Privacy Policy

Last updated: March 7, 2026

This Privacy Policy describes how Conversions Pilot ("we", "us", or "our") collects, uses, and protects information when you use our conversion data infrastructure service (the "Service"). Our Service is a business-to-business (B2B) platform designed for marketing agencies and advertisers.

1. Who We Are

Conversions Pilot is a SaaS platform that receives webhook events from CRM systems and call tracking tools, normalizes and hashes personally identifiable information (PII), and forwards offline and enhanced conversion signals to advertising platforms such as Meta and Google Ads on behalf of our customers (advertisers and agencies).

2. Information We Process

Through our Service, we may process the following types of data on behalf of our customers:

Contact information: email addresses, phone numbers, names
Lead and conversion event data (e.g. form submissions, calls, purchases)
IP addresses and user agent strings
Advertising click identifiers (e.g. Facebook click ID, Google click ID)

All PII is hashed using the SHA-256 cryptographic algorithm immediately upon receipt of the webhook event, before any storage or transmission. We never store raw (unhashed) PII at any point in our system.

3. How We Use the Information

We use the data processed through the Service solely to:

Deliver offline conversion and enhanced conversion signals to advertising platforms at the direction of our customers
Retry failed delivery attempts
Log platform responses for troubleshooting and audit purposes
Maintain the reliability and security of the Service

We do not use conversion data for our own advertising, profiling, or any purpose beyond providing the Service.

4. Data Sharing

We share processed conversion data only with the advertising platforms specified by our customers, including:

Meta (Facebook) — via the Conversions API
Google Ads — via the Offline Conversions API

We do not sell, rent, or share data with any third parties for their own marketing or commercial purposes. Data is transmitted only as directed by the customer and only to the platforms the customer has authorized.

5. Data Retention

Event logs and delivery records are retained for up to 90 days for troubleshooting purposes, after which they are deleted. Hashed identifiers may be retained in logs but cannot be reverse-engineered to identify individuals.

6. Data Security

We implement industry-standard security measures including:

SHA-256 hashing of all PII prior to transmission
HTTPS/TLS encryption for all data in transit
API key authentication for all webhook endpoints
Access controls limiting data access to authorized personnel only

7. Your Rights (GDPR)

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, or request deletion of your personal data. As a data processor, we act on the instructions of our customers (the data controllers). Requests regarding personal data should be directed to the advertiser or agency whose forms or systems collected your information.

For requests related to data we hold, you may contact us at the address below.

8. User Data Deletion

To request deletion of your data processed through our Service, please contact us at demetris@digitela.com. We will process deletion requests within 30 days.

9. Cookies

Our primary Service operates via API and webhook integrations and does not use cookies. Our marketing website may use essential cookies for functionality. No third-party tracking or advertising cookies are used on our website.

10. Children's Privacy

Our Service is intended for business use only and is not directed at individuals under the age of 18. We do not knowingly process data of minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify customers of material changes by email or by posting a notice in the Service. The date at the top of this page reflects the most recent revision.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at demetris@digitela.com.