Your privacy matters at CampaignHQ

• Visit information such as IP address, browser type, and pages viewed on campaignhq.co.
• Account information such as name, email address, and billing details when you sign up.
• Service usage information, including operational data related to emails and messages sent through our platform.

Customers may upload contact data to CampaignHQ to run email, WhatsApp, SMS, and other marketing campaigns. This may include:

• Names, email addresses, phone numbers, and company details.
• Audience segments, campaign lists, and contact attributes.
• Campaign activity, delivery events, and engagement data.
• Unsubscribe, opt-out, and suppression status.
• Other campaign-related data uploaded or generated through the service.

Customers are responsible for ensuring that any contact data uploaded to CampaignHQ has been collected lawfully and that they have the required consent or other lawful basis to send communications to those contacts. CampaignHQ does not verify the lawfulness of customer-uploaded lists and does not guarantee customer compliance with privacy or marketing laws.

• Provide and operate CampaignHQ services.
• Improve our website and products through research and analysis.
• Send service-related communications and support responses.
• Process payments and help prevent fraudulent activity.

We may also send product and marketing updates only when you have opted in. You can opt out any time by using the unsubscribe link in those emails.

If you connect Google services such as Google Sheets in CampaignHQ, we access Google user data only after you authorize the connection through Google OAuth and choose the files or actions involved. We use that data to provide the integration features you request: for example, importing contacts from a spreadsheet or exporting an audience list, and not for unrelated advertising purposes.

You can disconnect the integration in CampaignHQ or revoke CampaignHQ's access in your Google Account permissions. For more detail about the Google Sheets integration, see our Google Sheets integration page. CampaignHQ's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Trusted service providers (for example, infrastructure, email delivery, WhatsApp messaging, analytics, and payments) under confidentiality obligations. Our current sub-processors are listed on our Sub-processors page.
• Law enforcement or regulatory bodies when required by law, or when needed to protect rights and safety.
• As part of a merger, acquisition, or asset sale where data transfer is legally permitted.

Our current sub-processors are listed at /sub-processors.

We use reasonable technical and organizational safeguards to help protect your information from unauthorized access, disclosure, or destruction. These measures include:

• Access controls and least-privilege permissions for production systems.
• Encryption in transit for data transmitted over networks.
• Encryption at rest where supported by our infrastructure and service providers.
• Restricted production access for authorized personnel only.
• Secure credential and secrets handling practices.
• Logging, monitoring, and alerting for operational and security events.
• Backup protection and recovery procedures.
• An incident response process for security events involving personal data.

No method of storage or transmission is fully secure, so we cannot guarantee absolute security.

We retain personal data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Customers may request deletion or export of their data through the service or by contacting us.

When data is deleted, it may remain in backups for a limited period until those backups expire in the ordinary course of our backup retention cycle. We may also retain minimal suppression or unsubscribe records as needed to ensure opted-out contacts are not contacted again.

CampaignHQ is operated from India and may use service providers and sub-processors in other countries to deliver, secure, and support the service. Where GDPR or similar laws apply and personal data is transferred outside the European Economic Area (EEA), UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses where required.

Depending on your location, you may have rights regarding your personal data, including the right to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of personal data, subject to legal and operational requirements.
• Request export or portability of personal data where applicable.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection authority in your jurisdiction.

To exercise these rights, contact us at support@campaignhq.co. We will respond within a reasonable timeframe and as required by applicable law.

You can choose not to provide certain information, though that may limit your ability to use parts of our services. You can also opt out of marketing emails at any time using the unsubscribe link in those messages.

For customers that require a data processing agreement, our Data Processing Agreement is available at /data-processing-agreement. It applies where CampaignHQ processes personal data on behalf of customers as a processor or service provider.

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will take steps to delete it promptly.

We may update this policy periodically by posting a revised version on our site. For material changes, we will provide notice through email or a prominent site notification before the update takes effect.

If you have any questions or concerns about this Privacy Policy, contact us at support@campaignhq.co.

You can also reach us through our contact page.