Skip to content

Legal

Privacy Policy

Last updated: June 8, 2026

1. Introduction

CampaignPath (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and SaaS platform (collectively, the “Services”).

We are based in France and comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) for California residents.

If you have any questions about this policy, please contact us at hello@campaignpath.io.

2. Data We Collect

We collect information that you provide directly to us, information generated through your use of the Services, and information from third-party sources.

Account Information

  • Name, email address, and password when you register for an account.
  • Profile information and preferences you choose to provide.

User-Generated Content

  • Campaign content, marketing materials, prompts, and any other files or data you upload to the platform for AI processing.

Payment Information

  • Billing details processed securely by Stripe. We do not store full payment card numbers on our servers.

Usage & Analytics Data

  • IP address, browser type, device information, pages visited, and interaction patterns.
  • Cookies and similar tracking technologies (see Section 9).

3. How We Use Your Data

We use the collected data to provide, maintain, and improve our Services, including:

  • Creating and managing your account.
  • Generating and refining AI-powered marketing campaigns.
  • Processing payments and managing subscriptions.
  • Communicating with you about your account, updates, and support.
  • Analyzing usage trends to improve product features and user experience.
  • Ensuring security, preventing fraud, and complying with legal obligations.

5. Data Sharing & Third-Party Processors

We do not sell your personal data. We share data only with trusted service providers who help us operate the Services, under strict contractual protections.

Subprocessors

  • Lovable Cloud (Supabase) - cloud hosting, database, and authentication.
  • Stripe - payment processing and billing management.
  • OpenAI / Lovable AI Gateway - AI model inference for campaign generation.
  • Cursor & Claude - AI-assisted development and support tooling.
  • Vercel - web application hosting and edge delivery.
  • Google Analytics 4 - product analytics and usage insights.
  • HotJar - session recordings and heatmaps for UX improvement.
  • HubSpot - customer relationship management and marketing automation.
  • Brevo - transactional and marketing email delivery.

6. International Data Transfers

CampaignPath is operated from France. Your data may be transferred to and processed in countries outside the EEA, including the United States, where our subprocessors are located.

When we transfer personal data outside the EEA, we rely on Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms to ensure an adequate level of protection.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Account information is retained for the duration of your active subscription plus 3 years, unless you request deletion earlier.

User-generated campaign content is retained while your account is active. Upon account deletion, content is permanently removed within 30 days.

Anonymized analytics data may be retained indefinitely for statistical purposes.

8. Your Rights

Depending on your location, you have certain rights regarding your personal data.

GDPR Rights (EEA Residents)

  • Right to access - request a copy of the personal data we hold about you.
  • Right to rectification - request correction of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) - request deletion of your personal data.
  • Right to restrict processing - request that we limit how we use your data.
  • Right to data portability - receive your data in a structured, machine-readable format.
  • Right to object - object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent - at any time, for processing based on consent.

CCPA/CPRA Rights (California Residents)

  • Right to know - request disclosure of the categories and specific pieces of personal information we collect.
  • Right to delete - request deletion of your personal information.
  • Right to correct - request correction of inaccurate personal information.
  • Right to opt out - of the sale or sharing of personal information (we do not sell data).
  • Right to non-discrimination - we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at hello@campaignpath.io. We will respond within 30 days (or sooner where required by law).

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze traffic, and support marketing efforts.

Essential cookies are necessary for the Services to function. Analytics and marketing cookies are optional and require consent where required by law.

You can manage your cookie preferences through your browser settings or our cookie banner.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

These measures include encryption in transit (TLS), encrypted data at rest, access controls, and regular security audits. However, no internet-based service can be 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through the Services. The “Last updated” date at the top of this page indicates when the policy was last revised.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: hello@campaignpath.io
  • Company: CampaignPath
  • Country: France

For GDPR-related inquiries, you also have the right to lodge a complaint with your local supervisory authority.