LEGAL · PRIVACY
Privacy Policy
Last updated September 7, 2026
This policy explains what personal data cammi collects, how we use it, and who we share it with. It draws a line between your account data — where cammi is the controller — and the contact data you upload, where you are the controller and cammi only acts on your instructions.
- Two roles
For your account data cammi is the controller. For contacts you upload, you are the controller and cammi is your processor.
- What we access
Account and company details, the content you create, contact lists, usage data, and data from the third-party accounts you choose to connect.
- Your controls
Disconnect any integration, delete uploaded documents or your whole account, and exercise access, correction, export and deletion rights.
Who we are
cammi ("cammi," "we," "us," "our") is a marketing operations platform. This Privacy Policy explains what personal data we collect from you ("Customer," "you"), how we use it, who we share it with, and the choices you have.
This Policy covers two kinds of people, and treats them differently:
- Customers — you, if you sign up for cammi. We are the data controller for your account data.
- Your contacts — the people whose names and email addresses you upload or connect through cammi's email-marketing, CRM, and audience features. For that data, you are the data controller and we act as your data processor: we hold and send that data on your instructions, we don't decide what it's used for.
Information we collect
2.1 Information you give us directly
- Account information: name, email address, password (hashed — we never see or store your plaintext password).
- Company and project information: your company name, website URL, business description, and any documents you upload when you set up a project.
- Content you create: prompts and messages you send our AI assistant, generated documents, blog posts, one-pagers, landing pages, social posts, and email campaigns.
- Contact lists and audiences: names, email addresses, and any custom fields you upload or sync into cammi's email-marketing feature for the purpose of sending campaigns.
- Credit and billing information: your credit balance and transaction history. If we integrate a third-party payment processor, we will name it here and link to its privacy policy.
2.2 Information we collect automatically
- Usage data: pages and features accessed, timestamps, job status, chat history, error logs.
- Device and connection data: IP address, browser type, and general log data captured by our infrastructure.
2.3 Information from connected third-party accounts
When you connect a third-party account, we receive an access token and pull data through that provider's API on your behalf. We do not receive your password for any connected service. Depending on which platforms you connect, this may include:
| You connect | We can access |
|---|---|
| Google (sign-in) | Your name, email address, and profile picture |
| Google Workspace | Files and folders in your connected Google Drive |
| Google Analytics 4 | Your GA4 property configuration and analytics reports |
| YouTube | Your channel's videos, statistics, and analytics |
| HubSpot | Contacts, companies, deals, and orders in your connected HubSpot CRM |
| WordPress | Your self-hosted site's posts, via an application password you create |
| Fathom | Your recorded meetings and their transcripts and summaries |
| Facebook and Instagram | Pages, posts, and the basic account and page insights you authorize |
| Meta Ads | Ad accounts, campaigns, ad sets, ads, and their performance data |
| Your organization's pages and posting permissions | |
| Your email service provider | Your sending-domain configuration, and campaign delivery and engagement data (opens, clicks, bounces, complaints) |
You control which of these you connect, and you can disconnect any of them at any time from within cammi, which revokes our access to that provider going forward.
2.4 Email tracking (for campaigns you send)
When you send an email campaign through cammi, we track opens (via a tracking pixel) and clicks (via link redirection) on behalf of your sending account, and report that engagement data back to you.
If you are the recipient of a campaign sent through cammi by one of our customers, that customer — not cammi — controls that data. Contact them, or see Section 9, to exercise your rights.
How we use your information
We use the information we collect to:
- Provide, operate, and maintain cammi — creating your account, saving your projects, running your chat sessions, and tracking asynchronous jobs.
- Generate AI-assisted content on your behalf, including analysis of your website, business, and uploaded documents.
- Send campaign emails, publish social posts, and sync data through the third-party accounts you connect, strictly as you direct.
- Calculate and deduct credits for metered features.
- Detect, prevent, and respond to fraud, abuse, and security incidents.
- Communicate with you about your account, and — with your consent where required — about product updates.
- Comply with legal obligations.
We do not sell your personal data.
AI-assisted processing
Certain cammi features — including document generation, the chat assistant, image generation, and content drafting — are powered by third-party AI service providers. When you use these features, the relevant prompts, project facts, and uploaded content are sent to those providers solely to generate the output you requested.
These providers act as our sub-processors and are contractually and technically limited to processing your data to return a result to cammi. We do not permit them to use your data to train their models beyond what their standard service terms provide.
Data retention
We retain account and project data for as long as your account is active, plus a reasonable period afterward for backups, legal, and fraud-prevention purposes. You can request deletion of your account and associated data at any time (see Section 9).
Contact and audience data you upload is retained until you delete it or close your account, whichever comes first. Chat and job history is retained to power features like session resume and job-status tracking, and is deleted with your account.
Data security
We use industry-standard safeguards, including encryption in transit and at rest, least-privilege access controls, and secure credential management for API access — no third-party API key or connected-account credential is ever stored in plaintext.
No system is 100% secure, and we cannot guarantee absolute security.
International data transfers
If you access cammi from outside the region where our infrastructure operates, your information will be transferred to, stored, and processed there. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent. To exercise any of these rights, contact us at privacy@cammi.com.
If you are a recipient of a campaign sent by a cammi customer, please direct your request to that customer first — we will assist them in fulfilling it.
You can disconnect any third-party account, delete uploaded documents, or delete your project and company setup at any time from within the product.
Children's privacy
cammi is not directed to, and we do not knowingly collect personal data from, anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice such as an email or in-app message.
Contact us
For privacy questions or requests, contact cammi at privacy@cammi.com.