1. Who this policy applies to
This policy applies to Campa’s website, applications, and related services (together, the “Services”). Campa is the service provider for businesses using the Services. If your business uses Campa, your business is generally the controller of the customer and contact data you add to the platform, and Campa processes that data on your instructions.
2. Information we collect
We collect information you provide when you create an account, contact us, subscribe to a plan, or request support. This may include your name, work email, phone number, organisation details, billing information, and messages sent to our support team.
When you use Campa, we process information your organisation chooses to connect or enter, such as contact details, lead form submissions, conversation content, campaign settings, message templates, and documents used to configure AI assistants. We also receive technical information such as log data, device and browser details, and basic usage events needed to operate and secure the Services.
3. How we use information
- Provide, maintain, troubleshoot, and improve the Services.
- Sync leads and conversations from the channels your organisation connects, including Meta and WhatsApp Business integrations.
- Send service messages, security notices, billing notices, and support responses.
- Prevent abuse, investigate security incidents, and comply with legal obligations.
- Measure product performance and understand how the Services are used. We do not use customer content to train a general-purpose AI model for other customers.
4. Connected services and sharing
Campa shares information with vendors that help us host, secure, analyse, bill, and support the Services. Those vendors may process information only to provide services to Campa and under appropriate confidentiality and security obligations.
When your organisation connects Meta, WhatsApp, payment, storage, or other third-party services, information may also be processed by those providers under their own terms and privacy policies. Campa is not responsible for the privacy practices of third-party services you choose to connect.
We may disclose information if required by law, to protect the rights and safety of Campa or others, or as part of a merger, acquisition, financing, or sale of assets. We do not sell personal information.
5. Retention and security
We retain account and service information for as long as needed to provide the Services, meet legal and accounting requirements, resolve disputes, and enforce agreements. Your organisation can manage or delete much of its content from within Campa; some backups and records may remain for a limited period.
We use technical and organisational safeguards designed to protect information, including access controls, isolation between customer workspaces, encryption in transit, and monitoring for suspicious activity. No online service can guarantee absolute security, so please protect your credentials and notify us promptly of suspected unauthorised access.
6. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal information, or object to certain processing. Requests about data submitted by your organisation should normally be made to that organisation first. You may contact Campa for assistance with a request or to ask about our processing practices.
You can opt out of non-essential marketing messages at any time by using the unsubscribe option or contacting us. Essential service and security messages may still be sent.
7. Children and international processing
The Services are intended for businesses and are not directed to children. We may process information in countries where Campa or its service providers operate, using measures intended to protect it as required by applicable law.
8. Changes and contact
We may update this policy as the Services or legal requirements change. We will post the updated version here and change the date above. Questions or privacy requests can be sent to info@campa.ai.
