Privacy Policy

Agency Copilot ("we," "our," "the Service") is a dashboard used by marketing agencies to pull performance data from Meta Ads, GoHighLevel, ClickUp, and related tools into a single interface. This policy explains what data we collect, why, and how we handle it.

Account information. When you sign up, we collect your name, email, and authentication credentials via Clerk (our identity provider). We store your organization membership and role.

Integration credentials.When you connect an external platform, we store the OAuth tokens or API keys needed to query that platform's API on your behalf:

• Meta Ads: long-lived access tokens, ad account IDs and names.
• GoHighLevel: OAuth access & refresh tokens, location IDs, location names.
• ClickUp: API tokens.

Data pulled from those platforms. Once connected, we fetch campaign performance metrics (spend, leads, impressions, CTR, CPL), CRM contacts, opportunities, pipelines, calls and conversation metadata, and task/project information. This data is displayed in your dashboard, cached for performance, and used to generate reports.

Usage data. We log basic request information (route, status code, timestamp) for debugging and abuse prevention. We do not use analytics trackers or advertising cookies.

• To render your dashboard and reports.
• To generate AI-assisted summaries of your campaigns using Anthropic's Claude API.
• To refresh integration tokens before they expire.
• To send you critical service notifications (e.g. broken integrations).

We do not sell your data. We do not use it for advertising. We do not share it with third parties beyond the sub-processors listed below.

The following third parties process data as part of the Service:

• Supabase — primary database and file storage.
• Clerk — user authentication and session management.
• Vercel — application hosting.
• Meta Platforms — source of ad performance data via the Marketing API.
• GoHighLevel — source of CRM data via the HighLevel API.
• ClickUp — source of task/project data via the ClickUp API.
• Anthropic — provider of the Claude LLM used for AI-generated summaries.

We retain your account and integration data for as long as your account is active. If you delete a connected integration, we remove its access tokens and cached data within 30 days. If you close your account, all associated data is deleted within 90 days, except where retention is required by law (e.g. billing records).

You may at any time:

• Access, correct, or export the data we hold about you.
• Disconnect any integration and delete its stored tokens.
• Delete your account and all associated data.
• Withdraw consent for AI-generated summaries.

To exercise any of these rights, email lukapanos@icloud.com.

Access tokens and API keys are stored encrypted at rest in Supabase and transmitted over TLS. We use role-based access controls: your data is isolated by organization and is not visible to other Agency Copilot customers.

We use only strictly necessary cookies set by Clerk to maintain your login session. We do not use analytics, advertising, or third-party tracking cookies.

Agency Copilot is a B2B product not directed at anyone under 16. We do not knowingly collect data from children.

If we make material changes to this policy we will notify you by email at least 14 days before the change takes effect.

Questions about this policy or your data: lukapanos@icloud.com.