Privacy Policy
1. Who we are
Sunrise Strategy Group LLC ("SSG," "we," "us") is a Florida limited liability company that provides marketing technology and advertising services to businesses of all kinds. Our contact email is [email protected].
2. Scope of this policy
This Privacy Policy describes how SSG collects, uses, stores, and shares information in connection with our website at sunrisestrategygroup.com and our Meta (Facebook) developer application that allows our business clients to authorize SSG to manage their Meta advertising accounts on their behalf.
3. Information we collect
When a client authorizes SSG through our Meta application, we collect:
- The Meta access token issued by Meta to SSG for the authorizing user.
- The names and categories of the Facebook Pages the client grants us access to, used to identify which Pages the integration manages. We do not retain per-Page access tokens.
- The identifiers of the Meta ad accounts and Pages the client explicitly grants us access to.
- The name and email address of the authorizing Meta user, as returned by Meta.
- Ad performance data (impressions, clicks, conversions, spend) for the ad accounts the client authorizes us to manage.
We do not collect personal information about the end users who see or interact with our clients' ads. Meta provides only aggregated, non-identifying performance data to us.
When you visit our website, our hosting provider (Cloudflare) logs standard HTTP request data, including IP address and user agent, for security and abuse prevention. We do not use third-party analytics or advertising trackers on this site.
4. How we use the information
We use the information collected through our Meta application solely to deliver the services our client has engaged us to perform, namely creating, managing, and reporting on Meta advertising campaigns on the client's behalf. We do not use this information for any other purpose, and we do not use it to build profiles of, or advertise to, the client's customers or end users.
5. How we store and protect the information
Meta access tokens and ad account identifiers are transmitted over encrypted connections and stored in access-controlled configuration operated by SSG. Tokens are scoped per client and are never reused across clients. They are handled only by SSG administrators and are never committed to version control systems, public repositories, or any publicly accessible document.
6. Sharing
We do not sell, rent, or trade any information collected through our Meta application or website. We share data with third parties only as needed to deliver the services: we send API requests to Meta on the client's behalf; we use Cloudflare to host this website and run our authorization endpoint; and we use Google Workspace (Gmail) to deliver internal transactional notifications. No other third parties receive this data.
7. Compliance with Meta Platform Terms
SSG complies with Meta's Platform Terms and Developer Policies. We use access tokens only for the purposes the client has authorized and only for as long as the client maintains an active engagement with us. If a client revokes our access through their Meta settings, we cease using their token immediately and delete it from our systems.
8. Data retention and deletion
We retain Meta access tokens and associated identifiers only for the duration of an active client engagement. When a client engagement ends, or when a client requests deletion, we remove the relevant tokens and identifiers from our systems within 30 days. To request deletion, email [email protected] with the subject line "Data deletion request."
9. Your rights
If you are a client or an authorized user of one of our clients, you have the right to know what information we hold about you, to request correction or deletion, and to revoke our access at any time. You can revoke SSG's Meta access directly from your Meta account settings under Business Integrations. You can also contact us at the email above to exercise any of these rights.
10. Children
Our services are intended for businesses, not individuals under 18. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent change. Material changes will be communicated to active clients by email.
12. Contact
Questions about this policy can be sent to [email protected].