Promoter Intelligence Privacy Policy

Promoter Intelligence is a business-to-business commercial intelligence service for live event promoters. In this policy, Promoter Intelligence, we, us, and our refer to the operator of the Promoter Intelligence service.

Our clients are businesses that use the service to monitor event sales, marketing performance, audience signals, ad submission workflows, and related commercial operations. We process some information as a service provider or processor for those clients.

Contact: hello@promoterintelligence.com

We collect only the information needed to provide, protect, and improve the service.

• Account information, such as name, business email address, organization, role, authentication provider identifiers, and access permissions. We do not receive or store your Google or Microsoft password.
• Client configuration data, such as client name, client slug, team membership, event configuration, connected platform accounts, and administrative settings.
• Event and ticketing data provided by clients or connected systems, such as event names, dates, venues, products, ticket quantities, sales totals, revenue, order status, and related commercial metrics. Where individual buyer identifiers are used, we minimize, hash, pseudonymize, or restrict them where practical.
• Ad submission and creative workflow data, such as ad copy, captions, destination URLs, uploaded images or videos, campaign notes, approval status, publishing status, and preview links.
• Marketing platform data from connected ad platforms, including Meta Platform Data described below.
• Technical, security, and usage data, such as IP address, device and browser information, log data, session cookies, error records, and audit events.
• Support and communications data, such as messages, requests, attachments, and contact details you provide when you contact us.

If a client connects Meta assets or shares Meta Business assets with Promoter Intelligence, we may access Meta Platform Data through Meta APIs only for the business purposes requested by that client.

The Meta data we may receive or create includes:

• Meta Business, ad account, Page, and Instagram professional account identifiers, names, status, currency, and configuration fields needed to identify and manage connected assets.
• Campaign, ad set, ad, and creative identifiers, names, statuses, effective statuses, thumbnails, creative metadata, preview links, URL tags, object story specifications, Page identifiers, Instagram actor identifiers, and tracking specifications.
• Meta Ads Insights metrics, including spend, impressions, reach, actions, conversions or purchases where available, cost per action, campaign performance, ad-level performance, and related reporting fields.
• Media upload results, such as image hashes, video identifiers, and publish responses when an authorized user publishes an ad to Meta.
• Meta access tokens or system user tokens needed to operate the connection. Tokens are treated as secrets and are not shown to ordinary users.

We do not request or use Facebook friend lists, private messages, personal timeline posts, consumer profile data unrelated to the connected business assets, or sensitive personal categories from Meta for this service.

We use information for the following purposes:

• To authenticate users, manage accounts, enforce client access controls, and protect tenant isolation.
• To provide commercial intelligence features, including event sales monitoring, campaign performance reporting, booking curve analysis, forecasting, benchmarking, and intervention planning.
• To connect Meta campaign and ad performance to client events so authorized users can assess spend, reach, impressions, conversions, purchases, and cost per result.
• To create, preview, and publish client-approved Meta ads in a paused status or another client-selected status, using the ad account, Page, Instagram actor, ad set, creative material, and tracking settings selected by the client.
• To upload client-supplied images and videos to Meta for ad creation when an authorized user requests publishing.
• To send server-side conversion events to advertising platforms, including Meta Conversions API, only where a client has enabled that feature and provided the relevant event data or authority.
• To maintain logs, troubleshoot errors, monitor data freshness, prevent abuse, and secure the service.
• To comply with contracts, legal obligations, platform terms, and audit requirements.

Promoter Intelligence uses Meta permissions only to provide client-requested ad reporting, ad publishing, and asset configuration features.

• ads_read: used to read campaign, ad, and Ads Insights reporting for connected ad accounts.
• ads_management: used to upload media, create ad creatives, create ads, request previews, and manage ad publishing workflows requested by an authorized client user.
• business_management: used to identify and configure the business assets needed for the reporting and publishing workflows, such as ad accounts, Pages, and related business assets.
• pages_read_engagement and pages_show_list: used only where required to identify and use Pages connected to the client's Meta business assets.

We do not sell Meta Platform Data. We do not share Meta Platform Data with data brokers, ad networks, or unrelated third parties. We do not use Meta Platform Data for surveillance, eligibility decisions, credit, employment, housing, insurance, or any purpose unrelated to providing the Promoter Intelligence service to the client that connected the data.

We do not use Meta Platform Data to build independent consumer profiles or to target advertising outside the client's authorized use of its own connected business assets. We do not combine Meta Platform Data across clients except in aggregated or anonymized form that does not identify a client, person, ad account, Page, or campaign.

We may share information only as needed to operate the service:

• With authorized users of the client account that owns or has permission to access the relevant data.
• With service providers that help us host, secure, authenticate, store, process, support, and monitor the service, including cloud hosting, database, file storage, authentication, email, logging, and infrastructure providers.
• With connected platforms, such as Meta, Google, Microsoft, ticketing platforms, CRM platforms, or ad platforms, when a client has connected those services or asked us to send or retrieve data from them.
• With legal, compliance, security, or professional advisers where necessary to protect rights, enforce agreements, comply with law, or respond to lawful requests.
• In connection with a business transaction, such as financing, merger, acquisition, or sale of assets, subject to appropriate confidentiality and data protection commitments.

We use cookies and similar technologies for sign-in, session management, security, routing, and service diagnostics. We may use analytics or performance tools to understand service reliability and usage patterns. Browser or device settings may let you limit cookies, but some service features may not work without necessary session cookies.

We keep information only for as long as reasonably necessary for the purposes described in this policy, the client's contract, the client's instructions, legal requirements, security, audit, and backup needs.

• Account, access, audit, support, and billing-related records may be retained while the account is active and for a reasonable period afterward to meet legal, security, and accounting needs.
• Meta Platform Data is retained while the relevant client connection is active and needed for reporting, publishing, troubleshooting, audit, or contract purposes.
• When a client disconnects Meta access or requests deletion, we will delete or anonymize Meta Platform Data associated with that connection within 30 days, unless retention is required by law, platform obligations, security, fraud prevention, or dispute resolution.
• Backup copies may remain in encrypted backups until overwritten through normal backup cycles, usually within 90 days.
• Aggregated or anonymized information that no longer identifies a person, client, Meta asset, campaign, or ad may be retained for service quality, benchmarking, and research.

Data deletion instructions are available at promoterintelligence.com/data-deletion.

We use administrative, technical, and organizational safeguards to protect information. These include role-based access controls, tenant isolation, encrypted transport, restricted secrets access, access logging, cloud provider controls, and operational review procedures. No system is perfectly secure, but we work to protect data against unauthorized access, loss, misuse, alteration, and disclosure.

We and our service providers may process information in Australia, the United States, the United Kingdom, the European Economic Area, and other countries where our providers operate. Where required, we use contractual or other appropriate safeguards for international transfers.

Depending on your location and relationship with us or our client, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also ask us to stop sending non-essential communications.

To make a request, email hello@promoterintelligence.com. If your information is controlled by one of our clients, we may refer the request to that client or ask for their instructions.

The service is for business use and is not directed to children. We do not knowingly collect personal information from children under 13, or a higher age where required by local law.

We may update this policy from time to time. If we make material changes, we will update the effective date and provide additional notice where required.

For privacy, Meta Platform Data, or data deletion requests, email hello@promoterintelligence.com.