Who we are
Tipoff is operated by Matthew Stone (“we”, “us”). This policy covers the Tipoff website and app. Questions: grownscalestudio@gmail.com.
What we collect
- Your account details: email, business name, industry, service area, ad budget, average job value, and the mobile number you want leads sent to.
- Facebook connection: when you connect Facebook, we receive an access token and the IDs and names of the ad account and Page you choose. We never receive your Facebook password.
- Leads: information people submit through your lead ad forms (typically name, phone, email and answers to your form questions), and caller phone numbers for calls to your tracking number.
- Ad results: spend, lead counts and similar performance data from your ad account.
- Billing: handled by Stripe. We store your Stripe customer and subscription IDs and plan status, never your full card number.
- Usage and logs: basic server logs (IP address, browser, pages requested) for security and debugging.
How we use it
- To create, run, and adjust ads in your own ad account, with your approval where required.
- To text you new leads and missed calls, and to send your weekly results report.
- For a missed call to your tracking number, to send that caller a single text letting them know you'll call back.
- To bill you, provide support, keep the service secure, and meet legal obligations.
When we use AI to draft ad copy or summarize your results, the relevant business details are sent to our AI provider for that purpose only. Lead contact details are not used to train AI models.
Who we share it with
We do not sell personal information. We share data only with service providers who help us run the product:
- Meta Platforms (to run your ads and retrieve your leads)
- Twilio (to send and receive texts and calls)
- Stripe (payments)
- Supabase (database and authentication hosting)
- Vercel (application hosting)
- OpenAI (drafting ad copy and report summaries)
- An email delivery provider (weekly reports)
We may also disclose information if required by law.
Text messages
Mobile numbers and SMS consent are never shared with third parties or affiliates for their marketing purposes. See our SMS terms for how texts work and how to opt out.
Facebook data
We use data from Meta only to provide the features you asked for: running your ads, delivering your leads, and reporting results. Access tokens are stored encrypted on our servers and are never sent to your browser. You can disconnect at any time from Settings, or remove our app in your Facebook settings. To delete your data, see data deletion.
How long we keep it
We keep account data while your account is open. Leads and ad results are kept so you can see your history. When you delete your account, we delete your data within 30 days, except where we must keep limited records (for example, billing records) by law.
Security
Data is encrypted in transit. Access tokens are encrypted at rest. Each business can only see its own data, enforced at the database level.
Your choices and rights
You can view and edit your details in the app, disconnect Facebook, and request a copy or deletion of your data by emailing grownscalestudio@gmail.com. Depending on where you live you may have additional rights; we will honor them as required.
Changes
We'll update the date at the top of this page when this policy changes, and tell you in the app about significant changes.