Privacy Policy

1. Information We Collect

• Ad Performance Data: We collect information about your ad campaigns from connected platforms like Meta Ads (Facebook, Instagram) and Google Ads (including YouTube Ads). This includes performance metrics like spend, impressions, clicks, views, saves, engagement (reactions, comments, shares), and conversions.
• User Data: When you sign up or use our platform, we collect your name, email address, and user metadata (like avatar URL) provided by authentication providers (e.g., Google, Meta).
• Payment Data: We use Stripe to process payments. While we don't store full credit card numbers, we may store information like billing address, partial card details (last four digits), and transaction history for billing and support purposes.
• Analytics Data: We use tools like Google Analytics and PostHog to gather usage data, such as page views, session length, feature usage, and conversion rates, to understand how our platform is used.
• Streaming Data: If you connect your accounts, we may access track performance and basic profile data from Spotify (e.g., Artist ID) and YouTube (e.g., Channel ID, Channel Name, video lists for campaign creation).
• User Tracking Data: For logged-in users, we may store Facebook click identifiers (fbc, fbp) associated with your user ID to optimize marketing performance and attribution.
• Admin Invitation Data: If you invite administrators to manage an artist profile, we collect and store the invitee's email address to send the invitation and manage access permissions.
• Chrome Extension Data: If you use our Chrome extension, it may request Spotify track or album IDs to fetch public data (like popularity, label, release date) via our secure API endpoint. No personal Spotify data is accessed or stored by the extension.
• Platform Connection Data: To enable platform integrations, we collect and store necessary identifiers and tokens. This includes: Spotify Artist ID; Meta Page ID, Instagram Actor ID, and access tokens; YouTube Channel ID and encrypted refresh tokens. These are used solely to provide connected features like analytics and campaign management.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and improving our services, including marketing campaigns, music distribution services (if applicable), and analytics reporting.
• Personalizing your experience and improving user experience and platform functionality.
• Processing payments, managing subscriptions, and handling billing through Stripe. We also process usage data (e.g., ad spend) for metered billing.
• Connecting Platform Accounts: We use stored tokens and IDs (Spotify, Meta, YouTube) to fetch performance data, list available assets (e.g., Facebook/Instagram posts, YouTube videos) for campaign creation, and manage ad campaigns on your behalf via official APIs.
• Admin Invitations: Invitee email addresses are used solely to send invitation links via our email provider (Resend) and manage access.
• AI Features: If you opt-in, we may use provided ad copy or media asset information to generate campaign creatives using AI models.
• Communicating with you, including sending service updates, support messages, and promotional information (you can opt-out).
• Ensuring security, preventing fraud, and enforcing our terms.

3. Sharing and Disclosure

We do not sell your personal information. We may share necessary data with trusted third-party providers to deliver our services, such as Supabase (authentication, database), Stripe (payment processing), Resend (email delivery), Google Cloud/AI (potential AI features), and the ad platforms you connect (Meta, Google Ads). Each provider's data use is subject to their own privacy policies. We may also share data to comply with legal obligations, protect our rights, or in connection with a business transfer (like a merger or acquisition).

4. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no system is perfectly secure, and we cannot guarantee the absolute security of your information.

5. Data Security and Storage

We implement reasonable security measures to protect your data. Sensitive information, such as YouTube refresh tokens, is stored encrypted using industry-standard algorithms (AES-256-GCM). Access tokens for platforms like Meta are stored securely and used only for authorized API interactions.

6. Cookies and Tracking Technologies

We use cookies and similar technologies (like web beacons and pixels) to operate and improve our platform, understand usage, and personalize your experience. This includes essential cookies for functionality, performance cookies for analytics (e.g., Google Analytics, PostHog), and potentially targeting cookies for marketing optimization (e.g., Meta Pixel). You can manage cookie preferences through your browser settings, but disabling certain cookies may affect platform functionality.

7. International Data Transfers

Your information may be stored and processed in servers located outside your home country, including the United States, where data protection laws may differ. We take appropriate steps to ensure your data receives an adequate level of protection wherever it is processed.

8. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, such as the right to access, correct, delete, or restrict its processing. You can manage your platform connections and revoke access at any time through the Platform Connections settings page. To exercise your rights or for data-related requests, please contact us at support@dynamoi.com. We will respond to your request in accordance with applicable laws.

9. Data Retention

We retain your personal information and connected platform data for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. Platform tokens are removed when you disconnect an account or if they become invalid. Aggregated or anonymized analytics data may be retained longer for reporting and analysis purposes.

10. Children's Privacy

Our services are not directed to individuals under the age of 13 (or a higher age threshold depending on the jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our platform or by other means. Your continued use of Dynamoi after such changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: support@dynamoi.com.