Privacy Policy

Last Updated: September 11, 2025

Starforest Media Agent ("Starforest," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [www.thestarforest.com] (the "Site") and use our AI-powered media agent services (the "Services"). Please read this Privacy Policy carefully. By accessing or using our Site or Services, you consent to the practices described in this Privacy Policy.  

1. Information We Collect

We may collect the following types of information:  

    Information You Provide Directly:

        Contact Information: When you fill out a form on our Site (e.g., to request a demo, contact us, or request pricing), we collect your name, email address, company name, and website URL.

        Account Information: If you create an account on our Site, we may collect additional information, such as a username and password.

        Communications: If you contact us directly, we may keep a record of that correspondence.

        Optional Information: We may ask for additional information, such as your estimated monthly advertising spend, to better tailor our Services to your needs. Providing this information is optional.

        Advertising Platform Credentials: When you connect your advertising accounts (Google Ads, Facebook Ads, Instagram), we store secure access tokens to retrieve campaign data and performance metrics.

    Information Collected Automatically:

        Log Data: When you visit our Site, our servers automatically record information that your browser sends ("Log Data"). This Log Data may include your IP address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages, and other statistics.  

        Cookies and Similar Technologies: We use cookies and similar tracking technologies (e.g., web beacons, pixels) to track activity on our Site and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site. We will include a cookie consent banner.  

        Device Information: We may collect information about the device you use to access our Site, including the device type, operating system, unique device identifiers, and mobile network information.  

    Information from Third Parties: We integrate with third-party providers like Meta and Google to provide our services.

    Advertising Platform Data:

        Google Ads API Data: Campaign performance data (impressions, clicks, conversions, spend), ad group and keyword performance metrics, account structure information, audience insights and demographic data, conversion tracking data from your connected Google Ads accounts.

        Meta Marketing API Data: Facebook and Instagram ad campaign performance data, page insights and engagement metrics, audience demographics and interests (aggregated only), ad creative performance and engagement data.

        Custom Audience Data: Only with your explicit written consent, we may access customer contact information (emails, phone numbers) for custom audience creation on Meta platforms.

2. How We Use Your Information

We may use the information we collect for various purposes, including to:

    Provide, maintain, and improve our Services.  

    Respond to your inquiries, comments, and requests.

    Send you technical notices, updates, security alerts, and support and administrative messages.  

    Communicate with you about products, services, offers, promotions, and events offered by Starforest and others we think will be of interest to you (you can opt-out of these communications at any time).  

    Monitor and analyze trends, usage, and activities in connection with our Site and Services.  

    Personalize and improve the Site and Services, and provide content or features that match user profiles or interests.  

    Detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of Starforest and others.  

    Carry out any other purpose described to you at the time the information was collected.

    Comply with the law. We use your personal data as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.  

    With your consent. In some cases, we may specifically ask for your consent to collect, use, or share your personal data, such as when required by law.

    Advertising Platform Data Analysis:

        Campaign Performance Analysis: Track and report on your advertising effectiveness across platforms.

        Media Planning: Generate data-driven recommendations for budget allocation and targeting optimization.

        Competitive Intelligence: Create aggregated, anonymized industry benchmarking insights (no individual account data shared).

        Cross-Platform Analytics: Compare performance across Google, Facebook, and Instagram advertising platforms.

3. How We Share Your Information

We may share your information as follows:

    With Service Providers: We may share your information with third-party service providers who perform services on our behalf, such as website hosting, data analysis, payment processing, email delivery, and customer service. These service providers are authorized to use your personal information only as necessary to provide these services to us.  

    With Business Partners: With your consent, we may share your information with business partners who offer products or services that may be of interest to you.

    For Legal Reasons: We may disclose your information if we believe it is necessary to:

        Comply with a law, regulation, legal process, or governmental request.  

        Enforce our Terms and Conditions or other agreements.

        Protect the rights, property, or safety of Starforest, our users, or others.

        Detect, prevent, or address fraud, security, or technical issues.

    In Connection with a Business Transaction: We may share your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.  

    With Your Consent: We may share your information with third parties for any other purpose with your consent.  

    Aggregated or De-identified Data: We may share aggregated or de-identified information, which cannot reasonably be used to identify you.

    Advertising Platform Data Sharing:

        We do not sell or share your Google Ads or Meta platform data with third parties for marketing purposes.

