card numbers or banking details. We store only: your payment status, account balance, transaction history, and Stripe customer ID.

2.4 Advertising Platform Credentials

To enable advertising integrations, you connect one or more advertising accounts — which may include Meta (Ad Account ID, Access Token, Facebook Page ID), Google Ads, and LinkedIn. These credentials and access tokens are stored encrypted in our database and used solely to interact with the respective platform APIs on your behalf. We do not use these credentials for any other purpose. You are responsible for the security of your credentials and for revoking access when no longer needed.

2.5 Advertising Performance Data

When you connect an advertising account, we may retrieve and store performance data (such as impressions, clicks, spend, conversions, and related metrics) for the campaigns you create or manage through Snap Campaigns. We use this data to provide reporting, analytics, AI-generated performance narratives, optimization recommendations, and — if you enable it — automated optimization (Autopilot).

2.6 AI-Generated Content and Images

We store the AI-generated content created for your campaigns, including research, strategy, landing page copy, and ad creative, along with your approved revisions. Generated images may be stored in a storage bucket that serves them via public URLs (anyone with the link can view the image). Stored images are subject to automatic deletion on a schedule (see Section 8); images for free or unpaid projects may not be persisted at all, or may be retained only briefly.

2.7 Lead Data

If you use lead-generation features (for example, LinkedIn Lead Gen Forms), we may receive personal information submitted by individuals who interact with your ads (such as names and email addresses). As between you and Snap Campaigns, you are the controller of this lead data; we process it solely to deliver it to you as part of the Service. You are responsible for providing all required notices and obtaining any required consents from those individuals (see Section 6).

2.8 Developer API Data

If you use our API, we store hashed API key identifiers and records of API usage (such as call counts and timestamps) to operate, secure, rate-limit, and bill the API.

3. How We Use Your Information

3.1 To Provide the Service

• Create and manage your account and team workspace

• Generate AI-powered campaign content based on your inputs

• Host landing pages created through the Service

• Set up and manage advertising campaigns on your behalf via platform APIs (Meta, Google, LinkedIn)

• Retrieve campaign performance data to provide reporting, analytics, recommendations, and optional automated optimization

• Track campaign status, billing, API usage, and revision history

• Process payments and manage your account balance

3.2 To Improve the Service

• Analyze aggregated and anonymized usage patterns to improve platform features

• Identify and fix errors using error tracking tools

• Measure performance and uptime

3.3 To Communicate With You

Transactional emails (always sent, cannot opt out):

• Account creation and verification

• Campaign status updates

• Payment receipts and account balance notifications

• Important service changes or security alerts

Marketing emails (opt-out available): product updates and promotional offers. Every marketing email includes an unsubscribe link.

3.4 What We Do NOT Do

• We do not sell your personal information to third parties

• We do not use your campaign inputs or content to train our own AI models, and we use third-party AI providers on terms that do not permit them to train their models on your content

• We do not share your advertising credentials with any third party beyond what is required to call the relevant advertising platform's API

• We do not use your information for purposes unrelated to Snap Campaigns

We do retrieve and analyze performance data for the campaigns you create or manage through Snap Campaigns in order to provide analytics, recommendations, and automated optimization, as described in Section 2.5.

4. How We Share Your Information

4.1 Service Providers

We share information with trusted third-party providers who help us operate the Service:

• Google LLC (Authentication): single sign-on for user authentication. Privacy Policy: policies.google.com/privacy

• Stripe, Inc. (Payments): Processes account top-ups and subscriptions and stores payment methods. Privacy Policy: stripe.com/privacy

• Vercel Inc. (Hosting): Hosts the Snap Campaigns platform and landing pages. Privacy Policy: vercel.com/legal/privacy-policy

• Supabase Inc. (Database and Storage): Stores user data, campaign data, and generated images. Privacy Policy: supabase.com/privacy

• AI Text Generation Providers: AI-generated text is produced using one or more third-party large language model providers. Providers currently may include OpenAI, Anthropic, Google, DeepSeek, xAI, and Together AI, among others. Your campaign inputs are transmitted to the active provider(s) solely for content generation.

• AI Image Generation Providers: AI-generated images are produced using one or more third-party services. Providers currently may include Recraft, Together AI, OpenAI, Google, Ideogram, and Adobe, among others. Your prompts and context are transmitted to the active provider(s) solely for image generation.

We may update the specific AI providers we use at any time, provided any new provider meets our data protection standards. Some AI providers may process data outside the United States (see Section 10). An up-to-date list of current AI providers is available at www.snapcampaigns.com/privacy.

• Advertising Platforms — Meta Platforms, Inc., Google LLC, and LinkedIn Corporation: Campaign setup and management data is sent to the platforms you connect, via their APIs, using your credentials. See each platform's data policy: facebook.com/privacy/policy, policies.google.com/privacy, and linkedin.com/legal/privacy-policy.

