SNAP CAMPAIGNS

Privacy Policy

Effective Date: March 3, 2026

1. Introduction

Snap Campaigns is an AI-powered marketing automation platform provided by Outer Limits AI LLC ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding it.

By using Snap Campaigns (the "Service"), you agree to this Privacy Policy. If you do not agree, do not use the Service.

Contact: legal@outerlimits.ai | Outer Limits AI LLC, 3801 N Capital of Texas Hwy, Ste E240-3703, Austin TX 78746

2. Information We Collect

2.1 Information You Provide Directly

When you register and use the Service, we collect:

• Account information: email address, full name, company name, and company website (via Google Sign-In)

• Campaign inputs: campaign titles, objectives, product descriptions, target URLs, and audience definitions you provide

• Meta credentials: Meta Ad Account ID, Facebook Page ID, and Meta Access Token you provide to enable ad creation (see Section 2.4)

• Communications: messages you send us via email or support channels

2.2 Information We Collect Automatically

When you use the Service, we automatically collect:

• IP address, browser type and version, device type, and operating system

• Pages you visit, features you use, and actions you take in the Service

• Date and time of your visits and referring website

• Errors you encounter and performance metrics

2.3 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not collect or store your credit card numbers or banking details. We store only: your payment status, account balance, transaction history, and Stripe customer ID.

2.4 Meta Credentials

To enable the Meta advertising integration, you provide your Meta Access Token, Ad Account ID, and Facebook Page ID. These credentials are stored encrypted in our database and used solely to interact with the Meta Graph API on your behalf. We do not use these credentials for any other purpose. You are responsible for the security of your Meta credentials and for revoking access when no longer needed.

2.5 AI-Generated Campaign Content

We store all AI-generated content created for your campaigns, including research, strategy, landing page copy, and ad creative, as well as your approved revisions. This content is associated with your account and used to provide the Service.

3. How We Use Your Information

3.1 To Provide the Service

• Create and manage your account

• Generate AI-powered campaign content based on your inputs

• Host landing pages created through the Service

• Set up Meta advertising campaigns on your behalf via the Meta Graph API

• Track campaign status, billing, and revision history

• Process payments and manage your account balance

3.2 To Improve the Service

• Analyze aggregated and anonymized usage patterns to improve platform features

• Identify and fix errors using error tracking tools

• Measure performance and uptime

3.3 To Communicate With You

Transactional emails (always sent, cannot opt out):

• Account creation and verification

• Campaign status updates

• Payment receipts and account balance notifications

• Important service changes or security alerts

Marketing emails (opt-out available): product updates and promotional offers. Every marketing email includes an unsubscribe link.

3.4 What We Do NOT Do

• We do not sell your personal information to third parties

• We do not use your campaign inputs or content to train AI models

• We do not share your Meta credentials with any third party beyond what is required to call the Meta API

• We do not use your information for purposes unrelated to Snap Campaigns

4. How We Share Your Information

4.1 Service Providers

We share information with trusted third-party providers who help us operate the Service:

• Google LLC (Authentication): Google Sign-In for user authentication. Privacy Policy: policies.google.com/privacy

• Stripe, Inc. (Payments): Processes all account top-ups and stores payment methods. Privacy Policy: stripe.com/privacy

• Vercel Inc. (Hosting): Hosts the Snap Campaigns platform and landing pages. Privacy Policy: vercel.com/legal/privacy-policy

• Supabase Inc. (Database): Stores all user and campaign data. Privacy Policy: supabase.com/privacy

• AI Image Generation Providers: AI-generated images are produced using one or more third-party image generation services. Providers may include Together AI, Adobe, OpenAI, Google, Microsoft, xAI, Anthropic, or others. We may change providers at any time to maintain quality and performance. Your campaign content (prompts and context) is transmitted to the active provider(s) solely for image generation purposes.

• AI Text Generation Providers: AI-generated text is produced using one or more third-party large language model providers. Providers may include OpenAI, Google, Anthropic, Microsoft, xAI, Together AI, or others. We may change providers at any time. Your campaign inputs are transmitted to the active provider(s) solely for content generation purposes.

