Privacy Policy

Escalio Studio, operated by JAF Global Enterprise LLC (5830 E 2nd St, Ste 7000 #21884, Casper WY 82609), understands the importance of your personal privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website at https://escaliostudio.com/, our Escalio Studio applications, and our digital marketing services (collectively, the “Services”).

By using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.

Last Updated: March 6, 2026

1. Information We Collect

We collect information in several ways:

Information You Provide Directly:

• Name and contact information (email, phone, address)
• Business information and marketing preferences
• Payment and billing information
• Communications with our team

Information from Meta Platforms (Facebook, Instagram, WhatsApp):
When you connect your Facebook Pages, Instagram Business accounts, or WhatsApp Business accounts to our Services, we collect:

• Page and account basic information (name, ID, profile details)
• Ad account identifiers and advertising campaign data
• Meta Pixel and Conversion API dataset identifiers
• Audience data and engagement metrics
• Lead form submissions and lead data
• Messages and customer interactions (WhatsApp Business)
• WhatsApp Business Account (WABA) identifiers and phone numbers

Information from Escalio Studio:
When you install our marketplace applications within Escalio Studio, we collect:

• Escalio Location ID and sub-account identifiers
• Contact names, phone numbers, and email addresses from your CRM
• Pipeline and stage data for conversion tracking
• OAuth access tokens (stored encrypted using AES-256-GCM)

Automatically Collected Information:

• IP address and device information
• Website and application usage data
• Cookies and similar tracking technologies
• API request logs (sanitized — no PII stored in logs)

2. Our Escalio Studio Marketplace Applications

Escalio Studio operates three applications available on the Escalio Studio platform. Each application processes specific categories of data:

Pro Ads Manager

Pro Ads Manager connects your Meta Business account to your Escalio sub-account to manage advertising campaigns, pixels, and conversion tracking.

Data processed:

• Meta ad account identifiers and campaign data
• Meta Pixel IDs and Conversion API (CAPI) dataset identifiers
• Escalio pipeline and stage data (used for CAPI event mapping)
• Lead form data (names, email addresses, phone numbers from Meta Lead Ads)
• Custom audience configurations (no individual customer PII is sent to Meta — only encrypted hashed values)
• Dynamic Creative Test configurations and results

Data storage: Meta access tokens are stored encrypted (AES-256-GCM) in our database. Encryption keys are never stored alongside token data. Raw unencrypted tokens are never written to logs or backups.

WABA Connect

WABA Connect enables WhatsApp Business API integration for your Escalio sub-account.

Data processed:

• WhatsApp Business Account (WABA) identifiers
• Business phone numbers registered with WhatsApp Business API
• WhatsApp message templates and flow configurations
• Messenger subscriber identifiers (for delivery status updates)
• Installation metadata (Escalio location ID, company name, email)

Data storage: System access tokens are stored using AES-256-GCM encryption. WhatsApp message content is not stored by Escalio — messages are processed in transit only.

LogiSync

LogiSync is a logistics dispatch management application for delivery and courier businesses.

Data processed:

• Driver information: name, phone number, email address, vehicle type, license plate
• Dispatch job data: customer names, phone numbers, pickup and delivery addresses
• Load catalog entries (item types, dimensions, weights)
• Delivery status updates and completion records

Data storage: Driver and customer data is stored per Escalio location (sub-account) and is never shared across accounts. Real-time GPS location data, if collected, is processed in transit and not persisted.

3. How We Use Your Information

We use collected information to:

• Provide and operate our Services and marketplace applications
• Authenticate and authorize access to connected platform accounts
• Sync data between Escalio Studio and Meta platforms as directed by you
• Send conversion events to Meta Conversion API on your behalf
• Manage WhatsApp Business communications you authorize
• Process dispatch jobs and driver assignments (LogiSync)
• Analyze performance and provide reporting within our applications
• Respond to support inquiries
• Comply with legal obligations
• Maintain security audit logs of data access and deletion events

We do not:

• Sell your personal information or Meta platform data to third parties
• Use your data to train AI or machine learning models
• Share your Escalio location data with other Escalio customers
• Access your accounts beyond what is necessary to provide the Services