• Resend (Email): Delivers transactional and marketing emails. Privacy Policy: resend.com/legal/privacy-policy

• Sentry (Error Tracking): Collects error logs and anonymized user IDs to help us fix bugs. Privacy Policy: sentry.io/privacy

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or the safety of our users.

4.3 Business Transfers

If Snap Campaigns is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you via email before such a transfer occurs.

5. Advertising Platform Credentials and Data

Your advertising access tokens grant us the ability to create and manage campaigns in your connected accounts. We use this access to:

• Create and manage campaigns, ad sets, and ads on your behalf (as paused drafts where supported)

• Retrieve account and page information to validate your configuration

• Retrieve performance data for the campaigns you create or manage through Snap Campaigns, to provide reporting, analytics, recommendations, and optional automated optimization

Other than the performance data described above for your Snap Campaigns–managed campaigns, we do not analyze your unrelated existing campaigns, ad history, or audience data. You can revoke our access at any time by disconnecting the integration in Snap Campaigns or by revoking the token in your platform account settings.

6. Lead Data and Your Responsibilities

When you run lead-generation campaigns, you may collect personal information from individuals who respond to your ads. You are the controller of that data and are solely responsible for providing all legally required privacy notices and obtaining any required consents. Snap Campaigns acts as your processor for lead data and uses it only to deliver it to you and to provide the Service. You may request deletion of lead data associated with your account at any time.

7. Your Data Rights

7.1 Access

You may request a copy of the personal information we hold about you by emailing legal@outerlimits.ai.

7.2 Correction

You may update your account information in your account settings at any time.

7.3 Deletion

You may request deletion of your account and associated data by emailing legal@outerlimits.ai. Upon deletion:

• Your account and campaign data will be deleted within 30 days

• Remaining account balance is forfeited (see Terms of Service)

• Payment records are retained for 7 years for legal and tax compliance

• Hosted landing pages will be taken offline

7.4 Data Portability

You may request an export of your campaign data in JSON format by contacting legal@outerlimits.ai.

7.5 California Residents (CCPA)

California residents have the right to know what information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email legal@outerlimits.ai with subject line "California Privacy Rights Request." We will respond within 45 days.

7.6 EEA/UK Residents (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, you have rights under the GDPR including access, rectification, erasure, restriction, portability, and the right to object to processing. To exercise these rights, email legal@outerlimits.ai with subject line "GDPR Rights Request." We will respond within 30 days.

Legal basis for processing: Contract performance (to provide the Service), Legitimate Interests (security, improvement), Consent (optional communications), and Legal Obligation (compliance). Where we process lead data on your behalf, you are the controller and we act as your processor.

8. Data Security

We implement commercially reasonable security measures including:

• Encryption of data in transit (HTTPS/TLS) and at rest

• Encrypted storage of advertising platform credentials and access tokens

• Access controls limiting employee access to personal data

• Payment security via Stripe (PCI-DSS compliant)

No security measures are perfect. We cannot guarantee that unauthorized access will never occur. If we discover a breach affecting your personal information, we will notify you via email within 72 hours and take appropriate remediation steps.

9. Data Retention

• Active account data: retained while your account is active

• Campaign content and history: retained until account deletion

• Generated images: retained on a schedule and deleted automatically — typically up to 30 days after a paid project's images expire, and within approximately 7 days for free or unpaid projects (some free-tier images are not stored at all)

• Payment records: 7 years (legal and tax compliance)

• Error logs: 90 days

• Deleted account data: permanently removed within 30 days of deletion request

• Backup copies: may persist up to 30 days after deletion

10. International Data Transfers

Snap Campaigns is based in the United States. By using the Service, you acknowledge that your information will be processed in the United States. Our service providers, including some third-party AI providers, may process data in other countries. For EEA/UK users, we ensure appropriate safeguards including Standard Contractual Clauses where required.

11. Team Workspaces

If you use a shared workspace, information entered by any member may be visible to other members of the same workspace, and the workspace owner may manage and export workspace data. Invitation records (such as invited email addresses) are stored to administer access.

12. Children's Privacy

Snap Campaigns is intended for business users and is not directed at children under 18. We do not knowingly collect information from minors. If we learn that a user is under 18, we will terminate their account and delete their information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 30 days before they take effect. The updated policy will be posted at www.snapcampaigns.com/privacy. Continued use of the Service after changes take effect constitutes your acceptance.

14. Contact Us

For privacy questions, requests, or concerns:

Email: legal@outerlimits.ai

Mail: Outer Limits AI LLC, Attn: Privacy Officer, 3801 N Capital of Texas Hwy, Ste E240-3703, Austin TX 78746

For GDPR inquiries, use subject line: "ATTN: Data Protection Officer"

For California privacy requests, use subject line: "California Privacy Rights Request"

Last Updated: June 16, 2026