Privacy Policy

Advectigroup (“Advecti”, “we”, “us”) operates a mobile advertising service in the Columbus, Ohio metropolitan area. Questions about this policy: contact us here.

From advertisers: company name, contact name, email, phone number, campaign preferences, premium-zone coordinates, billing details (handled by our payment processors — we do not store full card numbers).

From drivers: name, email, phone, vehicle information, and GPS location/route data while a session is active.

From website visitors: standard server logs (IP address, browser type, pages requested, timestamps) for security and traffic analysis.

From integrations you connect: aggregated revenue and traffic data from Shopify, Square, and Stripe (only what you explicitly authorize via OAuth), plus anonymized site-visit counters from the Advecti Pixel if you choose to install it on your website.

From Instagram, if you connect your account: your Instagram professional account ID, username, account type, profile picture URL and public follower count; the list of your own posts (ID, caption, permalink, timestamp, thumbnail) so you can choose which post runs your giveaway; and the public comments on that chosen post, including each commenter’s Instagram username, the comment text, the comment timestamp, and the usernames tagged in it. We do not request or receive your Instagram password, direct messages, private account data, email addresses of commenters, or the contents of any post you have not selected.

To deliver, operate, bill, and improve the advertising service; to compute campaign analytics (impressions, lift); to send service notifications and optional weekly digests; to comply with legal obligations.

Connecting Instagram is entirely optional and is only used to measure and run your wrap campaign’s giveaway. Specifically, we use the data above to: take a daily snapshot of your follower count so you can see the growth your wrap produced; read the comments on the single post you designate so that entries can be recorded; count how many friends each entrant tagged; and select a winner at the end of each 30-day cycle.

We never post, comment, message, follow, unfollow or change anything on your Instagram account. Our access is read-only apart from the webhook subscription that notifies us of new comments on your chosen post.

We do not sell, rent or share Instagram data with any third party, and we do not use it for advertising targeting or to train any model. Entrant usernames are visible only to you and to Advecti staff administering the drawing.

Retention and deletion. Access tokens are held server-side only, are never sent to your browser or exposed by any API response, and are deleted the moment you disconnect. You can disconnect Instagram at any time from the Social Attribution tab of your dashboard, which immediately deletes the stored access token and stops all data collection. To delete the Instagram data we have already collected — follower snapshots, recorded entries and comment records — use the delete option in your dashboard or contact us and we will erase it within 30 days. You may also revoke our access directly from Instagram under Settings → Website Permissions → Apps and Websites.

Giveaways run through this feature are in no way sponsored, endorsed, administered by, or associated with Instagram or Meta Platforms, Inc.

We do not sell personal information. We share data only with service providers that help us operate the platform: Stripe (payments), Shopify/Square (your own data, only with your OAuth consent), our hosting provider, and our email delivery provider. Each is contractually required to protect your data.

We use browser local storage to keep you logged in (a session token), and the Advecti Pixel writes a hashed visitor identifier (IP + user-agent) on advertiser websites that install it, used solely to count unique daily visitors. We do not use third-party advertising cookies, Facebook Pixel, or other cross-site trackers on this site. If we add them later, we will update this policy and add a consent prompt where required.

Access, correction: email us and we will respond within 30 days.

Disconnect integrations: log in to your dashboard, open the Integrations tab, and click Disconnect on any connected service (Shopify, Square, Stripe, or Manual Entry). We revoke the OAuth token immediately and stop pulling new data from that source.

Delete everything (right-to-erasure): log in to your dashboard, open the Privacy & Data tab, and click Permanently delete my account. We will erase your advertiser record, campaigns, premium zones, driver-session history, conversion entries, connected-integration tokens, and uploaded files from our production database. This action is immediate and irreversible. If your campaign is still active when you delete, an early-termination penalty applies — see the Terms of Service for details. Disconnecting individual integrations does NOT trigger a penalty; only full account deletion does.

California residents (CCPA): you also have the right to know what we collect, request deletion (above), and opt out of any “sale” of personal information — we do not sell. EU/UK residents: we honor GDPR rights including data portability and the right to object. To exercise data portability, email us and we will deliver a machine-readable export within 30 days.

Account and campaign data: while your account is active plus seven years for tax and compliance records. Driver GPS routes: aggregated indefinitely; the raw session log is retained for two years. Server logs: 90 days.

We use TLS in transit, encrypted storage at rest, and least-privilege access controls. No system is perfectly secure; please use a strong password.

Advecti is not directed to anyone under 13 and we do not knowingly collect data from them.

We may update this policy. Material changes will be flagged at the top of this page. Continued use of the service after changes constitutes acceptance.