Ignite Campaign
Privacy Policy
This Privacy Policy explains how IGNITECORE PTE. LTD. ("we", "us") collects, uses and protects information in Ignite Campaign (the "Tool"), an internal advertising management tool used by our staff to run advertising for our own mobile apps. If you have questions, contact us at admin@ignitestudio.io.
1. Who this applies to
The Tool is used only by authorized members of our team. It is not available to the public and does not use Facebook Login or any other consumer sign-in. People who see our ads do not interact with the Tool, and the Tool does not collect data about them.
2. Information we process
| Category | Details | Source |
|---|---|---|
| Team accounts | Username, role, password stored only as a salted PBKDF2 hash, login timestamps and an audit log of actions taken in the Tool. | Our administrators |
| Advertising data (Platform Data) | Ad account, campaign, ad set and ad IDs, names, settings, status, budgets, targeting settings, creatives (videos, images, text) and aggregated performance metrics such as spend, impressions, clicks, installs and in-app events. Page and Instagram account IDs and names used in our ads. DSA beneficiary / payer names and regional verified-identity IDs that we declare on our ad sets. | Meta Marketing API, for ad accounts owned by or assigned to our Business Manager |
| Access tokens | Meta system-user access tokens and tokens for other ad platforms we use. | Generated by us in our own Business Manager |
| Other platforms | Aggregated campaign and attribution data from TikTok Ads, Google Ads, AppsFlyer and similar services for our own apps; creative files from Google Drive folders we share with our service account. | Those platforms |
| Technical data | A session cookie needed to keep team members signed in, and server logs (IP address, time, request path) kept for security. | Your browser |
The Tool processes aggregated advertising statistics. It does not request or store personal information of Facebook or Instagram users, such as user IDs, email addresses, profile pictures or friend lists.
3. How we use information
- To show our team how our campaigns perform and to decide where to spend our advertising budget.
- To create, duplicate, edit, pause and report on campaigns in our own ad accounts when a team member asks the Tool to do so.
- To meet advertising rules, for example declaring EU DSA beneficiary / payer and regional regulated categories.
- To keep the Tool secure, detect errors and keep an audit trail of changes.
We do not sell Platform Data, do not use it to build user profiles, do not use it for any purpose unrelated to managing our own advertising, and do not share it with data brokers or ad networks.
4. Service providers
We use the following service providers to run the Tool. They process data only on our instructions:
- Cloudflare, Inc. (United States): hosting (Cloudflare Workers), database (Cloudflare D1) and AI inference (Workers AI, used only to detect the spoken language of our own video creatives).
- Discord Inc. (United States): internal alerts to our team about advertising errors (ad account name, campaign name and error message).
- Google LLC (United States): Google Drive, read-only access to folders of our own creatives that we share with our service account.
We may disclose information if required by law, after reviewing the legality of the request and disclosing only the minimum information necessary.
5. Security
- All traffic uses HTTPS. Access tokens are encrypted at rest (AES-GCM) and are never shown in the user interface or sent to the browser.
- Access is limited to signed-in team members, with roles that restrict which ad accounts each person can see or change.
- Passwords are stored only as salted hashes. Sessions use secure, HTTP-only cookies.
- Changes made through the Tool are recorded in an audit log.
6. Retention
Advertising data is kept for as long as we need it to run and report on our campaigns, and is deleted when we no longer need it or when a deletion request is received. Access tokens are deleted as soon as an administrator removes them, and stop working as soon as they are revoked in Meta Business Settings. Request logs are kept for a limited time under our hosting provider's log-retention settings. Team accounts are deleted when a team member leaves.
7. Deleting data
To ask us to delete data, see our Data Deletion Instructions or email admin@ignitestudio.io. We respond within 30 days.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or object to our processing of your personal data. To exercise these rights, contact us at admin@ignitestudio.io.
9. Children
The Tool is a business tool for our staff and is not directed to children under 18.
10. International transfers
Our service providers may process data in countries other than Singapore, including the United States. We rely on their contractual and security commitments to protect it.
11. Changes
We may update this policy. The "Last updated" date above shows when it last changed.
12. Contact
IGNITECORE PTE. LTD. (UEN 202612885N)
91 Bencoolen Street, #12-03, Sunshine Plaza, Singapore 189652
+65 8408 1347 · admin@ignitestudio.io