Privacy Policy

Attribase (app.attribase.co) is operated by Hellion Studios LLC ("we", "us"). This policy explains what we collect, why, who we share it with, and the choices you have. Questions go to admin@hellionstudios.com.

Attribase is used by marketing agencies on behalf of their clients. For information about the agency and its users, we decide how it's used. For the data an agency brings in about its clients' customers, such as sales, leads and form submissions ("Customer Data"), we process it for the agency, on its instructions. If you're one of those customers, contact the business you dealt with first; we'll help them respond.

• Account details: names, work email addresses, phone numbers if given, agency name and billing contact.
• Sign-in and usage: sign-in codes (stored hashed and valid for 5 minutes), session records, IP address and browser, a log of actions taken in the account, and page-visit analytics.
• Payment: Stripe collects your card details. We receive your Stripe customer and subscription records, such as subscription status and invoices, never your full card number.
• Connected ad accounts: when you connect Google Ads or Meta, we receive access tokens and the data those connections allow, such as account names and IDs, campaigns, spend and conversion metrics, pixels and datasets, and the Pages and lead forms you connect.
• Customer Data: files you upload (such as sold reports and lead lists), sales sent from your CRM or Zapier, funnel and lead-form submissions, leads from Meta, Google and Local Services, and events from the Attribase tracking script on your websites, such as ad click IDs, page addresses and form activity. Customer Data can include names, email addresses, phone numbers, addresses, job details and sale amounts.

• To run the Service: match, clean and send your sales and leads to the ad platforms you choose, and show your reports.
• To send account emails: sign-in codes, trial and billing notices, new-lead alerts and the reports you schedule.
• To bill you, give support, keep the Service secure and prevent abuse.
• To understand how the Service is used and improve it.

We don't sell personal data. We don't use Customer Data or data from your ad accounts for our own advertising, to build profiles, or for anything unrelated to providing the Service to you.

Attribase's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Ads data only to provide the features you use: sending conversions and lead feedback, and showing performance. You can revoke access at any time in your Google Account permissions.

We use Meta Platform Data only to provide the Service to you: sending conversions through the Conversions API, receiving leads from the Pages you connect, and showing ad performance. We don't sell, license or share it except with the service providers below, who process it for us. You can remove Attribase at any time in your Facebook Business Integrations settings, and ask us to delete the data at admin@hellionstudios.com.

The ad platforms you choose. When you send conversions or lead feedback, Google and Meta receive the conversion details and customer identifiers. We hash email addresses and phone numbers before they leave Attribase, as those platforms require.

Our service providers, who process data only to provide their service to us:

Others, only when needed: to comply with the law or a valid legal request, to protect our rights or someone's safety, or as part of a sale or merger of our business, in which case this policy keeps applying to your data.

The AI data cleaner, column-mapping suggestions, AI Advisor, sales analysis and dashboard commentary send data to Anthropic. The AI Processing Disclosure lists what each one sends and how long it's kept.

Data travels over encrypted connections (HTTPS). Each agency's data is kept separate, client logins see only the clients they're assigned to, and sign-in codes expire after 5 minutes. Card details stay with Stripe. Customer Data, including names, emails and phone numbers, is stored in our database so the Service can show and send it. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.

• Account data and Customer Data: while your account is active.
• After your subscription ends: we keep your data so you can come back, until you ask us to delete it. We delete it within 30 days of a verified request, except what the law requires us to keep, such as billing records.
• AI data-cleaner jobs: up to 7 days, as described in the AI Processing Disclosure.

You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing admin@hellionstudios.com. You can disconnect Google or Meta from the app, or revoke our access from your Google or Meta account, at any time. Depending on where you live, you may also have the right to complain to a data-protection authority.

We and our service providers process data in the United States.

The Service is for businesses and isn't meant for anyone under 16.

We'll post any change here and update the date above. For a material change, we'll also email account admins or show a notice in the app before it takes effect.

Hellion Studios LLC
1 Good Shepherd Ter, Bryn Mawr, PA 19010, United States
admin@hellionstudios.com