We may update the specific AI providers we use at any time without prior notice, provided any new provider meets our data protection standards. An up-to-date list of current AI providers is available at www.snapcampaigns.com/privacy.

• Meta Platforms, Inc.: Campaign setup data is sent to Meta via the Graph API using your credentials. Meta's Data Policy: facebook.com/privacy/policy

• Resend (Email): Delivers transactional and marketing emails. Privacy Policy: resend.com/legal/privacy-policy

• Sentry (Error Tracking): Collects error logs and anonymized user IDs to help us fix bugs. Privacy Policy: sentry.io/privacy

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or the safety of our users.

4.3 Business Transfers

If Snap Campaigns is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you via email before such a transfer occurs.

5. Meta Credentials and Third-Party Advertising Data

Your Meta Access Token grants us the ability to create campaigns in your Meta Ads account. We use this access exclusively to:

• Create paused draft campaigns, ad sets, and ads on your behalf

• Retrieve ad account and page information to validate your configuration

We do not read, store, or analyze your existing Meta campaigns, ad history, or audience data beyond what is necessary to set up the campaigns you create in Snap Campaigns. You can revoke our access at any time by invalidating your Meta Access Token in your Meta account settings.

6. Your Data Rights

6.1 Access

You may request a copy of the personal information we hold about you by emailing legal@outerlimits.ai.

6.2 Correction

You may update your account information in your account settings at any time.

6.3 Deletion

You may request deletion of your account and associated data by emailing legal@outerlimits.ai. Upon deletion:

• Your account and campaign data will be deleted within 30 days

• Remaining account balance is forfeited (see Terms of Service)

• Payment records are retained for 7 years for legal and tax compliance

• Hosted landing pages will be taken offline

6.4 Data Portability

You may request an export of your campaign data in JSON format by contacting legal@outerlimits.ai.

6.5 California Residents (CCPA)

California residents have the right to know what information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email legal@outerlimits.ai with subject line "California Privacy Rights Request." We will respond within 45 days.

6.6 EEA/UK Residents (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, you have rights under the GDPR including access, rectification, erasure, restriction, portability, and the right to object to processing. To exercise these rights, email legal@outerlimits.ai with subject line "GDPR Rights Request." We will respond within 30 days.

Legal basis for processing: Contract performance (to provide the Service), Legitimate Interests (security, improvement), Consent (optional communications), and Legal Obligation (compliance).

7. Data Security

We implement commercially reasonable security measures including:

• Encryption of data in transit (HTTPS/TLS) and at rest

• Encrypted storage of Meta credentials

• Access controls limiting employee access to personal data

• Payment security via Stripe (PCI-DSS compliant)

No security measures are perfect. We cannot guarantee that unauthorized access will never occur. If we discover a breach affecting your personal information, we will notify you via email within 72 hours and take appropriate remediation steps.

8. Data Retention

• Active account data: retained while your account is active

• Campaign content and history: retained until account deletion

• Payment records: 7 years (legal and tax compliance)

• Error logs: 90 days

• Deleted account data: permanently removed within 30 days of deletion request

• Backup copies: may persist up to 30 days after deletion

9. Children's Privacy

Snap Campaigns is intended for business users and is not directed at children under 18. We do not knowingly collect information from minors. If we learn that a user is under 18, we will terminate their account and delete their information promptly.

10. International Data Transfers

Snap Campaigns is based in the United States. By using the Service, you acknowledge that your information will be processed in the United States. Our service providers may also process data in other countries. For EEA/UK users, we ensure appropriate safeguards including Standard Contractual Clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 30 days before they take effect. The updated policy will be posted at www.snapcampaigns.com/privacy. Continued use of the Service after changes take effect constitutes your acceptance.

12. Contact Us

For privacy questions, requests, or concerns:

Email: legal@outerlimits.ai

Mail: Outer Limits AI LLC, Attn: Privacy Officer, 3801 N Capital of Texas Hwy, Ste E240-3703, Austin TX 78746

For GDPR inquiries, use subject line: "ATTN: Data Protection Officer"

For California privacy requests, use subject line: "California Privacy Rights Request"

Last Updated: March 3, 2026