Privacy Policy

Fanfare (“Fanfare”, “we”, “us”) runs Meta advertising for businesses (our “customers”). This policy explains what information we handle, why, and the choices you have. It applies to our website, our app, and the services we provide to customers.

Who this covers

• People who use our app on behalf of a customer (team members).
• Visitors to our customers’ websites, where a customer has installed our tracking tag.
• Our customers’ own customers, when a customer sends us records of leads, bookings or sales.
• Visitors to fanfarehq.com.

Information we handle

Account information. Name, email address and role for people invited to the app, and a record of actions they take in it.

Advertising data from Meta. With a customer’s permission, we read their ad account, Page, Instagram account and pixel through Meta’s official APIs: ad performance (spend, impressions, clicks, conversions), ad structure and audiences, and account settings. We do not receive Facebook or Instagram users’ personal profiles.

Website visits (tracking tag). When a customer installs our tag on their website, it records page visits and the start of form interactions. It stores a random visitor identifier in a first-party cookie on the customer’s domain (_ads_vid, kept for up to 365 days), reads Meta’s _fbp cookie if present, sets Meta’s _fbc cookie (up to 90 days) when the visitor arrived from a Meta ad, and captures ad identifiers and UTM parameters from the landing URL. Our servers also receive the visitor’s IP address and browser user agent with each request.

Business outcomes sent by customers. Customers may send us events such as a lead, booking or purchase, with the person’s email address, phone number, name or the customer’s own identifier. We normalize and hash these contact details with SHA-256 on receipt and store only the hashes, unless the customer has asked us to store contact details.

How we use it

• To run, measure and improve our customers’ advertising, including attributing results to ads.
• To send conversion events to Meta through the Conversions API on our customers’ behalf, using hashed identifiers, so Meta can measure and optimize their ads.
• To operate, secure and support the app, and to communicate with team members.

We do not sell personal information, and we do not use one customer’s data for another customer.

Who we share it with

• Meta, as part of running and measuring a customer’s ads, including hashed conversion events.
• Service providers that host and operate the service on our behalf, such as cloud hosting and database providers, email delivery, and AI providers used to analyse ad creative. They may use the data only to provide their service to us.
• When required by law, or to protect the rights and safety of our customers, users or others.

Our role

For data about our customers’ website visitors and their own customers, we act on behalf of the customer, who decides how it is used. Customers are responsible for telling their visitors about the tag and obtaining any consent their laws require.

Retention and deletion

We keep data for as long as a customer uses the service and as needed to provide it, then delete it when a customer asks or the account closes, except where law requires us to keep records. If you used a Facebook login connected to our app and want your data deleted, you can request it through your Facebook settings, or by contacting us; we will confirm what we hold and delete it.

Security

Access tokens are encrypted at rest, contact details are stored hashed, and each customer’s data is isolated from every other customer’s at the database level. No system is perfectly secure, but we work to protect the information we handle.

Your choices and rights

You can ask to access, correct or delete personal information we hold about you, subject to applicable law, including the California Consumer Privacy Act where it applies. If we process your information on behalf of one of our customers, we may refer your request to that customer. You can block or delete cookies in your browser settings.

Children

Our service is for businesses and is not directed to children under 13.

Changes

We will post any changes to this policy here and update the effective date above.

Contact

Questions or requests: privacy@fanfarehq.com.