Privacy Policy
Effective April 7, 2026
Introduction
This Privacy Policy explains how Capconvert, LLC. (“Capconvert,” “we,” “us,” or “our”) collects, uses, discloses, and protects your information when you visit capconvert.com or engage with our services.
Capconvert is a digital marketing agency specializing in SEO, Generative Engine Optimization (GEO), Google Ads management, and Amazon Ads management. We are committed to protecting your privacy and being transparent about how we handle your data.
By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our website immediately.
Information We Collect
We collect information in two ways: information you provide directly, and information collected automatically.
Information you provide. When you fill out a contact form, subscribe to our newsletter, or submit a lead generation form on our website, we may collect your name, email address, company name, phone number, and any additional details you include in your message.
Information collected automatically. When you visit capconvert.com, we automatically collect certain technical and usage data through cookies and similar technologies, including:
- IP address, browser type, and operating system
- Pages visited, time spent on each page, and referring URLs
- Device type and screen resolution
- Interaction data collected via Google Analytics 4 (GA4) and Google Ads / Google Tag Manager
We do not knowingly collect personal information from children under the age of 16.
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your inquiries and communicate with you about our services
- To deliver the services you request, including SEO audits, ad campaign management, and GEO optimization
- To send you marketing communications, such as newsletters, where you have opted in to receive them
- To analyze website usage and improve capconvert.com's content, functionality, and user experience
- To measure the effectiveness of our advertising campaigns via Google Ads
- To comply with legal obligations and enforce our terms of service
We do not sell, rent, or trade your personal information to third parties.
Information Sharing
We may share your information with the following categories of third parties:
- Google LLC - through Google Analytics 4, Google Ads, and Google Tag Manager for analytics and advertising purposes
- Hosting and infrastructure providers - to operate and maintain capconvert.com
- Email service providers - to deliver newsletters and marketing communications
We may also disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Capconvert, our users, or the public.
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change in ownership.
Connected Meta Ads Accounts (Cortex)
Merchants who connect a Meta (Facebook / Instagram) ad account to the Cortex platform authorize Capconvert to read a defined subset of ad- account data for the purpose of generating optimization recommendations. The handling of that data is set out below.
- Data collected - Ad account IDs and names, campaign and ad-set metadata, and performance insights (impressions, spend, CTR, ROAS) from the ad accounts the merchant authorizes. Capconvert does not collect audience targeting lists, customer match files, or messaging-thread content.
- Storage - Encrypted at rest in cortex-meta’s dedicated Neon Postgres database, separated from other Cortex product databases. Encryption in transit uses TLS 1.2 or higher.
- Retention - Until the merchant disconnects the integration or submits a deletion request. Inactive connections are auto-deleted after 24 months.
- Use - Displayed to the connecting merchant inside the Cortex dashboard. Used only to generate optimization recommendations the merchant sees. Not shared with third parties, not sold, and not used to train AI models.
- Subprocessor - Meta Platforms, Inc., as the source of the ad-account data via the Meta Marketing API. Meta is listed on our public subprocessors page.
- Deletion process - The merchant disconnects the integration inside the Cortex dashboard (which purges the stored data immediately), or submits a request per our data deletion instructions.
Data Deletion Instructions
You may request deletion of data Capconvert holds about you or about a Meta ad account you have connected to Cortex at any time. Two paths are available:
- Self-serve disconnection - If you are the merchant who authorized a Meta ad account connection, open the Cortex dashboard, navigate to Settings → Connected Accounts, and click Disconnect next to the relevant account. Your ad-account data is purged immediately and the integration token is revoked with Meta.
- Deletion request by email - Send an email to privacy@capconvert.com with the subject line Data Deletion Request. Include the email address associated with your Capconvert account and, if applicable, the Meta ad account ID you want deleted. We confirm receipt within 72 hours and complete the deletion within 30 days.
Capconvert verifies the requestor’s identity before processing a deletion request to prevent unauthorized purges. We retain anonymized aggregate metrics that cannot be tied back to your account; everything else is purged or anonymized at the database level.
AI Processing of Customer Data
When you use Cortex, or when Capconvert provides agency services that include Cortex-assisted analysis, your data may be processed through third-party AI providers including Anthropic, OpenAI, and Google. These providers act as our sub-processors under contractual terms that prohibit them from using your data to train their public foundation models:
- Anthropic Commercial Terms of Service - API traffic is not used for model training.
- OpenAI API data-usage policy - API inputs and outputs are not retained for training (effective for all API traffic since March 2023).
- Google Gemini API (paid tier) - data is not used for training.
Capconvert does not, and will not, use Customer Personal Data to train any AI or ML model offered to third parties. The full list of Cortex sub-processors is at /cortex/subprocessors; the agency-side sub-processor list is at /subprocessors.
Outputs Cortex generates from your data are licensed to you under the Cortex Output Usage Rights. Capconvert does not redistribute, resell, or train other systems on those outputs.
Capconvert as Service Provider (CCPA/CPRA)
When Capconvert processes Personal Information on behalf of a business Customer (whether through agency services or Cortex), Capconvert acts as a Service Provider under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA). In that capacity:
- Capconvert does not Sell or Share (as those terms are defined under CCPA/CPRA) the Customer’s Personal Information.
- Capconvert does not retain, use, or disclose Personal Information outside the direct business relationship with the Customer, or for any purpose other than the specific business purpose of providing the contracted services.
- Capconvert does not combine Personal Information received from one Customer with Personal Information received from another source, except as permitted by CCPA/CPRA.
Customers subject to GDPR, UK GDPR, CCPA/CPRA, or equivalent privacy law can execute a Data Processing Addendum with Capconvert. The agency-side DPA is at /dpa; the Cortex SaaS DPA is at /cortex/dpa.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, including to comply with legal, accounting, or reporting requirements. For Customer Data processed in connection with Cortex subscriptions or agency engagements, the post-termination retention window is described in detail in our Data Retention Policy.
Contact form submissions and newsletter subscriber data are retained until you request deletion or unsubscribe. Anonymized analytics data collected via GA4 may be retained for up to 14 months in accordance with our Google Analytics data retention settings.
When your data is no longer needed, we will securely delete or anonymize it.
Your California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:
- Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the third parties with whom we share it.
- Right to delete. You may request that we delete any personal information we have collected about you, subject to certain exceptions.
- Right to opt out. You have the right to opt out of the sale of your personal information. Capconvert does not sell personal information.
- Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.
To exercise any of these rights, please contact us at hello@capconvert.com. We will respond to verifiable consumer requests within 45 days.
Your European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with the following rights:
- Right of access. You may request a copy of the personal data we hold about you.
- Right to rectification. You may request that we correct inaccurate or incomplete personal data.
- Right to erasure. You may request that we delete your personal data, subject to certain legal exceptions.
- Right to restrict processing. You may request that we limit how we use your data.
- Right to data portability. You may request a machine-readable copy of your personal data.
- Right to object. You may object to our processing of your data for direct marketing purposes.
- Right to withdraw consent. Where we rely on your consent to process data, you may withdraw it at any time.
Our lawful bases for processing your data include your consent (for newsletters and marketing cookies), legitimate interest (for analytics and website improvement), and contractual necessity (for service delivery).
To exercise any of these rights, please contact us at hello@capconvert.com. You also have the right to lodge a complaint with your local data protection authority.
Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include encrypted data transmission (SSL/TLS), access controls, and regular security reviews.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will revise the “Effective” date at the top of this page.
For material changes, we will provide additional notice, such as a prominent announcement on capconvert.com or an email notification. We encourage you to review this policy periodically.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: