Campaign Mint Privacy Policy

1. Who we are

Campaign Mint is a trading name of Courtney Webb, a sole trader based in the UK. For the purposes of UK data protection law, Courtney Webb is the "controller" of your personal data, which means we decide how and why it is used.

• Name: Courtney Webb, trading as Campaign Mint
• Address: Central House, Eagle Way, London CM13 3GP
• Email: campaignmint@gmail.com

In this policy, "we", "us" and "our" mean Campaign Mint.

2. What we collect

Account details. Your email address and name (if you give one). If you sign up with Google, we receive your name, email address and profile picture from Google. We never see your Google password. If you sign up with email, your sign-in credentials are handled by our authentication provider and stored securely.

Business and campaign information you enter. Things like your business name and description, objectives, audiences, campaign plans, notes, reminders, content you write and assets you upload.

Usage and device information. How you use Campaign Mint, the pages and features you visit, your browser and device type, your IP address and approximate location, timestamps and error logs.

Payment information (once paid plans launch). Payments will be handled by Stripe. We receive limited details such as your plan, subscription status, billing country and the last four digits of your card. We do not receive or store your full card number.

Communications. Emails you send us, and any feedback, survey answers or interview responses you give us during the beta.

Cookies and similar technologies. See section 8.

Please don't put other people's personal data into Campaign Mint. It is built for planning your marketing, not for storing your customers' contact details or similar information. Please also avoid entering sensitive personal information (for example health or financial details).

3. How we use your information, and why

UK law requires us to have a lawful basis for each use of your data. Ours are:

• To provide Campaign Mint (create your account, save and run your campaigns, send reminders). Basis: contract.
• To keep the service secure, fix problems and improve it. Basis: legitimate interests, because we need a safe, working product.
• To understand how Campaign Mint is used so we can improve it. Basis: legitimate interests, or your consent where the law requires it (for example, non-essential cookies).
• To send service messages such as account, security and important product updates. Basis: contract and legitimate interests.
• To send news, tips and beta updates. Basis: your consent, or where the law allows it for existing customers, our legitimate interests. You can unsubscribe at any time.
• To take payments and keep financial records. Basis: contract and legal obligation.
• To comply with the law and respond to lawful requests. Basis: legal obligation.

We do not make decisions about you using solely automated processing that has legal or similarly significant effects.

4. How we generate campaign plans (no AI)

Campaign Mint does not use artificial intelligence to generate your campaign plans or the reasoning behind them. Plans are built from our own marketing framework and curated knowledge base, applied to the information you enter.

• Your inputs are not sent to any AI model.
• Your inputs are not used to train AI.

Separately, some of our own promotional material (for example social posts or videos) may be created with the help of AI tools. That material does not involve your personal data.

If we ever add AI features to Campaign Mint, we will update this policy first and tell you before any AI processes your data.

5. Who we share your information with

We do not sell your personal data. We share it only with the following, and only as needed:

Providers that process data on our behalf

• Lovable, the platform we use to build and host Campaign Mint and its backend infrastructure.
• Google, if you choose to sign in with Google.
• Stripe, to process payments once paid plans launch.

Tools we expect to add. As Campaign Mint grows we expect to use services such as analytics, email delivery, error monitoring and customer support tools. We will add each one to this list, with what it does, before or when it goes live.

Others. Professional advisers (for example accountants or lawyers), and authorities where we are legally required to. If Campaign Mint is ever sold or restructured, your data may transfer to the new owner, who must honour this policy.

Our providers may only use your data to deliver their services to us, under contracts that require them to protect it.

Who can see your data. Only Courtney Webb has administrator access to the Campaign Mint database. Our hosting provider necessarily processes the data in order to store it for us.

6. Transfers outside the UK

Some of our providers may process data outside the UK. Where they do, we make sure your data is protected by an appropriate safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or standard contractual clauses.

7. How long we keep your information

• Account and campaign data: for as long as you have an account. If you delete your account, we delete or anonymise this data within 30 days, except for copies in backups, which are overwritten within 90 days.
• Inactive accounts: we may delete accounts inactive for 12 months, after telling you first.
• Payment and tax records: up to 6 years, as UK law requires.
• Emails and feedback: for as long as needed to respond and improve Campaign Mint, then deleted.

8. Cookies

We use essential cookies and similar technologies that Campaign Mint needs to work, such as keeping you signed in. These do not need your consent.

We do not currently use analytics or advertising cookies. If we add any non-essential cookies, we will ask for your consent first where the law requires it and explain what they do. You will be able to change your choice at any time.

9. Keeping your information secure

We use reasonable technical and organisational measures to protect your data, including secure (HTTPS) connections and restricted access to our systems. No online service is completely secure, so please use a strong, unique password. If a data breach affects you, we will tell you and the ICO where the law requires it.

10. Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you
• correct anything that is inaccurate or incomplete
• delete your data in certain circumstances
• restrict how we use your data in certain circumstances
• receive a copy of your data in a portable format
• object to uses based on our legitimate interests, and to direct marketing at any time
• withdraw consent at any time where we rely on it (this doesn't affect past use)

To use any of these rights, email campaignmint@gmail.com. We'll respond within one month. It's free, though we may ask you to confirm your identity first.

11. Complaints

If you're unhappy with how we've handled your personal data, please tell us first at campaignmint@gmail.com. You don't need any special wording or form. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:

• Website: ico.org.uk
• Phone: 0303 123 1113

The ICO will normally expect you to have raised the issue with us first.

12. Age limit

Campaign Mint is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.

13. Changes to this policy

We may update this policy as Campaign Mint develops, for example when we add new tools or features. The latest version is always on our website with its "last updated" date. If we make an important change, we will notify you by email or in the app.

14. Contact us

Courtney Webb, trading as Campaign Mint
Central House, Eagle Way, London CM13 3GP
campaignmint@gmail.com