Last updated: April 27, 2026
This Privacy Policy explains how Camorna collects, uses, shares, and protects information when you use our agentic AI advertising platform, lead tracking, CRM lead management, and omnichannel customer workflow tools. Camorna is built for businesses and agencies that use AI to plan advertising work, manage first-party lead data, sync CRM context, and coordinate customer follow-up across channels. We process information to provide those services, keep accounts secure, and help users understand what campaigns and workflows are moving customers forward. We do not use customer lead data to sell unrelated advertising lists.
2.1 Account information Name, business name, email address, phone number, country or region, hashed password, and information used for login, authentication, and security verification (including two-factor codes and device fingerprints used to detect anomalous sign-ins). 2.2 Business and profile information Business category, service area, contact preferences, brand name, logo, business profile, services, campaign preferences, team members, roles, and workspace settings. 2.3 Lead and customer workflow information Lead names, phone numbers, email addresses, messages, form submissions, source labels, CRM status, campaign source, keyword, website context, follow-up notes, and customer communications across SMS, WhatsApp, email, web forms, and connected CRM tools. All PIIs are encrypted at rest, and we do not access that information except as needed by the account holder to use the Service. 2.4 Advertising and integration data Ad-account metadata; campaign, audience, creative, performance, conversion, and tracking data; CRM, analytics, messaging, and automation data you connect to Camorna. OAuth 2.0 tokens are encrypted at rest using AES-GCM, requested with the narrowest OAuth scopes we need for each integration, and access tokens are refreshed automatically so they stay valid for API calls and are not kept longer than needed. We revoke connections and require re-authorization when we detect unauthorized access or a security issue, and you may disconnect at any time in Camorna. Connections use standard OAuth with Google and Meta. You approve access on their site. We store only the tokens required to keep your integrations working, encrypted at rest in our systems. Google or Meta may revoke access at any time, and you may disconnect in Camorna. Short-lived access tokens may be held in memory or a short-lived cache only while we communicate with their APIs. 2.5 Usage and device information We may collect technical and usage data such as IP address (for security, fraud prevention, and, where applicable, coarse region signals, not for resale), browser and device type, operating system, pages viewed, referring URLs, session identifiers and activity, application logs, and security-related events. 2.6 AI workflow information Prompts, instructions, drafts, generated outputs, recommendations, workflow actions, approvals, edits, and the business, lead, campaign, or integration data used as context for supervised AI features. See Section 5 for how this information is and is not used. 2.7 Payment information Payment details are processed by Stripe, Inc. Camorna does not store full payment card numbers and receives only a tokenized reference and limited metadata (last four digits, brand, expiration). 2.8 Sensitive personal information Camorna does not solicit special categories of personal data (e.g., racial or ethnic origin, health, biometric, religious affiliation, sexual orientation) or government identifiers. If such information appears in lead or message content you upload, you remain responsible for the lawful basis to process it.
We use information to create and manage accounts, authenticate users, provide two-factor verification, protect accounts, operate Camorna's agentic AI ad workflows, track first-party leads, manage CRM lead context, coordinate customer follow-up, and display connected data in one workspace. We also use information to draft, recommend, route, summarize, and optimize advertising and customer workflow actions under user supervision; provide support and onboarding; send service, billing, and security notices; detect abuse; troubleshoot issues; improve reliability; analyze product usage; enforce our terms; and comply with legal obligations.
Camorna is designed to logically isolate each customer's workspace data, including lead records, messages, prompts, and AI outputs. We use tenant and account access controls intended to prevent one customer's data from being surfaced inside another customer's workspace, prompts, or AI outputs. When we use aggregated metrics internally, we design those metrics to avoid re-identification of individual customers, leads, or end users.
