1. Who we are
Stroctus (“we,” “us,” or “our”) operates Stroctus Campaign Studio, a tool used by authorized operators to prepare, create, and manage advertising campaigns for music and other Stroctus projects through Meta’s advertising services.
This Privacy Policy explains how we handle information through Stroctus Campaign Studio. It does not describe every data practice of the Stroctus website or other Stroctus products.
Privacy contact: jr@stroctus.com
Website: https://stroctus.com
2. Information we process
Depending on the permissions granted and the features used, we process:
- Meta account and asset information: identifiers and names of authorized advertising accounts and Facebook Pages, account status, currency, time zone, and information about permissions and Page management tasks.
- Authorization information: access tokens and permission information used to authenticate requests to Meta and verify access to advertising accounts and Pages.
- Campaign information: campaign names, advertising text, destination links, images or videos, budgets, schedules, targeting settings, and campaign, ad set, creative, and ad identifiers and statuses.
- Operational records: saved settings, campaign drafts, creation receipts, error information, and records used to verify operations and prevent duplicate submissions.
- Communications: information provided when contacting us for support, privacy inquiries, or deletion requests.
We receive this information from authorized operators, from Meta’s APIs within the permissions granted, and from operation of the app.
The current app does not request Facebook passwords, payment-card details, private messages, friend lists, or Spotify listening histories. A Spotify destination link does not give us access to a listener’s Spotify account.
3. How we use information
We use information to:
- Authenticate and verify authorized access to Meta accounts and Pages.
- Prepare campaign drafts and carry out authorized advertising operations.
- Apply and verify campaign settings, including budgets, schedules, and delivery status.
- Maintain records of submitted operations and prevent accidental duplicate creation.
- Troubleshoot errors, secure the app, and provide support.
- Respond to privacy requests and meet applicable legal and Meta platform obligations.
We access and use Meta information only for the purposes described in this policy and within the permissions granted. We do not sell or rent Meta information, use it to build unrelated personal profiles, or use it to train general-purpose AI models.
4. Information sharing
We send campaign settings, advertising content, asset identifiers, and authentication information to Meta as needed to perform authorized operations. Advertising content may become publicly visible when an ad is published and delivered.
Access within Stroctus is limited to authorized people who need the information to operate or support the app.
Where service providers assist with storage, backup, security, or support, information may be processed by them only as necessary for those services, subject to appropriate restrictions. Files stored in a synchronized or backed-up folder may also be processed by the applicable storage provider.
We may disclose information where reasonably necessary to comply with applicable law, respond to valid legal process, address fraud or security incidents, or protect legal rights.
Meta and Spotify process information under their own policies when people use their services:
5. Storage and security
The current version of Campaign Studio runs locally on an authorized operator’s computer. Campaign settings, drafts, uploaded creative copies, and operation records are stored in local application files.
When the app’s token-saving feature is used, access tokens are stored in macOS Keychain. The running app also holds the token in memory to authenticate requests. Connections to Meta use HTTPS.
We use reasonable safeguards, including access restrictions and controls intended to reduce unauthorized use and duplicate campaign submissions. No system or method of storage is completely secure.
6. Retention
We retain information only for as long as reasonably necessary to operate authorized campaigns, maintain relevant operational records, resolve support or security issues, and meet applicable legal obligations.
A draft’s review expiration does not necessarily delete its saved information or creative files. Tokens remain stored until removed or replaced; they may also expire or be revoked through Meta.
We review retained information and delete information that is no longer needed. We also delete applicable Meta information when required by Meta’s terms or a valid deletion request, unless retention is legally required. Any information retained for a legal obligation is restricted to that purpose.
7. Your choices and rights
You may stop using the app and revoke its access through the applicable Meta account or business integration settings. Revoking access prevents further authorized access but does not itself erase previously stored local records.
Depending on applicable law, you may have rights to request access, correction, deletion, or a copy of personal information, or to object to or restrict certain processing. Where processing relies on consent, you may withdraw that consent.
Contact jr@stroctus.com to exercise these rights. We may request limited information to verify your identity and authority over the relevant account or Page. We respond within applicable legal deadlines. You may also have the right to complain to your local data protection authority.
8. How to request data deletion
Email jr@stroctus.com with the subject:
Stroctus Campaign Studio — Data Deletion Request
Include:
- Your name and a contact email.
- The relevant Facebook Page ID or advertising account ID, if known.
- A description of the information you want deleted.
Do not send passwords, access tokens, or payment details.
After verifying your request, we will delete applicable information under our control, including relevant stored authorization information, account or Page information, campaign drafts, creative copies, and operational records, except where retention is legally required. We will explain any applicable exception and confirm completion.
Deleting information from Campaign Studio does not automatically delete campaigns or other information held by Meta, stop active advertising, or delete your Meta or Spotify account. Advertising can be managed separately in Meta Ads Manager, and requests concerning those platforms should also be directed to the relevant provider.
Full instructions are also available on the Campaign Studio Data Deletion page.
9. Children
Campaign Studio is intended for adult, authorized business operators. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us through the app, contact us so we can investigate and delete it where appropriate.
10. Changes to this policy
We may update this policy when the app or our data practices change. We will publish the revised policy at this address and update its effective date. Where required, we will provide additional notice or obtain consent before introducing materially different processing.
11. Contact
For privacy questions or requests:
Stroctus
Email: jr@stroctus.com
Website: https://stroctus.com