CSCC document
Privacy Policy
This policy explains how CSCC handles account, integration, creative, performance, and operational data for the brands and strategists that use the platform.
Last updated: April 30, 2026
Who We Are
CSCC is the creative strategy command center for performance marketers. The service connects to commerce, marketing, lifecycle, review, survey, analytics, and creative systems so teams can manage briefs, measure performance, and turn learnings into the next creative decision.
Information We Collect
We collect account information such as name, email address, brand membership, and role. When a brand connects providers, we process provider account identifiers, configuration, OAuth state, access tokens, scopes, sync logs, and provider-reported data needed to operate the service.
- Commerce data such as stores, orders, products, customers, and customer journeys.
- Marketing data such as ad accounts, campaigns, creatives, insights, and conversion configuration.
- Creative strategy data such as findings, insights, concepts, briefs, taxonomy tags, and learning logs.
- Lifecycle and customer experience data such as email, subscription, review, and survey records.
- Operational data such as sync jobs, audit events, logs, errors, and connection health.
How We Use Information
We use information to authenticate users, enforce brand access, connect provider accounts, run sync jobs, resolve attribution, support the brief pipeline, surface operational health, and dispatch conversion events where configured by the brand.
Provider Connections
Connected providers may include Shopify, Meta, Google Ads, TikTok, AppLovin, Klaviyo, Slack, Recharge, Skio, Judge.me, Okendo, and KnoCommerce. The exact data processed depends on which providers a brand connects and which permissions are granted.
How We Share Information
We do not sell personal information. We share information only as needed to provide the service, operate infrastructure, comply with law, or send configured data back to connected providers on behalf of a brand.
Security
We use access controls, encrypted secrets, scoped provider credentials, and operational monitoring to protect customer and provider data. No system is perfectly secure, but we design the platform to limit access to authorized users and necessary service operations.
Data Retention
We retain information for as long as needed to provide the service, maintain auditability, comply with legal obligations, and support brand operations. Retention may vary by provider, data category, and contractual requirements.
Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict use of your personal information. Contact the CSCC operator responsible for your account to make a privacy request.
Changes
We may update this policy as the service changes. The latest version will be posted on this page with an updated date.
Contact
For privacy questions, contact the team that provisioned your CSCC access or your brand administrator.