Privacy Policy

CRMNeuron (https://crmneuron.com) is a web application that ecommerce advertisers use to manage their own Meta (Facebook) ad campaigns, their online stores and related marketing work. CRMNeuron is operated by ECOM OLIMPO LLC, 801 White Sands Blvd 1007, Alamogordo, NM 88310, United States, which is the controller of the personal data described in this policy.

• Account data: your name, email address, password (stored only as a hash), company and phone number, and your subscription and billing status.
• Technical data: IP address, browser type and server logs needed to run and secure the service.
• Content you enter: contacts, products, stores, notes and anything else you add to CRMNeuron.
• Services you connect: for example your Shopify stores or your payment gateways, only with the access you grant.
• Meta Platform Data (see section 3), when you connect Facebook with Facebook Login for Business.
• Instagram (optional): if you connect an Instagram professional account with Instagram’s own login, its account ID, username and an access token (encrypted), used only for the Instagram features you use (publishing and scheduling your posts and the automations you set up).

When you click “Connect with Facebook”, you choose in Meta’s own dialog which businesses, Pages and ad accounts CRMNeuron can access. With the permissions you grant, CRMNeuron stores only:

• your Facebook user ID and name;
• your user access token and, when you choose a main Page, that Page’s access token, both encrypted and kept only on our server;
• for each ad account available to your connection: its ID, name, currency, time zone, status and amount spent;
• the Page you choose for the connection and for each ad account (ID and name);
• for each campaign: its ID, name, status, objective, budgets and aggregated metrics (spend, impressions, clicks, reach, CTR, CPC, CPM, ROAS and conversions);
• in your own account, the recommendations generated by “AI Coach” and the metrics and AI analysis of your Product tester campaigns.

We use this data only to show you your own dashboard, to create and manage the campaigns you ask for (everything is created paused), to let you download your leads and to give you AI recommendations. We never sell it, never use it for our own advertising or profiling, and never combine it across advertisers: each advertiser only sees data from their own connections. Only ECOM OLIMPO LLC’s administrators can access the database, for support and operations.

This use complies with the Meta Platform Terms and Developer Policies.

CRMNeuron retrieves the leads from your own Instant Forms only when you click “Download leads” or “Export report”. They are sent to your browser as a CSV file. CRMNeuron does not store your leads, does not send them to AI providers, and does not share, sell or combine them across advertisers. They are for you to follow up with the people who asked you to contact them.

We use these providers to run CRMNeuron. They process data only on our behalf and under their data processing terms:

The AI providers receive only campaign names, status, objective and daily budget, aggregated metrics and, for Product tester, ad headlines. They never receive access tokens, Facebook user or Page IDs, or leads. We do not sell personal data, and we share it only with these providers, when the law requires it, or to protect the rights and safety of our users and of CRMNeuron.

Our application and database run in the European Union (Contabo, France). ECOM OLIMPO LLC is based in the United States, and the AI providers and Stripe process the data they receive in the United States and in other countries where they or their subprocessors operate, under their data processing terms.

• All traffic between you, CRMNeuron and Meta uses HTTPS (TLS).
• Every Facebook and Instagram access token we store is encrypted at rest with AES-256-GCM at application level. Tokens stay on our server, are used only for server-side calls to Meta, and are never sent to your browser.
• Passwords are stored only as salted hashes.
• Access to the servers and the database is restricted to ECOM OLIMPO LLC’s administrators.

Connection, ad account and campaign data are kept only while your Facebook connection exists; campaign metrics are overwritten on each sync. AI Coach recommendations and Product tester results stay in your account until you delete the account or ask us to delete them. When you delete your account, we delete your personal data within 30 days, except what the law requires us to keep (for example, invoices). Daily database backups are kept on the same server for about 30 days and then rotate out.

• In CRMNeuron: in Facebook Ads → Connections, click “Disconnect”. We immediately delete that connection with its encrypted tokens, its ad accounts and its synced campaigns and creatives, and we ask Meta to revoke CRMNeuron’s permissions (unless the same Facebook account is still connected in another of your CRMNeuron connections, because revoking would also cut that one). AI Coach analyses and Product tester results stay in your account until you delete the account or ask us by email.
• In Facebook: remove CRMNeuron in Settings & privacy → Settings → Business integrations. CRMNeuron loses access immediately; the connection data listed above is deleted when you click “Disconnect”, and everything else when you ask us by email.
• By email: write to info@crmneuron.com with the subject “Delete my data”. We delete your account and all associated data, including data obtained from Meta, within 30 days and confirm it by email.

Step-by-step instructions: Data deletion.

If a public authority asks us for personal data, we review the legality of the request, challenge it if we consider it unlawful, disclose only the minimum information necessary, and document the request, our response and the legal reasoning. We have not received any such request in the last 12 months.

You can ask for access to your data, its rectification, deletion or portability, and withdraw your consent at any time by writing to info@crmneuron.com. If you are in the European Union or the United Kingdom, you can also lodge a complaint with your data protection authority.

We use one session cookie to keep you signed in, and your browser’s local storage for preferences such as language and theme. We do not use third-party advertising cookies or analytics trackers.

We may update this policy. We will announce significant changes in the app or by email before they take effect.