Privacy Policy

Last updated: May 13, 2026

This Privacy Notice explains how Davronbek Rustamjonov (a sole trader doing business as "CampaignRx", "we", "us") collects, uses, and protects your personal data when you use our Service. For the personal data described below, we act as the data controller.

1. Information We Collect

• Account data: email address and authentication identifiers.
• Campaign data: the metrics and setup information you submit (spend, impressions, CTR, ROAS, objective, audience, creative format, etc.). We do not request access to your Meta Ads account.
• Audit reports: generated outputs are stored to power your dashboard and history.
• Payment data: processed by our payment provider (merchant of record). We receive transaction status and a customer reference but never see your full card details.
• Technical data: IP address, browser, device, and basic usage logs for security and abuse prevention.

2. How We Use Information

• To provide and improve the Service (generate audits, maintain history).
• To process payments and fulfil purchases.
• To communicate about your account, security, or material changes.
• To detect, prevent, and respond to fraud or abuse.
• To comply with legal obligations.

3. AI Processing

The metrics you submit are sent to our AI provider (Anthropic) solely to generate your audit report. Inputs are not used to train third-party models.

4. Legal Basis (UK / EEA users)

• Performance of a contract — to provide the Service you signed up for.
• Legitimate interests — to keep the Service secure, prevent abuse, and improve the product.
• Legal obligation — to keep records required by tax and consumer protection law.
• Consent — where we ask for it (for example, optional marketing emails).

5. Sharing

We share personal data only with the categories of recipients needed to operate the Service:

• Hosting & database — Supabase (database, auth) and Cloudflare (edge hosting).
• AI provider — Anthropic (to generate audit reports from the metrics you submit).
• Merchant of Record — Paddle.com Market Limited acts as the seller for our orders and handles payments, subscription management, tax compliance, invoicing, and refunds. See Paddle's privacy policy.
• Professional advisers — accountants and legal advisers, where necessary.
• Authorities — where required by law.

We do not sell personal data.

6. Data Retention

Account and audit data are retained while your account is active and for a reasonable period afterwards to meet legal, tax, and dispute-resolution obligations. We delete or anonymise personal data when it is no longer needed. You can request deletion at any time by emailing privacy@campaignrx.app.

7. Your Rights

Depending on your jurisdiction (e.g. UK GDPR, EU GDPR, CCPA), you may have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw any consent you have given. You can exercise these rights by emailing privacy@campaignrx.app; we aim to respond within one month. UK and EEA users have the right to lodge a complaint with their local supervisory authority.

8. International Transfers

Some of our processors are located outside the UK and EEA (for example, in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or applicable adequacy decisions.

9. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, row-level access controls, least-privilege server credentials, and access logging. No method of transmission or storage is 100% secure.

10. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising or cross-site tracking cookies.

11. Children

The Service is not directed to anyone under 18 and we do not knowingly collect personal data from children.

12. Changes

We will post updates to this Notice here and update the "Last updated" date above.

13. Contact

Davronbek Rustamjonov — privacy questions: privacy@campaignrx.app.