Privacy Policy

Who we are

Georgie is a software platform that helps media buyers, agencies, and brands plan, build, launch, and manage advertising campaigns on Meta's platforms (Facebook and Instagram). Subscribers connect their own Meta ad accounts to Georgie and use the platform to bulk-create campaigns, build audiences, generate ad creative, and monitor performance.

In this policy, "Georgie", "we", "us", and "our" refer to Georgie, the operator of the platform. "You" refers to a subscriber or an authorized team member of a subscriber.

Who this policy applies to

Georgie serves two groups of people:

• Subscribers and their team members — the people who create a Georgie account, connect a Meta ad account, and operate campaigns through the platform.
• Subscribers' clients — businesses whose Meta ad accounts a subscriber manages on their behalf with the appropriate permissions.

Georgie is not a consumer-facing application. End consumers who see ads launched through Georgie do not interact with the platform directly; their relationship is governed by Meta's own privacy policy and the privacy policy of the advertiser whose ads they viewed.

Data we collect from you

When you create an account or use Georgie, we collect:

• Name and email address, for account identification and communication.
• Authentication identifiers — a magic-link or OAuth session token.
• Billing details processed through our payment provider, Stripe. Georgie does not see or store your full card number; Stripe stores it and shares with us only limited information such as the card brand, last four digits, and subscription status.
• Usage and activity logs — which ad account is active, which campaigns and audiences were created, Creative Studio jobs run, and timestamps — so we can operate the service, support you, bill usage-based features accurately, and audit activity if needed.
• Content you provide to the Creative Studio, such as product photos you upload and website URLs you ask us to scan for brand voice and proof.

Data we access from Meta on your behalf

When you connect a Meta ad account through Facebook Login, Georgie requests permission to access only the data needed to operate that account's advertising program. Specifically, we use the following Meta permissions:

• business_management — list the Meta Business Manager assets you have access to.
• ads_management — create and manage campaigns, ad sets, ads, Custom Audiences, and Lookalike Audiences in your ad account.
• ads_read — read existing campaigns and Custom Audiences so you can attach new ad sets to existing campaigns and reuse pre-built audiences.
• pages_show_list — list the Facebook Pages you manage so you can pick which Page a campaign runs on.
• pages_read_engagement — read Page metadata and engagement events so Georgie can build engagement Custom Audiences (Page followers, video viewers, post engagers, Messenger conversation senders, Lead Form openers) that seed Lookalike Audiences.
• instagram_basic — retrieve the Instagram Business or Creator account connected to a Page so you can run Instagram placements and select the correct Instagram identity.
• catalog_management — read the product catalog connected to your ad account so you can build catalog-filtered Custom Audiences (category viewers, top-product purchasers, brand purchasers, high-price viewers).

We do not request, store, or use any Meta permission outside the list above. We do not access end-consumer profiles, friend lists, private messages, or any data unrelated to the advertising program you operate.

How we use this data

Georgie uses the data described above to:

• Authenticate you and route your actions to the correct ad account.
• Display your existing campaigns, audiences, Pages, Instagram accounts, and catalogs so you can configure new campaigns.
• Create Custom Audiences, Lookalike Audiences, campaigns, ad sets, and ads in your ad account, and generate ad creative in the Creative Studio.
• Roll back any partially-created entities if a launch fails, so your ad account is never left in a broken state.
• Provide monitoring and automation features (such as spend, CPA, and ROAS dashboards and rules) and bill usage-based features accurately.

We do not use Meta-derived data to advertise to other subscribers, to train machine-learning models, to profile end consumers, or for any purpose outside operating your advertising program.

How we share data

We do not sell or rent your data. We share it only as needed to run the service:

• Service providers that power Georgie — including Vercel (hosting), our database and storage provider, Stripe (billing), Anthropic (AI-assisted recommendations and copy), and our image and video generation providers for the Creative Studio. Each is contractually required to handle data only as needed to provide its service.
• Your own organization — team members you invite, and the clients whose ad accounts you manage with permission.
• Legal compliance — if required by valid legal process, we will disclose the minimum data necessary and notify the affected party where legally permitted.

Data retention

Account data and activity logs are retained for as long as your account is active, plus up to 12 months afterward for audit, security, and legal purposes. Meta access tokens are retained only while your connection is active and are deleted when you disconnect the account or close your account.

Audiences and campaigns Georgie creates through Meta's API live in your own ad account and are governed by Meta's retention policies and your own data-handling practices. Georgie does not maintain a separate long-term copy of audience contents.

Your rights

You may at any time:

• Access the data Georgie holds about you.
• Correct inaccurate data we hold about you.
• Delete data we hold about you — see Data Deletion.
• RevokeGeorgie's access to your Meta account at any time via Facebook's Apps and Websites settings. Revocation is honored immediately and triggers our automated data-deletion process.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. We honor these rights for all users regardless of location.

Security

Georgie transmits all data over HTTPS. Meta access tokens are stored encrypted at rest, scoped per connection, and are never exposed to the browser. Payment details are handled by Stripe and never touch our servers in full. We follow least-privilege access controls for internal systems.

Children's privacy

Georgie is a professional advertising tool and is not directed to anyone under 18. We do not knowingly collect data from children.

Compliance with Meta Platform Terms

Georgie complies with the Meta Platform Terms and the Meta Developer Policies. We use Meta-derived data only to operate campaigns for the account you connected, we do not resell Marketing API access, and we do not retain Meta-derived data longer than needed to provide the service.

International data transfers

Georgie is hosted in the United States. By using the platform, you acknowledge that your data may be transferred to and processed in the United States. We comply with applicable data-protection regulations, including the GDPR for users in the EU and UK.

Changes to this policy

We may update this Privacy Policy as Georgie's features evolve. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated to active subscribers by email.

Contact

Questions about this policy or how Georgie handles your data:

• Email: hello@georgie.ai
• Mail: Georgie, [Registered business address — to be added]

Your account settings and the georgie.ai platform let you manage and export most of your data directly.