Privacy Policy

We collect the following categories of information:

• Account information. Your name, email address, and authentication details when you create an account or sign in.
• Meta advertising data. When you connect a Meta (Facebook/Instagram) Business or Ads account, we access advertising data through the Meta Marketing API — including ad accounts, campaigns, ad sets, ads, creatives, and aggregated performance metrics (such as spend, impressions, clicks, and conversions). We access this data only with your authorisation and only to provide the Service.
• Content you provide. Briefs, audience and persona inputs, notes, and other content you enter or upload into the Service.
• Usage and device data. Log data, IP address, browser type, pages viewed, and interactions with the Service, collected via cookies and similar technologies.

We use the information we collect to:

• Provide, operate, and maintain the Service and your account;
• Generate creative strategy outputs — including audience research, personas, synthetic focus groups, creative briefs, and performance reporting — from your inputs and connected Meta advertising data;
• Authenticate you and keep the Service secure;
• Analyse usage to improve and develop features;
• Respond to your requests and provide support; and
• Comply with legal obligations.

We do not use your Meta advertising data to build cross-customer advertising profiles, and we do not sell your personal information.

Signal Labs uses third-party artificial intelligence models to generate research, personas, focus-group simulations, and other outputs. Content you submit and relevant connected data may be sent to these providers (including Google’s Gemini models) solely to generate results for you. We do not permit these providers to use your data to train their models on your behalf, and we send only the data needed to produce the requested output.

We do not sell your personal information. We share information only in the following circumstances:

• Service providers. With vendors who process data on our behalf under contract, including Supabase (database, authentication, and hosting), Google (Gemini AI processing), and Meta Platforms (advertising data via the Marketing API).
• Legal and safety. Where required by law, or to protect the rights, property, or safety of Signal Labs, our users, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

Our use and transfer of information received from the Meta Marketing API adheres to the Meta Platform Terms and Developer Policies. We access your Meta advertising data only with your explicit authorisation, use it only to provide the Service to you, retain it only as long as needed for that purpose, and delete it on request or when you disconnect your Meta account.

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you close your account or request deletion, we delete or de-identify your personal information within a reasonable period, except where retention is required by law.

You can request deletion of your personal information — including any advertising data we hold from your connected Meta account — at any time by:

• Disconnecting your Meta account within the Service, which removes the associated data; or
• Emailing us at harry.mcgovern@halfdome.com.au with the subject “Data Deletion Request”.

We will confirm and complete verified deletion requests within a reasonable period.

We use industry-standard technical and organisational measures — including encryption in transit, access controls, and authenticated access — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Depending on where you live, you may also have rights under other laws:

• Australia (APPs). You may request access to, and correction of, the personal information we hold about you, and complain about how we handle it.
• EEA/UK (GDPR). You may have rights to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. Our legal bases for processing are performance of a contract, your consent, and our legitimate interests.
• California (CCPA/CPRA). You may have rights to know, access, delete, and correct your personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these rights, contact us at harry.mcgovern@halfdome.com.au. We will not discriminate against you for exercising your rights.

We use cookies and similar technologies that are necessary to authenticate you, keep you signed in, and operate the Service, as well as to understand usage. You can control cookies through your browser settings, though disabling essential cookies may prevent you from signing in.

We and our service providers may process and store your information in countries other than your own. Where we transfer personal information internationally, we take steps to ensure it receives an appropriate level of protection consistent with this Policy and applicable law.

The Service is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at harry.mcgovern@halfdome.com.au.