4. Data Sharing and Third Parties

We share data only in the following circumstances:

• Meta Platforms: We transmit conversion events and audience data to Meta on your behalf as directed by your CAPI and Pro Ads Manager configurations
• Escalio Studio: We read and write data to your Escalio account via authorized API access
• Infrastructure providers: Railway (hosting), Supabase/PostgreSQL (database) — bound by data processing agreements
• Legal requirements: When required by law, court order, or governmental authority

5. Data Security

We implement the following security measures:

• AES-256-GCM encryption for all OAuth tokens and access credentials stored at rest
• HMAC-SHA256 signature verification for all incoming webhooks
• TLS/HTTPS encryption for all data in transit
• Tenant isolation: each Escalio sub-account’s data is strictly separated by Location ID
• Session-based authentication with secure, HttpOnly cookies
• Audit logging of all data export and deletion events
• No PII written to application logs

6. Your GDPR and Privacy Rights

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with applicable privacy laws, you have the following rights:

• Right of Access: Request a copy of all personal data we hold for your account
• Right to Portability: Export your data in machine-readable JSON format via our data export API
• Right to Erasure (“Right to be Forgotten”): Request deletion of all your data from our systems
• Right to Rectification: Request correction of inaccurate personal data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Object: Object to processing of your data for specific purposes

How to exercise your rights:

For Escalio Studio platform app data, you may use the self-service data tools available within each application:

• Data export: GET /api/data/export (available within each installed app)
• Data deletion: DELETE /api/data/delete (requires confirmation — irreversible)

For all other requests, contact us at: [email protected]

We will respond to verifiable requests within 30 days.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide Services:

• Active accounts: Data retained for the duration of the service relationship
• Uninstalled apps: Location data retained for 90 days after app uninstallation, then automatically deleted
• Audit logs: Retained for 2 years for compliance purposes
• API access logs: Retained for 30 days (sanitized — no PII)

8. Cookies

We use cookies and similar technologies for:

• Session authentication (required — cannot be disabled)
• Application state management
• Security (CSRF protection)

We do not use advertising cookies or third-party tracking cookies on our application pages.

9. Children’s Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, contact us immediately at [email protected].

10. International Data Transfers

Escalio Studio is operated from the United States. If you access our Services from outside the US, your data may be transferred to and processed in the United States. We implement appropriate safeguards for international transfers in compliance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting a notice on our website or sending an email to your registered address. The “Last Updated” date at the top of this page indicates when changes were last made. Continued use of our Services after changes constitutes acceptance of the updated policy.

12. Facebook Login for Business & Meta Platform Policy

Escalio Studio’s marketplace applications use Facebook Login for Business to obtain authorized access to Meta Business assets on behalf of our clients. Our use of Meta platform data is governed by the Meta Platform Terms and Meta Developer Policies.

Escalio Studio and its applications:

• Only request Meta platform data necessary to provide the services you’ve authorized
• Do not use Meta platform data to target advertising without your explicit direction
• Do not sell, license, or transfer Meta platform data to third parties
• Do not use Meta platform data to build user profiles for purposes unrelated to the services
• Provide self-service data deletion via each application’s built-in data tools
• Automatically delete all Meta platform data upon app uninstallation
• Comply with Meta Platform Terms and Developer Policies in full

This policy applies to data accessed through: WABA Connect, Pro Ads Manager, and LogiSync.

Single Privacy Policy Across All Escalio Applications

This Privacy Policy applies uniformly to all Escalio Studio applications and services, including those accessible at waba.escaliostudio.com, ads.escaliostudio.com, and logi.escaliostudio.com. Users of any Escalio application are subject to, and protected by, this single policy. Each application may process different categories of data (described in Section 2), but all share the same data protection principles, security measures, and user rights described here.

13. Contact Us

For privacy-related questions, data requests, or to exercise your rights:

Email: [email protected]
Mail: JAF Global Enterprise LLC, 5830 E 2nd St, Ste 7000 #21884, Casper WY 82609
Website: https://escaliostudio.com