Last updated October 25, 2026
This policy covers PaidHQ and every product in the PaidHQ family, including BudgetHQ (together, the "Services"), operated by Fractional Paid Media ("PaidHQ," "we," "us"). It explains what we collect, why, and how you can control it.
Account information. When you sign up, we collect your email address and, if you sign in with Google, Microsoft, LinkedIn, or Facebook, the basic profile information those providers share (typically name and email) — used only to authenticate you, not to pull advertising data.
Workspace data. The budgets, tags, dimensions, saved views, and configuration you create inside a Service. This is yours — we store it to run the product, not to use for anything else.
Advertising account data. If you connect an ad account (Google Ads, Meta, LinkedIn, Microsoft Advertising, ChatGPT Ads, and others as they're added) or upload a file/CSV/spreadsheet export, we store the campaign, ad set, ad, budget, targeting, spend, impressions, and click data needed to power budgeting, pacing, reporting, and campaign management. See "Connecting ad accounts" below for exactly what access this involves.
Files you upload. Reporting files, CSV exports, or other documents you add to a workspace.
AI feature usage. If you use an AI-assisted feature (like BudgetHQ's Ask AI), your prompts and the relevant workspace data needed to answer them are sent to our AI provider (currently Anthropic) to generate a response, and your conversation history is stored so you can return to it.
Support and communications. Anything you send us directly — support requests, feedback, replies to emails we send.
When you connect an ad platform to a Service, you're sent through that platform's own OAuth consent screen, and you can revoke access at any time from that platform's own account settings, or by disconnecting inside the Service.
Reading. We read reporting and configuration data from connected accounts — campaigns, ad sets, ads, budgets, bids, targeting, audiences, spend, impressions, and clicks — to power budgeting, pacing, alerts, and reports.
Managing campaigns, only when you ask. Where you grant management permissions (for example Meta's ads_management, LinkedIn's rw_ads, or a ChatGPT Ads API key), the Services can create and change campaigns, ad sets, ads, audiences, budgets, bids, and targeting on that account. These changes are only made when an authorized user of your workspace requests them, are previewed before they are applied, and are read back from the platform afterwards. The Services never make changes on their own initiative, and nothing is published or turned on without that request. Ads created on Meta are run as the Facebook Page and Instagram account you choose.
Pages. Where you grant Page permissions (for example Meta's pages_show_list, pages_read_engagement, and pages_manage_ads), we use them only to list the Pages you manage and to run ads as the Page you select. We do not post organic content to your Pages or read your Page's private messages.
Customer lists. If you upload a customer or prospect list to build an audience, it is sent to the ad platform you choose for matching under that platform's terms, and is not used for anything else.
You can revoke any of this at any time from the platform's own settings or by disconnecting inside the Service.
We do not sell your personal data or your workspace's advertising data to anyone, for any purpose.
We use a small number of subprocessors to run the Services — each only processes data as needed to provide their specific piece of the infrastructure, under their own security and privacy commitments:
We don't share your data with advertisers, data brokers, or anyone else for marketing purposes. We may disclose information if required by law, or to protect the rights, safety, or property of PaidHQ or our users.
We retain your data for as long as your account or workspace is active. You can delete a workspace or your account from within the Service, which removes the associated data from our systems (subject to reasonable backup retention windows before final deletion completes). If you'd rather we handle it directly, email privacy@paidhq.io.
Deleting data received from Facebook or Instagram. To delete the data we hold from a Meta (Facebook / Instagram) connection: (1) disconnect Meta in the Service under Data Sources, which deletes the stored access token; (2) remove the PaidHQ app from your Facebook account under Settings & privacy → Settings → Apps and websites; and (3) email privacy@paidhq.io from your account email asking us to delete your Meta data. We will delete the reporting data synced from that connection within 30 days and confirm by email.
We use essential cookies and local storage to keep you signed in and remember basic preferences (like your last-used workspace or theme). We do not use third-party advertising or cross-site tracking cookies.
We use industry-standard measures — encryption in transit, access controls, and reputable infrastructure providers — to protect your data. No system is perfectly secure, and we can't guarantee absolute security, but protecting your data is a first-order concern in how we build.
The Services are intended for business use by professionals and are not directed at children. We don't knowingly collect personal information from anyone under 16.
Our infrastructure providers may process and store data in the United States and other countries. By using the Services, you consent to that transfer.
We'll update this page if our practices change, and update the date at the top. Material changes affecting how your data is used will be communicated directly where required.
Questions about this policy or your data — privacy@paidhq.io.