Legal
Privacy Policy
Last updated:
This Privacy Policy describes how SigmaPilot ("SigmaPilot," "we," "us," or "our") collects, uses, discloses, and protects information when you use our websites, applications, and related services (collectively, the "Services"). SigmaPilot is an AI-powered software platform for Meta advertising analytics, performance intelligence, insights, and related optimization or automation-oriented product features.
For security practices, see also our Security page and Terms of Service.
Introduction
By accessing or using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree, please discontinue use of the Services. Where applicable law requires consent for certain processing, we will seek it as described at collection or in-product notices.
SigmaPilot is intended for businesses and authorized users who connect Meta advertising assets (such as ad accounts, campaigns, and related entities) to obtain analytics, dashboards, AI-generated insights, alerts, recommendations, and—where offered—automation-related functionality. You represent that you have the authority to connect the Meta Business and ad assets you link to SigmaPilot, and that your use complies with Meta's terms, policies, and any obligations owed to clients, employers, or partners.
Information we collect
We may collect the following categories of information:
- Account and profile data. Name, email address, organization or company name, account identifiers, plan or subscription status, and similar registration details you provide when creating or managing a SigmaPilot account.
- Authentication and session data. Login events, session tokens, IP address, device or browser type, and related technical data used to secure access and prevent abuse.
- Meta and advertising platform data. Data made available to us through Meta's APIs after you complete authorization, as described in Meta / platform data we access and Meta platform data & API usage.
- Usage and product analytics. In-app actions, feature usage, performance diagnostics, and error logs that help us operate and improve the Services.
- Support and communications. Information you send when contacting us, including email content and attachments you choose to provide.
- Billing information (if applicable). Where paid plans are offered, payment-related data may be processed by a third-party payment processor; we generally receive limited billing metadata (such as subscription status) rather than full card numbers.
Meta / platform data we access
When you connect Meta, SigmaPilot may access categories of data that Meta exposes for the permissions you approve. This can include, depending on your configuration and Meta's APIs, for example:
- Business, ad account, campaign, ad set, and ad identifiers and structural metadata;
- Performance metrics and delivery statistics (such as spend, impressions, clicks, conversions, and related reporting dimensions Meta provides);
- Creative metadata and associated fields available through the API;
- Audience or targeting configuration fields where exposed by Meta for authorized developers;
- OAuth tokens and refresh artifacts required to maintain an authorized connection on your behalf.
The specific data available to SigmaPilot depends on your Meta permissions, account structure, and Meta's API capabilities, which may change over time. We aim to request only what is reasonably necessary to deliver the features you use.
How we use information
We use information for purposes including:
- Providing, operating, maintaining, and improving the Services;
- Syncing, normalizing, and displaying Meta advertising data in dashboards, reports, and analytics views;
- Generating AI-powered summaries, insights, trend monitoring, anomaly or issue detection, and recommendations;
- Supporting optimization-oriented or automation-related product features you explicitly enable, where offered, in line with your instructions and applicable product controls;
- Authenticating users, securing accounts, detecting fraud or misuse, and enforcing our policies;
- Customer support, troubleshooting, and responding to inquiries;
- Complying with legal obligations and protecting rights, safety, and integrity.
SigmaPilot uses Meta and platform data solely to provide the authorized Services to the business or user that connected the relevant account—not for unrelated profiling or resale of that data.
Legal basis and authorized use
Depending on your location, we may rely on one or more of the following legal bases:
- Performance of a contract—processing needed to provide the Services you request;
- Legitimate interests—such as securing the Services, improving reliability, and preventing abuse, balanced against your rights;
- Consent—where required for specific processing (for example, certain cookies or marketing communications, if applicable);
- Legal obligation—where we must retain or disclose information to comply with law.
Your connection of a Meta asset constitutes authorization for SigmaPilot to process the corresponding platform data for the Services, subject to Meta's platform terms and the scopes you approve.
Meta platform data and API usage
This section summarizes how SigmaPilot treats Meta-related data in connection with Meta platform technologies. It is intended to align with expectations for Meta developer programs, app review, and tech provider relationships, in addition to our general privacy practices.
- What we may access. After you authorize SigmaPilot, we may access the types of Meta-related data described in Meta / platform data we access, limited to the permissions you grant and what Meta's APIs return for your assets.
- Why we access it. We access Meta-related data to power analytics, performance intelligence, AI-driven insights, monitoring, recommendations, and eligible automation or optimization workflows you use within SigmaPilot.
