Privacy policy

Effective date: September 15, 2026

This policy covers Johan’s - Media Buyer AI, operated by Digital Optimizer LLC. It is separate from the AFF-Pacing policy.

Information processed

• Advertising and business information: authorized account, business, campaign, ad-set and ad identifiers; campaign settings, budgets, delivery status, creative content and performance metrics such as spend, clicks, conversions and reported revenue.
• Lead and customer information supplied through authorized sources: contact and identifier information, submitted lead details, customer interactions and conversion or purchase outcomes included in the connected records.
• Operator and service information: account/contact details, permissions, integration credentials, instructions, uploaded material, AI inputs and outputs, training datasets, model artifacts, operational records and support correspondence.

Purposes and AI processing

We process information to provide advertising management, analyze campaign and lead/customer outcomes, generate recommendations and content, improve analysis through feedback, operate authorized workflows and provide support and security.

The service uses Anthropic (Claude), Google (Gemini) and OpenAI (ChatGPT). Relevant information is transmitted to the providers used by a workflow for analysis and generation. Our learning workflows also include model training or fine-tuning using advertising and supplied lead/customer information. This is a distinct use from generating a single answer.

Training datasets, derived insights and trained model artifacts may retain information or patterns from their inputs. Provider retention and independent use depend on the product, agreement and account settings used; this policy does not promise zero retention or a universal provider no-training setting. Contact us for the provider and processing details applicable to your connected service.

Limits on use and disclosure

Platform data remains subject to its source’s permissions and terms. A disclosure in this policy does not authorize a prohibited use. In particular, Meta advertising data must be used only within the purposes allowed by Meta, with advertiser data kept separate. Training across clients, unrelated profiling or a provider’s independent use requires a separate assessment of the applicable restrictions and cannot be authorized by this policy alone.

Information is shared with the AI providers above and with hosting, infrastructure and communications providers as needed to deliver the service. Privacy correspondence is routed through ImprovMX to our Google Workspace mailbox. We may disclose information when legally required, to protect rights or security, or as part of a lawful business transfer with applicable protections.

Retention and deletion

Retention depends on the record and configured workflow. Operational records, inputs, outputs, training datasets and model artifacts can have different lifecycles. We retain information only while needed for the disclosed service purposes or applicable legal obligations and review deletion requests as described in our deletion instructions.

Deleting a source record does not automatically remove its effects from an already trained model. Requests should identify whether they cover source data, training copies, outputs or model artifacts. We assess the affected systems and providers, explain available remediation and address any legal or platform deletion requirements; we do not promise automatic model unlearning.

Your rights and choices

You may request access, correction, deletion, a copy of your information, restriction or objection to processing, and withdrawal of consent where consent applies. Available rights depend on applicable law. You may also contact your data-protection authority. Businesses connecting records are responsible for appropriate authority, notices and permissions; contact us before connecting data if you need to restrict AI or training use.

Where a legal basis is required, processing must have an applicable basis such as providing a requested service, valid consent, a legitimate interest subject to applicable safeguards, or a legal obligation. Providers may process data internationally under the protections applicable to the chosen service and agreement.

Security, children and this website

Use appropriate permissions and keep credentials private. No service can guarantee absolute security. The service is for authorized business users and is not directed to children. These public pages contain no advertising trackers or analytics scripts; hosting services may process request and security logs.

Contact and updates

Send privacy, security or rights requests to privacy@digitaloptimizer.app. We may verify your identity or authority without requesting passwords or access tokens. We will respond within applicable legal deadlines. The date above identifies this policy version.