5.1 Supervised AI features Camorna may use AI or automated recommendations to draft campaign structures, ad copy, audience suggestions, workflow suggestions, summaries, and analytics recommendations. AI or automated outputs are presented for user review; the user remains responsible for approving and acting on them. 5.2 Model training Camorna does not use identifiable customer content to train general-purpose AI models unless we separately disclose that use or obtain any consent required by law. If we use de-identified or aggregated content to improve our services, we design that process to avoid identifying individual customers, leads, or end users. 5.3 Third-party model providers Camorna may route some AI requests to third-party model providers when those features are enabled. We require model providers to process customer content only to provide the requested service and not to train on identifiable customer content, except where separately disclosed or authorized. 5.4 Automated decisions Some Camorna features, such as campaign draft generation, automation rules, audience previews, and optimization suggestions, may involve automated processing. These features are intended to support business users and do not produce legal or similarly significant effects on individual end users without meaningful human review by the customer using the Services. Where such decisions would have such effects, end users may request human review, express their point of view, and contest the decision by contacting the customer that controls the workspace, or Camorna at privacy@camorna.com. 5.5 Output limitations AI outputs may be incomplete or inaccurate. You are responsible for verifying outputs before use, including against your business rules, applicable advertising-platform policies, and applicable law.
Service providers: We share information with vendors that help us host infrastructure, send messages, process payments, provide analytics, support users, secure the service, operate integrations, and run AI model inference (including transmitting feature-related inputs to model providers as described in Section 5). Authorized integration partners: When you connect tools such as ad platforms, CRM systems, messaging providers, analytics tools, or automation platforms, we exchange data with those services as directed by you. Legal, safety, and business transfer recipients: We may disclose information when required by law, to protect rights and safety, to prevent fraud or abuse, or as part of a merger, financing, acquisition, or sale of assets. We do not sell personal information in the traditional sense. If future practices are considered a sale or sharing under applicable privacy laws, we will provide required notices and opt-out choices.
Camorna uses cookies, pixels, local storage, and similar technologies in the following categories: - Strictly necessary - sign-in, session integrity, security. - Functional - preferences, language. - Analytics - product usage, performance. - First-party attribution - linking Camorna-originated leads to the campaigns that produced them. Where required, including in the EEA, UK, and Switzerland, non-essential analytics storage and event collection load only after consent through our cookie banner. You can change preferences at any time via the "Cookie preferences" link in our footer. Analytics technologies may also be disabled in environments where product analytics is not configured. We do not use third-party advertising cookies that build cross-site profiles.
When you upload, sync, or collect lead and customer information through Camorna, you are responsible for having the rights, notices, consents, and legal basis needed to use that information. Camorna processes this data to provide the services you request.
You are responsible for complying with SMS, WhatsApp, email, telemarketing, and other communications laws that apply to your campaigns and follow-up workflows. This includes honoring opt-out requests, using STOP instructions where applicable, and avoiding unlawful unsolicited messages.
We use safeguards designed to protect information, including encrypted transport, access controls, credential protection, logging, monitoring, and least-privilege operational access. No internet system is completely secure, so we cannot guarantee absolute security.
Camorna supports password authentication, phone or email verification, two-factor authentication, OTP checks, and security review flows. If you lose access to a phone, email account, or authentication method, contact support. We may require additional verification before restoring account access.
We retain information for as long as needed to provide the service, maintain accounts, operate the product, meet legal, tax, audit, and dispute obligations, enforce our terms, and preserve security logs. When information is no longer needed, we delete it or anonymize it according to our retention practices.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; opt out of certain sharing, targeted advertising, or marketing communications; withdraw consent where processing is based on consent; and appeal a privacy request decision. To make a privacy request, email privacy@camorna.com. We may need to verify your identity before fulfilling a request.
California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain sensitive personal information uses, and be free from discrimination for exercising privacy rights. We may collect identifiers, commercial information, internet or network activity, approximate location, professional or business information, and inferences related to product usage. To exercise rights, contact privacy@camorna.com.
Camorna may process information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
Camorna is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
Your use of connected ad platforms, CRM systems, messaging providers, analytics tools, payment processors, and other third-party services is governed by those services' own terms and privacy policies.
We may update this policy from time to time. When we make material changes, we will update the date above and provide notice where required by law or appropriate for the change.
Camorna Privacy requests: privacy@camorna.com Support: support@camorna.com