The short version: we collect only what we need to run Campaign Canvas, we never sell your data, we use data from your connected social accounts (including Pinterest) only to provide the features you ask for, and you can disconnect an account or ask us to delete your data at any time.
1. Who we are
Campaign Canvas (“Campaign Canvas”, “we”, “us”) provides an AI marketing-intelligence and campaign-generation platform at campaigncanvas.org and app.campaigncanvas.org (together, the “Service”). This policy explains how we handle personal data when you visit our website, join our waitlist, or use the Service. We are based in Singapore and handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA) and, where it applies to you, the EU/UK GDPR.
2. Information we collect
Information you give us
- Waitlist and contact details — your name, company, role and work email when you join the waitlist or email us.
- Account details — your name, email address and login credentials when you create an account.
- Workspace content — brands, competitors, keywords, briefs, prompts and creative you enter into or generate with the Service.
Information from connected platforms
- When you choose to connect a social account (for example Pinterest), we receive the data that platform shares under the permissions you approve. See section 3.
Information collected automatically
- Technical data — IP address, browser type, device information and pages visited, collected through standard server logs, used to keep the Service secure and working.
Publicly available social data
- Our social-listening features analyse publicly available posts, comments and trends, in line with each platform’s terms, to produce aggregated insights. We do not use this data to build profiles of individual people.
3. Connected platforms & Pinterest
You can connect third-party accounts, including Pinterest, to Campaign Canvas. Connecting is always optional and initiated by you through the platform’s own authorisation (OAuth) screen. We never see or store your password for that platform.
What we access from Pinterest
Depending on the permissions (scopes) you approve, we may access:
- Your basic Pinterest account information (such as username, profile name and account type);
- Your boards and Pins, so you can choose where to publish and review what you’ve published;
- Analytics for your account, boards and Pins, so we can report on campaign performance;
- The ability to create Pins and boards on your behalf — only when you instruct us to publish.
How we use Pinterest data
- To publish the content you create in Campaign Canvas to the boards you select;
- To show you performance reports and recommendations for your own content;
- To operate, secure and troubleshoot the Pinterest integration.
We use Pinterest data only to provide features to you. We do not sell Pinterest data, share it with data brokers or advertising networks, use it to train general-purpose AI models, or combine it with other sources to profile Pinterest users. Our use of Pinterest data complies with the Pinterest Developer Guidelines.
Disconnecting
You can disconnect Pinterest at any time from your Campaign Canvas settings, or by revoking access in Pinterest under Settings → Security and logins → Apps. When you disconnect, we delete your stored access tokens immediately and delete the Pinterest data we hold about your account within 30 days, unless we must keep something to meet a legal obligation.
4. How we use information
- To provide, maintain and improve the Service, including generating insights and creative you request;
- To manage the waitlist and respond to your enquiries;
- To send service messages, and — where you’ve agreed — product updates you can unsubscribe from at any time;
- To keep the Service secure, prevent abuse and comply with the law.
Where the GDPR applies, we rely on performance of a contract, our legitimate interests in running and securing the Service, your consent (which you can withdraw), and legal obligations.
5. How we share information
We do not sell or rent personal data. We share it only:
- With service providers who process data for us under contract — for example cloud hosting, form and spreadsheet tools that store waitlist sign-ups, email delivery, and AI model providers that process prompts to generate content. They may use the data only to provide their services to us.
- With the platforms you connect, when you instruct us to publish content to them.
- For legal reasons — if required by law, or to protect the rights, safety and security of our users or others.
- In a business transfer — such as a merger or acquisition, subject to this policy continuing to apply.
6. Retention & deletion
We keep personal data only as long as needed for the purposes above. Account and workspace data is kept while your account is active and deleted within 30 days after you close it or ask us to delete it. Waitlist data is kept until you ask us to remove it or we no longer need it to contact you about the Service. Data from connected platforms is deleted as described in section 3. Backups are overwritten on a rolling basis.
To request deletion, email joellim@campaigncanvas.org from the address on your account.
7. Security
We use reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS), encrypted storage of access tokens, and restricted access to production systems. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires.
8. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email joellim@campaigncanvas.org; we’ll respond within 30 days. You can also complain to your local data-protection authority — in Singapore, the Personal Data Protection Commission.
9. International transfers
Our service providers may process data outside your country. When we transfer personal data internationally, we take steps to ensure it receives a comparable standard of protection, as required by the PDPA and, where applicable, the GDPR.
10. Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children; if you believe a child has given us data, contact us and we’ll delete it.
11. Changes to this policy
We may update this policy from time to time. We’ll post the new version here with a new “Last updated” date and, for material changes, notify account holders by email.
12. Contact us
Questions or requests about privacy? Email our data protection contact at joellim@campaigncanvas.org.