Privacy Policy for The Startop

Last Updated: July 24, 2025

The Startop ("we," "us," or "our"), located at startop.mx, is committed to protecting the privacy of our clients and their end-users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when we provide advertising management services using the Meta Marketing API ("Marketing API"). This policy complies with Meta's Platform Terms, Meta Advertising Standards, and applicable data protection laws, including Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

By engaging our services or interacting with our website, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

1. Information We Collect

We collect and process information in the following ways to provide our advertising management services:

a. Information Provided by Clients

When you, as a client (e.g., a business using our ad management services), engage with The Startop, we may collect:

• Business Information: Company name, contact details (e.g., name, email address, phone number), billing information, and Meta Business Manager account details.
• Ad Account Information: Access to your Meta ad accounts, campaigns, ad sets, and ads via the Marketing API, as authorized by you.
• Campaign Preferences: Goals, target audiences, budgets, and other specifications you provide for managing your advertising campaigns.

b. Information Collected via the Marketing API

When managing ads on your behalf, we access and process data through the Meta Marketing API, including:

• Ad Performance Data: Metrics such as impressions, clicks, conversions, spend, and reach for your campaigns.
• Audience Data: Aggregated and anonymized demographic information (e.g., age, gender, location) about users who interact with your ads, as provided by Meta.
• Event Data: Information about actions taken by users (e.g., website visits, purchases) tracked via Meta Pixels or other tracking tools you have implemented.

c. Information Collected from Our Website

When you visit startop.mx, we may collect:

• Usage Data: IP address, browser type, device information, pages visited, and time spent on our website, collected via cookies or similar technologies.
• Contact Form Data: Name, email, and any information you provide when submitting inquiries or requesting services.

d. Information from End-Users

We do not directly collect personal data from end-users (individuals who see or interact with ads we manage). However, we process anonymized or aggregated data provided by Meta about end-user interactions with our clients' ads, as described above.

2. How We Use Your Information

We use the collected information to:

• Provide Advertising Services: Manage, optimize, and report on Meta ad campaigns for our clients using the Marketing API.
• Analyze Performance: Generate insights and analytics about ad performance to help clients improve their campaigns.
• Communicate with Clients: Respond to inquiries, provide support, and send service-related communications (e.g., billing or campaign updates).
• Improve Our Services: Analyze website usage and client feedback to enhance our platform and services.
• Comply with Legal Obligations: Meet requirements under applicable laws, Meta Platform Terms, and Meta Advertising Standards.

We do not use personal data accessed via the Marketing API for purposes other than those authorized by our clients or as required by Meta's terms. For example, we do not sell, share, or use ad data to create independent user profiles or for purposes unrelated to your campaigns.

3. How We Share Your Information

We may share information as follows:

• With Meta: We share data with Meta as required to access the Marketing API and deliver ad management services. This includes sharing ad account data and performance metrics with Meta’s systems.
• Service Providers: We may engage third-party service providers (e.g., hosting, analytics, or payment processors) to support our operations. These providers are bound by strict confidentiality and data protection agreements.
• Business Partners: If you authorize us to manage ads for another business (e.g., via Meta Business Manager), we may share campaign data with that business as part of our services.
• Legal Compliance: We may disclose information to comply with legal obligations, respond to government requests, or protect our rights, property, or safety.

We do not sell or rent personal data to third parties for their own marketing purposes.

4. Data Storage and Security

We store data securely using industry-standard measures, including encryption, access controls, and secure servers. Data accessed via the Marketing API is stored only for as long as necessary to provide our services or as required by law.

• Client Data: Stored securely and accessible only to authorized personnel.
• Marketing API Data: Handled in accordance with Meta’s data retention policies and deleted or anonymized when no longer needed for your campaigns.
• Website Data: Stored on secure servers and protected against unauthorized access.

Despite our efforts, no system is completely secure. If we detect a data breach, we will notify affected clients and authorities as required by law (e.g., within 72 hours under GDPR).

5. Your Rights and Choices

a. Clients’ Rights

Under applicable laws (e.g., LFPDPPP, GDPR, CCPA), you may have the right to:

• Access: Request a copy of the personal data we hold about you or your ad campaigns.
• Correction: Request corrections to inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal or contractual obligations.
• Restriction: Restrict how we process your data in certain cases.
• Data Portability: Receive your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications or certain data processing activities.

To exercise these rights, contact us at privacy@startop.mx. We will respond within the timeframes required by law (e.g., 20 business days under LFPDPPP, 30 days under CCPA).

b. End-Users’ Rights

If you are an end-user who interacted with ads we manage, your data is controlled by our client (the ad account owner) and Meta. To exercise your rights (e.g., access or deletion), contact the client directly or use Meta’s privacy tools (e.g., Data Subject Rights Portal).

c. Cookies and Tracking

Our website uses cookies to enhance user experience and analyze traffic. You can manage cookie preferences via your browser settings or our website’s cookie consent tool. For ads managed via the Marketing API, tracking (e.g., via Meta Pixel) is controlled by our clients and Meta. Review their privacy policies for opt-out options.

6. International Data Transfers

The Startop is based in Mexico, but we may process data in other countries (e.g., where Meta or our service providers operate). We ensure international transfers comply with applicable laws, using mechanisms like Standard Contractual Clauses (SCCs) for GDPR compliance or equivalent safeguards under LFPDPPP.

7. Data Retention

• Client Data: Retained for the duration of our business relationship or as required by law (e.g., tax or accounting purposes).
• Marketing API Data: Retained only as long as necessary to provide services or as permitted by Meta’s policies, typically aligned with campaign lifecycles.
• Website Data: Usage data is retained for up to 12 months unless you request deletion.

8. Third-Party Links

Our website or services may link to third-party sites (e.g., Meta’s Business Manager). We are not responsible for their privacy practices. Please review their policies before providing personal information.

9. Compliance with Meta’s Terms

As a Meta Marketing API user, we adhere to:

• Meta Platform Terms: Governing our use of the Marketing API and data access.
• Meta Advertising Standards: Ensuring ads comply with Meta’s policies on content and targeting.
• Data Use Restrictions: We only use Marketing API data for purposes authorized by our clients and do not share it with unauthorized parties.

10. Children’s Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If we learn we have collected such data, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify clients of material changes via email or a notice on startop.mx. The updated policy will take effect upon posting, with the “Last Updated” date revised.

12. Contact Us

For questions, concerns, or to exercise your rights, contact our Data Protection Officer:

The Startop
Email: privacy@startop.mx
Website: startop.mx
Address: Av. José Vasconcelos 1657 Oriente, Colonia Mirasierra, 66240 San Pedro Garza García, N.L.

For complaints under LFPDPPP, you may also contact Mexico’s National Institute for Transparency, Access to Information and Personal Data Protection (INAI). Under GDPR, you may contact your local data protection authority.

‍