Privacy policy

Who we are

Broussard Media (“BMEDIA”, “we”) is a marketing agency. We run advertising and build websites for businesses (our “clients”) and operate the software at broussard.media that our team and our clients use to do that work.

What we collect

From clients: contact details (name, email, phone), business details, the agreement and payment status for our services, and the files and brand materials they share with us.

From connected accounts: when a client connects an account (for example Meta, Google, TikTok, Shopify, Square, Stripe or Klaviyo), we receive an access token for that account and read the data the client approved, such as ad campaign performance, products, and sales totals. Access tokens are stored encrypted.

Sales for ad measurement: when a client's store reports a completed sale, we send that purchase to the client's own Meta pixel so their ads are measured. The buyer's email, phone and customer id are hashed (SHA-256) before they leave our systems; we keep the sale's id, amount, currency and time, not the buyer's contact details.

Website tag: if a client adds our tracking tag to their site, it loads the client's own Meta pixel and records page views, product views, add-to-cart and checkout visits for that client. We store only when and on which page the tag was last seen, to confirm it is installed.

Messages: texts and emails between our team and a client are kept so the conversation stays in one place.

How we use it

To deliver the services a client hired us for: running and reporting on their ads, building their site, and communicating with them.

We don't sell data, and we don't use one client's data for another client.

Who we share it with

Only the platforms a client connects (to act on their behalf) and the service providers that run our software: hosting and database (Vercel, Neon), payments (Stripe), texting (Sendblue or Twilio) and email. Each only receives what it needs to do its job.

Shopify stores

When a Shopify store connects, we store the store's address and an access token. We don't copy the store's customer records. If a store uninstalls our app, we delete its token and connection; Shopify's customer data and deletion requests are recorded and answered, and there is no stored customer record to return or erase.

Keeping and deleting data

Disconnecting an account deletes its access token. Clients can also remove our access from the platform itself (for example in Meta Business settings or by uninstalling our app).

To see, correct or delete data we hold about you, email hello@broussard.media. We respond within 30 days.

Security

Connections use HTTPS, access tokens are encrypted at rest, and every incoming webhook from a connected platform is verified before we act on it.

Changes

If this policy changes, we'll update the date below and, for material changes, tell our clients directly.