        Data may be shared with our authorized service providers who assist in platform operations under strict confidentiality agreements.

        We may use aggregated, anonymized advertising data for industry research (no individual account identification possible).

        We may disclose data when required by law or to protect our legal rights.

4. Advertising Platform Data Protection & Security

    Google Ads API Data Handling:

        All Google Ads data is encrypted in transit using TLS protocol.

        Data is stored securely on our servers with industry-standard encryption.

        We implement access controls to limit data access to authorized personnel only.

        Data is retained only as long as necessary to provide our services.

    Meta Marketing API Data Handling:

        All Meta platform data is transmitted and stored using encryption.

        We comply with Meta's data security requirements and undergo regular security assessments.

        Access to Meta data is restricted to authorized team members only.

        We implement data retention policies that align with your business needs and legal requirements.

    Custom Audience Data (Meta Platforms - Updated 2025):

        Explicit Consent Required: We will only upload customer contact information (emails, phone numbers) to Meta for custom audience creation with your explicit written consent.

        Consent Documentation: We maintain detailed records of when, where, and how consent was obtained.

        Data Minimization: We only upload the minimum data necessary for your specified marketing objectives.

        User Rights: End users can opt out of custom audience targeting through Meta's advertising preferences.

5. Your Choices

    Marketing Communications: You may opt out of receiving promotional emails from us by following the unsubscribe instructions provided in those emails. Even if you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.  

    Cookies: Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Site.  

    Do Not Track: Some web browsers offer a "Do Not Track" ("DNT") setting. However, there is no universally agreed-upon standard for DNT signals, and we do not currently respond to DNT signals.

    Advertising Platform Data Controls:

        You can revoke access to your Google Ads data at any time through your Google account settings.

        You can disconnect your Meta accounts from our platform at any time through your account dashboard.

        Users can opt out of personalized ads through Facebook's ad preferences settings.

        You can request deletion of your advertising platform data by contacting us at privacy@thestarforest.com.

6. Data Security

We take reasonable measures to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. All advertising platform data is secured using industry-standard encryption both in transit and at rest. We implement multi-layered security controls including access restrictions, regular security assessments, and data protection protocols. However, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.  

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, or to resolve disputes or enforce our agreements. 

Specific retention periods for advertising platform data:

    Performance Data: Retained for 3 years or until service termination, whichever is sooner.

    Account Configuration Data: Retained during active service period plus 1 year.

    Custom Audience Data: Deleted within 90 days after campaign completion unless legally required to retain.

8. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.  

9. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights may include:

    Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of the personal information, the purposes for collecting the personal information, and the categories of third parties with whom we share the personal information.  

    Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.

    Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.  

    Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information (as those terms are defined under California law). We do not currently "sell" or "share" personal information in the traditional sense, but this may change. This section MUST be reviewed and updated by your lawyer.  

    Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information. This section MUST be reviewed by your lawyer.  

    Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California privacy rights, please contact us at privacy@thestarforest.com. We will respond to your request within the timeframes required by law.

10. Your Rights Under GDPR (If Applicable) 

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

    Right of Access: You have the right to access your personal data and receive information about how we process it.

    Right to Rectification: You have the right to correct inaccurate personal data we hold about you.

    Right to Erasure: You have the right to request deletion of your personal data under certain circumstances.

    Right to Restrict Processing: You have the right to request that we limit how we process your personal data in certain situations.

    Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another controller.

    Right to Object: You have the right to object to our processing of your personal data under certain circumstances.

    Right to File a Complaint: You have the right to file a complaint with your local data protection authority.

Legal basis for processing advertising platform data:

    Legitimate Business Interest: Providing advertising analytics and optimization services.

    Contractual Necessity: Fulfilling our service agreement to provide media planning insights.

    Consent: Where explicitly obtained for specific data uses (e.g., custom audience uploads).

To exercise any of these rights, you can contact us at privacy@thestarforest.com.

11. International Data Transfers

Your information, including personal information, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including personal information, to the United States and process it there.

For advertising platform data specifically:

    Data may be processed in the United States and other countries where our service providers operate.

    We implement appropriate safeguards for international transfers, including Standard Contractual Clauses.

    All transfers comply with applicable privacy laws including GDPR and CCPA.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will post any changes on this page and update the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.  

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

    General inquiries: info@thestarforest.com

    Privacy-related questions: info@thestarforest.com

    Data Protection Officer: info@thestarforest.com

    Address: Palo Alto, CA