Privacy Policy

This Privacy Policy explains how Red Target ("Red Target", "we", "us" or "our") collects, uses, shares and protects personal data when you use the Red Target client portal at portal.red-target.com (the "Portal") and the related marketing services we provide to our clients (together, the "Services").

Red Target is a marketing agency. The Portal lets our clients follow their projects, approve content, review advertising and social media performance, track leads and manage payments.

1. Who is responsible for your data

Red Target is the controller of the personal data described in this policy for the purpose of operating the Portal and our client accounts. When we process data on behalf of a client (for example, leads generated by that client's advertising campaigns), we act as a processor for that client, and the client's own privacy policy also applies.

For any privacy question or request, contact us at ola@red-target.com.

2. Data we collect

Account and contact data

Company name, contact name, email address, phone number, city, country, preferred language and currency, and your password (stored only as a one-way hash).

Project, content and billing data

Project tasks and milestones, content drafts, captions, images and videos submitted for approval, your approvals and comments, internal notes about the engagement, and payment records (amounts, due dates, payment status and transaction references). We do not store full card numbers; card payments are handled by our payment provider.

Data from Meta (Facebook and Instagram)

When you authorize Red Target to connect your Facebook Page, Instagram professional account or Meta ad account, we access, through the Meta Graph API and Marketing API, only the data needed to report on and manage your marketing:

• Page and account identifiers, names and usernames;
• Published posts, reels, stories and their media, captions, permalinks and publication dates;
• Aggregated insights such as reach, views, likes, comments, shares, saves, engagement and follower counts;
• Ad account, campaign, ad set and ad names, statuses, budgets and creatives;
• Aggregated advertising metrics such as spend, impressions, reach, clicks, leads, conversions and conversion value;
• Lead form submissions from your Meta lead ads (for example, name, email and phone of people who chose to contact your business), when you enable this.

Data from Google Ads

When an authorized member of our team connects Red Target's Google Ads manager account, we access, through the Google Ads API and only for the client accounts linked to it, account identifiers, campaign names, statuses, budgets, conversion action names and aggregated performance metrics (cost, impressions, clicks, conversions and conversion value). Figures may also be entered by our team manually or imported from reports exported from your accounts.

Technical data

IP address, browser type, device information and timestamps recorded in server logs for security and troubleshooting. The Portal uses only strictly necessary cookies to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or third-party tracking cookies in the Portal.

3. How we use data

• To provide the Portal and the Services you contracted, including dashboards, reports, content approvals and notifications;
• To measure and improve the results of your marketing campaigns and to give you recommendations;
• To manage our relationship with you, including invoicing and payment reminders;
• To send service emails such as invitations, password resets, approval requests, reports and payment notices;
• To keep the Portal secure, prevent abuse and comply with legal obligations.

Our legal bases are the performance of our contract with you, our legitimate interest in operating and securing the Services, your consent where you connect a third-party account (which you may withdraw at any time), and compliance with legal obligations.

4. Use of Meta and Google data

Data received from the Meta and Google APIs is used solely to provide the Services to the client who authorized the connection: displaying performance in that client's Portal, producing that client's reports and managing that client's campaigns and content. We do not sell this data, do not use it for advertising to other audiences, do not use it to build profiles of individual people, and do not share it with anyone other than the authorizing client and the service providers listed below that help us run the Portal.

5. Sharing

We do not sell or rent personal data. We share it only with:

• Service providers that host our infrastructure, store files, deliver email and process payments, under contracts that require them to protect the data and use it only on our instructions;
• Members of our team who work on your account, on a need-to-know basis;
• Authorities, when required by law or to protect our rights, users or the public;
• A successor in the event of a merger, acquisition or sale of assets, subject to this policy.

6. International transfers

We serve clients in several countries, and our providers may process data outside your country. When we transfer personal data internationally, we rely on appropriate safeguards such as contractual commitments required by applicable law.

7. Retention

We keep account, project and content data for as long as you are a client and for up to 12 months afterwards so you can request copies, unless you ask us to delete it sooner. Billing records are kept for the period required by tax and accounting laws. Data obtained from Meta or Google, and advertising data entered for you, is deleted within 30 days after you disconnect the account, end the engagement or ask us to delete it, except for aggregated figures already included in reports delivered to you. Server logs are kept for up to 90 days.

8. Security

We use encrypted connections (HTTPS), hashed passwords, encryption at rest for sensitive operational notes, access controls that keep each client's data separate, and limited staff access. No system is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach when required by law.

9. Your rights

Depending on where you live (including under the UAE Personal Data Protection Law, the Brazilian LGPD and the EU/UK GDPR), you may have the right to access, correct, delete or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email ola@red-target.com. We will reply within 30 days. You may also lodge a complaint with your local data protection authority.

To delete data obtained through Facebook or Instagram, see our Data Deletion Instructions.

10. Children

The Portal is intended for businesses and is not directed at children under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for material changes, notify clients by email or in the Portal.

12. Contact

Red Target
Email: ola@red-target.com
Website: red-target.com