Privacy & Data Policy

This page is on a preview URL. Search engines are served a noindex header for it. The clauses that name our registered entity, its jurisdiction and its notice address are not published here yet, because the company is being incorporated and we will not print an entity that does not exist. Everything below is what already applies in practice.

This page covers two different things: what happens to the details you send us through this website, and what happens to a client’s data, assets and performance figures once we are working together. Both matter, and they are not the same policy.

1. What you send through this site

The creative audit form collects your brand name, store URL, work email, a monthly Meta spend range, an optional description of your bottleneck and, if you used the pricing calculator, the scope you built.

We use it to prepare and send your audit, and to decide whether we are a fit. That is the whole purpose. You are not added to a newsletter, we do not sell or share the data, and we do not enrich it with third-party data brokers.

The submission is stored in our own database, hosted on Cloudflare. If that request fails, the form falls back to Web3Forms, which delivers it to our inbox by email and keeps no copy for us to query.

2. Client data once we are engaged

Read-only, and only what the work needs

Where a client grants ad account access, we request read-only permissions. We cannot change campaigns, budgets, audiences or bidding, by design and not merely by policy. We import creative and performance metrics; we do not import customer lists, and we do not need them.

Isolation between clients

Every client workspace is separated at the data layer. A user belongs to specific workspaces and every read is scoped to those memberships on the server, not hidden in the interface. We never benchmark one client’s results against another’s unless both have asked for it in writing and the data is aggregated so that no individual account is identifiable.

Storage and retention

Data lives on Cloudflare infrastructure. We keep client project data for 24 months after an engagement ends, so that a returning client does not restart from zero, and then delete it. You can ask us to export or delete it sooner and we will do it within 30 days, keeping only what we are legally required to retain, such as invoices.

3. Generative AI and your material

AI shortens production. It does not choose the strategy and it does not approve the output. Because these tools involve sending material to a third party, the rules are explicit.

Three tiers of material

Providers and training

We only use AI providers on an approved list, and only under plans and settings where customer content is not used to train the provider’s models. If a provider changes that policy, they come off the list. The current list is named in your engagement documentation and available on request at any time, so you always know exactly where your material has been.

Your say

A client can switch off third-party AI processing entirely for their workspace. Production then runs manually. It costs more time; it does not cost you the service.

4. Who else touches the data

Our subprocessors:

• Cloudflare, Inc. — Website and application hosting, data storage
• Web3Forms — Backup delivery of website form submissions by email

We tell clients before adding a subprocessor that would process their material.

5. Ownership

Your brand assets stay yours. Delivered creative becomes yours on payment. We do not use client creative as portfolio work, in a pitch or on this website without asking you first, in writing, for that specific piece.

6. Analytics and cookies

This website sets no advertising or tracking cookies and runs no third-party ad pixels. If privacy-preserving traffic analytics are enabled, they are aggregate and cookieless, and they cannot identify you. The client portal sets one strictly necessary cookie to keep you signed in.

7. Your rights

Ask us what we hold about you, and we will tell you. Ask us to correct or delete it, and we will, within 30 days. Withdraw consent to be contacted at any time and we stop. One email is enough: legal@vantage-creative-os-demo.pages.dev.

8. Changes

If this policy changes materially, we update the date above and tell active clients directly rather than relying on you to re-read the page.

9. Contact

Privacy and data questions: legal@vantage-creative-os-demo.pages.dev. Everything else: hello@vantage-creative-os-demo.pages.dev.