Privacy policy

Version 2026-10-26 · Operator: Capital Market Laboratories, LLC, a California limited liability company.

1. Scope and contact

This policy describes how Capital Market Laboratories, LLC (“we,” “us”) handles information through AdOrchestrator. It accompanies our Terms of Service. Business customers must also provide any privacy notices and permissions required for their advertising activities.

2. Information we collect

Account information includes your name, email address, email verification status, account creation and trial dates, and records of the terms and privacy-policy versions acknowledged. Authentication involves short-lived verification challenges and session credentials. We do not ask for a payment card to start a trial.

When Facebook connections are enabled for your workspace, we process the account, campaign, ad set and ad information you authorize Meta to provide, which may include names, creative content, budgets, spend, delivery and performance metrics. Credentials used to access Meta are handled on the server. We also process saved settings, alert rules and support communications you provide. Depending on hosting configuration, technical records may include IP address, browser information, timestamps, errors and security events.

3. How we use information

We use information to verify and secure accounts, provide campaign reporting and requested features, operate trials, communicate about the service, resolve support requests, prevent abuse and comply with legal obligations. Verification emails are transactional messages, not consent to marketing. We do not promise ad results, and reporting may be delayed or incomplete.

4. Sharing and service providers

We share information as needed with hosting, email delivery and other service providers that help operate the service, with Meta when you authorize a connection, and with advisers or authorities when legally necessary. We may disclose information to protect safety, investigate abuse, enforce agreements or complete a business transfer subject to applicable law. We do not sell personal information or share it for cross-context behavioral advertising through this service.

5. Cookies and browser storage

Essential HttpOnly cookies maintain verification attempts and authenticated sessions. Browser storage may remember interface preferences, selected demo data or account navigation. We do not place email verification codes or session credentials in browser storage. Blocking essential cookies prevents sign-in. This policy does not authorize optional advertising or analytics tracking; additional disclosures and consent will be provided if required before introducing those tools.

6. Retention and deletion

Verification challenges expire after 10 minutes; failed or expired challenges are periodically removed. Sessions expire after seven days or are revoked on logout. Account and consent records are retained while needed to provide the account, prevent repeat-trial abuse, meet legal obligations and establish or defend claims. Ask us to close your account and delete information; we will explain any lawful retention exceptions. Backups and security records may persist for a limited operational period. Contact us for information about retention that applies to a specific request.

7. Security and incidents

We use measures intended to protect information, including restricted server-side credentials, expiring verification challenges and authenticated sessions. No service can guarantee absolute security. If an incident triggers notification duties, we will provide notices and take other actions required by applicable law. Nothing in this policy waives statutory privacy, security or breach remedies.

8. Your choices and rights

You may request access, correction, deletion or a copy of your personal information and ask questions about its use. Depending on your location and whether the relevant law applies, you may have additional rights, including restrictions on processing, appeal rights or the right to complain to a regulator. We may reasonably verify your identity or an authorized agent’s authority. We will not unlawfully discriminate against you for exercising privacy rights. We honor legally required opt-out preference signals where applicable.

Disconnecting an integration or revoking access in Meta stops future authorized access; it does not automatically delete information already retained here. Contact us to request deletion. Do not send passwords, access tokens or verification codes in a privacy request.

9. International use, age and updates

The service is intended for adults using it for business purposes. It is not directed to children under 18. Information may be processed in the United States and where our authorized providers operate, subject to applicable legal safeguards. We will update this policy as practices change and provide any legally required notice or consent request.

Contact Capital Market Laboratories, LLC

support@adorchestrator.com
2223 Roosevelt Ave Apt. B, Berkeley, CA 94703

Document version: 2026-10-26. Save or print a copy for your records.