Privacy Policy

This policy applies to the Bullaugen Insights dashboard operated by Bullaugen Technology Ltd. It covers administrators who use the dashboard and business, advertising, order, lead and social-media information brought into the dashboard through connected services.

Depending on the services an administrator connects, we may process:

• Administrator account details, such as name, email address and a securely hashed password.
• Business performance information, including advertising spend, impressions, clicks, reach, conversions, campaign names and creative previews.
• Social account information, including Page or profile names, audience statistics and content-performance figures.
• Customer enquiries, including a sender's display name, conversation identifiers, message counts and the latest message made available by the connected platform.
• Lead-form answers and contact details submitted through Meta, Google Ads, TikTok or the connected website.
• Sales, customer, product, stock, invoice and payment information imported from connected systems such as Odoo or WooCommerce.
• Website events such as page views, leads or conversions. The tracking endpoint records the event type, page URL and time; it does not intentionally store a visitor's IP address.
• Connection and synchronization records used to diagnose errors and show when data was last updated.

Information comes from administrators, connected provider APIs, signed webhooks and an optional website tracking snippet. Connected services may include Meta services such as Facebook, Instagram, WhatsApp Business and Meta Ads, as well as Google Ads, TikTok, Odoo, WooCommerce and other services shown in the dashboard's Settings page.

We use this information only to operate and secure the dashboard, including to:

• Show understandable business, marketing, sales and customer-support reports.
• Link campaign results to the source, account and reporting period that produced them.
• Display enquiries and lead information to authorized administrators.
• Generate reports and requested AI-assisted explanations using the data visible to the administrator.
• Synchronize connected accounts, prevent duplicate imports, investigate failures and protect the service from abuse.

We do not sell personal information or use imported customer messages to advertise to those customers.

The business using the dashboard is responsible for having an appropriate lawful basis and giving any notices required before connecting customer, employee or visitor information. We process connected information to provide the requested service, protect the dashboard and meet applicable legal obligations.

The dashboard requires authenticated administrator access. Provider secrets, access tokens, message text and submitted lead-form answers are encrypted at rest. Passwords are stored as one-way hashes. Connections use HTTPS, sensitive credentials are not returned to the browser after saving, incoming webhooks are authenticated, and public endpoints use validation and rate limits. Some operational identifiers, account labels and contact display names remain searchable so the dashboard can produce useful reports.

Information may be exchanged with a connected service when required to synchronize that service. Infrastructure, database, hosting and AI providers may process limited information on our behalf when needed to deliver a requested feature. They are not permitted to use it for unrelated purposes. We may also disclose information when required by law, to investigate abuse or to protect users and the service.

We keep information while the relevant dashboard deployment or integration remains active and for as long as needed for reporting, security, backup or legal purposes. Disconnecting an integration revokes its stored connection credentials and stops new synchronization. Previously imported reporting information may remain until an administrator or the business asks for deletion, subject to limited backup and legal-retention requirements.

Depending on applicable law, a person may ask to access, correct or delete their personal information, object to or restrict processing, or request a portable copy. Because the business using the dashboard controls its customer and employee information, requests should normally be sent to that business first. We will assist the business in responding where required.

To request deletion of information associated with this dashboard or a connected Meta account, contact Bullaugen Technology Ltd. through the contact details published at bullaugentech.com. Include the business name, connected Page or account name, the information to be deleted and an email address where we can verify and confirm the request.

After verifying the request and the requester's authority, we will delete or anonymize applicable information from active systems within 30 days unless it must be retained for security, fraud prevention or a legal obligation. Backup copies are removed through the normal backup-expiry cycle.

Connected providers and infrastructure providers may process information in countries other than the person's own, subject to their safeguards and applicable law. The dashboard is a business service and is not intended for children. Administrators must not intentionally connect information collected from children without a valid legal basis.

We may update this policy when the dashboard, connected services or legal requirements change. The effective date below will be updated when material changes are made. Questions or privacy requests can be submitted through Bullaugen Technology Ltd.'s website.