Privacy Policy for Kampain Proposal Builder & Kampain.ai

Kampain.ai and its application, Kampain Proposal Builder (operated by Cheenti Digital, "we," "us," or "our"), provide an integrated marketing workspace and commercial proposal studio for agencies, enterprises, and brand teams. This Privacy Policy applies to the Kampain Proposal Builder application, the Kampain.ai web platform, APIs, subdomains (including health-reports.kampain.ai), and related services (collectively, the "Service").

By accessing or using the Service, connecting third-party platforms (including Google Ads and Meta accounts), or authenticating via OAuth, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide directly

• Account data: Name, business email address, password (stored in cryptographically hashed form), organization name, and workspace preferences.
• Business content: Brand manuals, campaign briefs, target domain URLs, competitor URLs, search query seeds, rate cards, and proposal details uploaded or entered by you.
• Connected social & marketing accounts: When you connect Meta (Facebook & Instagram), LinkedIn, or X, we receive OAuth tokens and channel identifiers to read authorized profile details and publish content you approve.
• Google advertising & API accounts: When you connect Google via OAuth 2.0 (under the Google Ads API scope), we access your 10-digit Google Ads Customer ID, linked Manager (MCC) accounts, keyword queries, historical search volumes, monthly trend metrics, and cost-per-click (CPC) benchmarks.
• Customer support: Communications, feedback, and technical logs sent to our team.

Information collected automatically

• Device and operational logs: IP address, browser type, operating system, timestamps, HTTP status codes, and diagnostic telemetry.
• Cookies and session storage: Standard session cookies and local storage used strictly for authentication, tenant routing, and security.

2. How We Use Information

We process personal and business data strictly to deliver and maintain the Service:

• To authenticate users and enforce tenant isolation, role permissions, and billing quotas;
• To power the Kampain Proposal Builder and Cheenti DeepCrawl™ technical SEO/AEO audit engine, querying real-time search volumes, keyword intent clusters, and CPC benchmarks;
• To generate editorial drafts, social media calendars, and landing page designs you request;
• To publish approved content to connected platforms at your explicit direction;
• To provide technical support, investigate security incidents, and ensure uptime;
• To comply with applicable legal obligations and enforce our Terms of Service.

3. Legal Bases for Processing (EEA/UK/GDPR)

We process personal data based on: (a) performance of a contract with you; (b) our legitimate interests in providing, securing, and improving the Service; (c) your explicit consent when authorizing third-party OAuth connections; and (d) compliance with legal obligations.

4. Data Sharing, Disclosures, and Third Parties

We do not sell, rent, or trade your personal information. We do not share your data with data brokers or advertising retargeters. We disclose information only to:

• Authorized Infrastructure Service Providers: Cloud hosting, database, and security providers (e.g., Google Cloud Platform, Railway, Cloudflare R2, Vercel) operating under strict confidentiality and data protection agreements.
• Connected Platforms: Google, Meta, LinkedIn, and X, strictly as required to perform API actions you initiate.
• Legal Authorities: When required by applicable law, court order, or to protect against imminent harm or fraud.

5. Comprehensive Google API Services & Google Ads User Data Policy Disclosure

This section applies specifically to Google user data accessed, processed, or stored by Kampain Proposal Builder and Kampain.ai via Google APIs, including the Google Ads API (https://www.googleapis.com/auth/adwords) and Google Cloud services.

A. What Google User Data Is Accessed by the Application

Kampain Proposal Builder accesses the following specific Google data points:

• Google Ads Account Identifiers: 10-digit Customer IDs and linked MCC resource names (e.g., customers/4303157096) to verify account authorization and routing.
• Keyword Planning & Historical Metrics: Search queries submitted for audit, historical monthly search volume totals, search volume trend arrays, competition levels (LOW, MEDIUM, HIGH), and average cost-per-click (CPC) bid benchmarks returned by the Google Ads API (v25).
• OAuth Authentication Credentials: Temporary OAuth 2.0 access tokens and encrypted refresh tokens generated when you sign in via Google OAuth Playground or our connect flow.

