Privacy Policy

Last updated: March 2, 2026

1. Who We Are

Outlet Media operates the Outlet Media advertising management platform. Contact us at: support@outletmedia.co

2. What Data We Collect

When you connect your Meta (Facebook) ad account, we access:

• Your Facebook user ID (for account linking)
• Ad account ID and name
• Campaign performance data: spend, impressions, clicks, click-through rate, cost per click, cost per thousand impressions, purchase return on ad spend
• Campaign configuration: name, status, daily budget, start date
• Ad creative metadata: thumbnail URL, title text, body text
• Audience breakdown data: age, gender, placement performance

We also collect your email address and name when you create an account via our authentication provider (Clerk).

3. How We Use Your Data

• Display your campaign performance metrics in your portal dashboard
• Create, edit, pause, and manage advertising campaigns on your behalf when you use our campaign management tools
• Generate performance insights and recommendations
• Send you notifications about campaign performance changes

We do not use your data for advertising profiling, sale to third parties, or any purpose other than providing the services described above.

4. Data Sharing

We share your data only with the following service providers, strictly for operating our platform:

• Supabase (database hosting)
• Clerk (authentication)
• Railway (application hosting)
• Meta (Facebook) Ads API (campaign management)

We do not sell your data to any third party.

5. Data Retention

We retain your data for as long as your account is active. Campaign performance snapshots are stored daily for historical trend analysis. When you disconnect your ad account, we stop accessing new data but retain historical snapshots unless you request deletion.

6. Your Right to Delete Your Data

You can request deletion of all your data at any time, regardless of your location. There are no fees, no approval process, and no geographic restrictions. To request deletion:

• Disconnect your ad account in Settings, then contact us at support@outletmedia.co to request full data deletion
• Or use Facebook's data deletion request (we process these automatically within 48 hours)

Upon deletion, we remove your encrypted access token, cached campaign data, and account records from our database.

7. Data Security

Access tokens are encrypted at rest using AES-256-GCM. All communication uses HTTPS. We follow the principle of least privilege for data access.

8. Changes to This Policy

We will update this page when our practices change. The "last updated" date at the top reflects the most recent revision.