Privacy Policy

GetCampaign collects the client and campaign information submitted through the intake form, uploaded CSV files, order metadata, generation status, and generated output files.

Uploaded files and generated outputs are stored in private Supabase Storage paths, while order status and metadata are stored in Supabase Postgres.

API keys for AI providers and payment processors must remain server-side. The frontend should never expose OpenAI, Anthropic, PayPal, Supabase service-role, or webhook signing keys.

Do not upload sensitive personal data unless it is necessary for the campaign build. Users are responsible for ensuring they have permission to submit account exports and client information.