B. How the Application Uses Google User Data

Google user data is used solely and exclusively to provide the direct in-app functionality of Kampain Proposal Builder:

• To calculate accurate search volumes and cost benchmarks in commercial SEO and PPC proposals requested by authorized agency users;
• To perform factual, zero-hallucination keyword clustering within the Cheenti DeepCrawl™ engine;
• To present campaign health metrics in client-facing marketing dashboards.

Zero Ad Campaign Modification: Kampain Proposal Builder uses read-only research endpoints. The application does not create campaigns, change bids, alter client account settings, or incur ad spend.

C. With Whom We Share, Transfer, or Disclose Google User Data

WE DO NOT SHARE, TRANSFER, OR DISCLOSE GOOGLE USER DATA TO ANY THIRD PARTIES.

• No Sale or Commercial Transfer: Google user data is never sold, leased, or transferred to third parties, data brokers, or advertising networks for any purpose.
• No Advertising Targeting: Google user data is never used for serving advertisements or personalized targeting.
• No Generalized AI Model Training: Kampain Proposal Builder and Kampain.ai explicitly do not use Google user data obtained via Google APIs to train, retrain, fine-tune, or develop generalized artificial intelligence (AI) or machine learning (ML) models.

D. Data Protection Mechanisms for Sensitive Data

We implement defense-in-depth security standards to protect Google user data:

• Encryption at Rest: All OAuth refresh tokens and API secrets are stored using AES-256 encryption at rest in isolated database clusters.
• Encryption in Transit: All communications between the user's browser, our servers, and Google API endpoints are enforced via TLS 1.3 encryption over HTTPS.
• Strict Tenant Isolation: Data associated with a Google Ads account is accessible solely by authenticated workspace users with verified administrative permissions.

E. Data Retention and Deletion for Google User Data

• Retention Period: Google OAuth tokens and cached keyword metrics are retained only as long as your workspace account remains active and the integration remains connected.
• Immediate Revocation by User: You can disconnect and revoke Kampain Proposal Builder's access to your Google account at any time by visiting the Google Account Permissions & Third-Party Apps page, selecting Kampain Proposal Builder, and clicking Remove Access.
• Permanent Deletion on Request: Users can request immediate permanent deletion of all stored Google credentials, workspace tokens, and associated audit records by emailing [email protected] with the subject line "Google Data Deletion Request." All tokens and records are permanently expunged within 30 days.

F. Compliance with Google Limited Use Policy

Kampain Proposal Builder's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. International Data Transfers

We process data on secure servers in the United States and globally. Where cross-border transfers occur, we implement recognized legal transfer mechanisms such as Standard Contractual Clauses (SCCs).

7. Security Safeguards

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental, unauthorized, or unlawful destruction, loss, alteration, access, or disclosure.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, rectify, delete, or export your personal data, and to withdraw consent. To exercise your rights, email [email protected].

9. Children's Privacy

The Service is an enterprise commercial workspace not intended for individuals under 18. We do not knowingly collect information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will update the "Last updated" date at the top of this page. If we make material changes to how we handle Google user data, we will notify registered users via email or prominent in-product notice prior to the change becoming effective.

11. Contact Information

For questions or privacy inquiries regarding Kampain Proposal Builder or Kampain.ai:

Cheenti Digital / Kampain.ai Privacy Office
Email: [email protected]
Website: https://kampain.ai
Location: Kolkata, West Bengal, India

12. General Data Deletion Instructions (Including Meta & Social Platforms)

In accordance with platform requirements (including Meta and Facebook Login policies), users can request complete deletion of personal data:

1. Disconnect from In-App Settings: Navigate to your workspace → Settings → Manage Connections and disconnect connected platforms.
2. Revoke on Social Platforms: In Facebook, navigate to Settings & Privacy → Settings → Apps and Websites, find Kampain.ai, and click Remove.
3. Request Deletion by Email: Send an email to [email protected] with the subject line "Data Deletion Request" and your registered account email. All personal data will be permanently purged from active databases within 30 days.
4. Meta Data Deletion Callback: Our automated callback URL is configured at https://www.kampain.ai/data-deletion/status.