Privacy Policy

Steady (“we”) runs Facebook and Instagram ads and lead pages for local businesses, and shows each business its leads in a dashboard. This policy explains what personal information we collect, why, and what you can do about it.

What we collect

• People who make an account: name, business name, email, password (stored only as a one-way hash), time zone, email preferences, a profile picture if they add one, and when they last signed in. The code we email to confirm a new sign-up is stored only as a one-way hash and deleted once used. If they pay us: what each payment is for, its amount and whether it's paid. Card details go straight to Whop, our payment provider; we never see them.
• Answers about your business, given after signing up: website, what you do and sell, your industry, who your customers are and where, team size, yearly revenue range, what a customer is worth to you, how many leads you want, how you get customers now, your goals and budget, what you're interested in, and your competitors if you name them. We use them only to judge whether we can help, to prepare a plan and a price, and to do the work if you become a client.
• Teammates a client adds: name and email, so they can have their own login to that client's dashboard.
• What clients record in the dashboard: lead statuses, booking times, job values and follow-up reminders.
• Clients' ad results from their Meta ad account: spend, views, reach and clicks per campaign, with no information about the people who saw the ads.
• People who fill in a lead form, on a page we build or Meta's own form inside an ad: the name, phone number, email and answers they give, and which ad, form or page they came from. Leads from Meta's forms reach us from Meta.
• Visits to lead pages we build: a count of visitors per day, with nothing about who they are. No cookies; the browser only remembers the day it was last counted.
• People we email for a client (cold email): name, work email address, job title and company, from public sources and business data providers, and any reply.
• People who use our contact form: name, email, phone number if given, the message, which page it was sent from, and our notes on following it up.
• Technical logs our hosting provider keeps to run the site securely, such as IP address and browser type, kept for a short time.

We only ask for what we need to do the job. We don't use analytics, advertising pixels or tracking cookies on this site, and we don't buy data about you.

How we use it

• To deliver each lead to the one business it was meant for.
• To send cold emails for a client to people who fit who that client wants to reach, and to pass on replies to that client. Reply or use the opt-out link and we stop and never email you again.
• To run accounts, confirm email addresses, send sign-in and password emails, and answer messages.
• To prepare a plan and price for businesses that sign up, from their answers.
• To keep the service secure and fix problems.

For visitors in the EU or UK, our legal bases are: carrying out a contract or the steps before one (accounts, leads, replies) and legitimate interests (security, and cold email to people at businesses).

Who we share it with

• The business you contacted. A lead goes only to the business whose ad or page it came from. We never sell, rent or pass leads to anyone else.
• Service providers who run parts of the service for us and may only use the data for that: our hosting provider, Resend (email), Whop (payments), Meta (to run ads and receive leads from its forms), and for cold email our email sending and business data providers.
• Authorities, if the law requires it.

We do not “sell” or “share” personal information as those words are used in California law, and we don't use it for targeted advertising.

Cookies

We only set cookies the site needs to work: to keep you signed in, to finish a sign-up, and to remember light or dark mode. No tracking or advertising cookies. See the Cookie Policy.

How long we keep it

• Account and lead data: while the account is open. Deleting the account deletes both, with its teammates' logins.
• Sign-ups who don't become clients: their account and business answers are deleted after 12 months without a sign-in, or sooner if they ask.
• Contact form messages: until we've dealt with them, and no longer than 12 months.
• Backups and logs roll over within 30 days.

Your rights

Depending on where you live (including California and the EU/UK), you can ask to see, correct, download or delete your personal information, and to withdraw consent. Account owners can change their business answers and delete their account themselves. Everyone else, email contact@steadycampaigns.com. If you were a lead for one of our clients, we may pass the request to that business, since it decides how your data is used. We won't treat you differently for asking.

Security

Data travels over encrypted connections, passwords and sign-up codes are hashed, repeated failed sign-ins are blocked for a while, and access is limited to people who need it. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Children

This service is for businesses and isn't meant for anyone under 16.

Changes

If we change this policy we'll update the date above, and tell account holders by email about big changes.

Contact

Email contact@steadycampaigns.com.