Privacy Policy

How we collect, use, and protect your information.

Last updated: April 23, 2026

Introduction

Sum Digital ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, and share information when you interact with our website, services, or communications. As a digital advertising agency specializing in media buying services across various platforms including Meta, Google, TikTok, Snapchat, and others, we take data privacy seriously and maintain strict standards for data protection. Learn more about our paid media management services.

Information We Collect

Information You Provide

We may collect information you provide directly to us, including:

  • Contact information (name, email address, phone number, company name)
  • Business information (annual revenue, industry, business needs)
  • Account credentials for our services
  • Communications with us
  • Information you provide when applying for employment

Information Collected Automatically

When you visit our website or use our services, we may automatically collect:

  • Log information (IP address, browser type, pages visited, time spent)
  • Device information (hardware model, operating system)
  • Location information (derived from IP address)
  • Cookie data and similar technologies

Information From Third Parties

We may receive information about you from:

  • Business partners, such as advertising and analytics providers
  • Social media platforms when you interact with our content
  • Client referrals
  • Publicly available sources

How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our services
  • Communicate with you about our services, promotions, and events
  • Create and optimize digital advertising campaigns for our clients
  • Analyze usage patterns and improve our website and services
  • Comply with legal obligations and enforce our terms
  • Protect against fraudulent, unauthorized, or illegal activity

See examples of our work in our case studies.

Sharing Your Information

We may share information with:

  • Service providers who perform services on our behalf
  • Business partners for marketing and promotional purposes
  • Social media, advertising, and analytics partners
  • Legal authorities when required by law or to protect our rights
  • In connection with a business transaction (merger, acquisition, sale)

We do not sell your personal information to third parties.

Meta (Facebook and Instagram) Platform Data

When you connect your Meta account to our Matrixx Ads Manager platform via Facebook Login, we access and store data from Meta's APIs to operate the service on your behalf. Specifically:

  • Long-lived OAuth access tokens issued after you grant permission. Tokens are stored encrypted at rest and used solely to call Meta APIs on your behalf.
  • The permissions we request are ads_management (to upload creative assets and create ads in your ad account, always in PAUSED status for your review) and ads_read (to pull ad performance metrics such as spend, impressions, clicks, video views, and conversions into our analytics dashboard).
  • Campaign, ad set, ad, ad creative, and pixel identifiers from ad accounts you have granted us access to.
  • Aggregate performance metrics returned by the Meta Ads Insights API.

We do not use Meta data for any purpose other than operating the features you use inside the platform, and we do not sell or share Meta data with third parties. You can revoke our access at any time by disconnecting your Meta account from within Matrixx Ads Manager, or by removing the app from your Facebook account at facebook.com/settings?tab=business_tools. To request deletion of your associated data, see our Data Deletion Instructions.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. OAuth tokens and associated account data for Matrixx Ads Manager are retained until you disconnect your Meta account, revoke access, or request deletion, at which point they are removed within 30 days.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access to your personal information
  • Correction of inaccurate information
  • Deletion of your information
  • Restriction of processing
  • Data portability
  • Objection to processing

To exercise these rights, contact our team.

Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Remember your preferences
  • Understand how you use our website
  • Improve your experience
  • Personalize content and advertising

You can manage cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.

Data Security

We implement appropriate technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, and destruction. However, no internet transmission is completely secure, and we cannot guarantee the security of information transmitted to or from our website.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws.

Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically.

California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These include the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information, and the right to non-discrimination for exercising these rights.

GDPR Compliance

For users in the European Economic Area (EEA), we process personal data in accordance with the General Data Protection Regulation (GDPR). We process personal data on the following legal bases:

  • With your consent
  • To perform a contract with you
  • For our legitimate business interests
  • To comply with legal obligations

As a data controller, we are committed to protecting your rights under the GDPR.

Contact Us

Sum Digital

240 2nd Street, 2nd Floor, San Francisco, CA 94105

Email: hello@sumdigital.com

Phone: (415) 376-7391

Questions About Our Privacy Practices?

If you have concerns about how we handle your data or want to discuss your privacy rights, our team is here to help.

Contact Us

This Privacy Policy constitutes an agreement between you and Sum Digital. By using our website or services, you acknowledge that you have read and understand this Privacy Policy.