Your details are not the campaign asset.

Public by consent, private by default

Public reports use generated IDs and approximate locations. Email, phone numbers, full addresses, raw private attachments, identity documents, IP addresses and device fingerprints are never public.

Consent controls

Consent is recorded with a version and timestamp. You can withdraw display consent, unsubscribe, request deletion or ask for an export by contacting us.

Retention

We retain moderation and audit records only as needed for accountability and legal obligations. User data is removed or anonymised through a deletion workflow; required audit evidence is preserved in minimised form.