- Use for the authorized customer only. Platform data obtained through your authorization is used to deliver SigmaPilot features to you (and, where applicable, your organization)—not to build unrelated advertising products for third parties and not for purposes incompatible with this Policy.
- We do not sell Meta or platform data. SigmaPilot does not sell Meta or advertising platform personal data to data brokers or unrelated third parties.
- Deletion. You may disconnect Meta, request account deletion, or submit a data deletion request as described in Account & data deletion and Data deletion requests. We will process valid requests consistent with this Policy and applicable law, subject to operational and legal retention requirements.
Data sharing and disclosure
We may share information in limited circumstances:
- Service providers. Vendors that process data on our behalf under contractual obligations (for example, hosting, infrastructure, authentication, logging, analytics, customer support tooling, and payment processing where applicable).
- Legal and safety. When required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect rights, safety, or security.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and continuity safeguards.
- With your direction. When you instruct us to share information or integrate with a third party you choose.
We do not sell personal information for monetary consideration. Where U.S. state privacy laws define "sale" or "sharing" broadly (such as certain targeted advertising exchanges), we describe your choices in Your rights & choices.
Data retention
We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data category:
- Account data is kept while your account remains active and for a reasonable period thereafter unless deletion is requested earlier.
- Meta-derived data may be retained to power historical analytics and product features until you disconnect Meta, delete data, or close your account, subject to backup and legal holds.
- Logs and security records may be retained for shorter or longer periods as needed for security monitoring and compliance.
When retention periods expire, we delete or de-identify information where feasible, unless a limited subset must be retained by law.
Data security
We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, or alteration. These measures may include encryption in transit (such as TLS), encryption of sensitive credentials (including Meta access tokens) at rest where applicable, access controls, least-privilege engineering practices, and monitoring.
No method of transmission or storage is completely secure. You are responsible for safeguarding your account credentials and for using strong, unique passwords where password-based login is available.
International data transfers
SigmaPilot may process and store information in countries other than your own, including where our service providers operate. Where required, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for transfers of personal data subject to GDPR or similar frameworks.
Your rights and choices
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to certain processing, or to data portability. You may also have the right to lodge a complaint with a supervisory authority.
To exercise rights, contact us at privacy@sigmapilot.pk. We may need to verify your identity before fulfilling requests. Meta also provides controls to revoke app access and manage data through your Meta account settings.
Data deletion and account deletion
You may disconnect your Meta integration from SigmaPilot product settings where available, which stops further syncing on our side in accordance with product behavior and may remove associated tokens.
You may request closure of your SigmaPilot account and deletion of associated personal and customer-owned data by contacting privacy@sigmapilot.pk or using in-product account controls if we make them available. Deletion may be subject to legal or operational retention (for example, tax, fraud prevention, or unresolved claims).
Data deletion requests
Businesses and authorized users may request deletion of stored SigmaPilot data related to their account or connected advertising assets. We treat serious privacy and platform-compliance requests as a priority.
How to submit. Email privacy@sigmapilot.pk with the subject line "Data Deletion Request" (or similar). Include:
- The email address associated with your SigmaPilot account;
- Your name and organization (if applicable);
- A description of the data or account scope you want deleted (for example, full account deletion vs. Meta connection data only);
- Any identifiers that help us locate your records (without sending unnecessary sensitive information).
Timing. We will acknowledge receipt within a reasonable period and process verified requests within a reasonable timeframe, typically within thirty (30) days unless a longer period is required by complexity, legal obligation, or applicable law. We will inform you if an extension is necessary.
Limitations. We may retain certain information where required or permitted by law, for legitimate security or fraud-prevention purposes, or in aggregated or de-identified form that does not identify you.
Third-party services and integrations
The Services may rely on or interoperate with third-party services for hosting, infrastructure, authentication, database storage, logging, product analytics, customer support, email delivery, and—if you purchase paid offerings—payment processing. Those providers process information only as instructed by us and subject to their own privacy notices for their direct collection (if any).
Meta is an independent platform. Your use of Meta is governed by Meta's terms and privacy policies. SigmaPilot is not responsible for Meta's practices beyond our role as an integrated application authorized by you.
Children’s privacy
The Services are not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. If changes are material, we will provide additional notice as required by law (such as email or in-product notification). Continued use of the Services after the effective date constitutes acceptance of the updated Policy where permitted by law.
Contact information
For privacy questions, requests, or concerns—including data access, correction, or deletion—contact:
- Privacy: privacy@sigmapilot.pk
- General inquiries: hello@sigmapilot.pk
SigmaPilot — Meta Ads intelligence and automation platform. Website: sigmapilot.pk