Privacy Policy

This Privacy Policy describes how SROS (“SROS,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the SROS software platform, related websites (including getsros.com), and connected services (collectively, the “Service”).

SROS is a software platform that helps agencies and contractors research markets, create offers and ads, manage launches, connect Meta and GoHighLevel (GHL) accounts, generate AI-assisted content, and operate related campaign workflows. By using the Service, you acknowledge this Privacy Policy. If you do not agree, do not use the Service.

Depending on how you use SROS, we may collect:

Account information

• Name, email address, phone number, company or organization name, and workspace details
• Authentication credentials and account activity (such as sign-in events) when you create or use an account
• Organization, team, and role information for workspace users

Client, campaign, and lead information

• Client and campaign information you enter into SROS, including business details, offers, creative assets, forms, and launch settings
• Advertising campaign and lead information processed through the Service where authorized

Integration and platform data

• Meta integration data authorized through Meta OAuth (described below)
• GoHighLevel (GHL) integration data authorized through GHL connections

Billing and subscription information

• Subscription and billing-related information handled through our payment processor (for example, Stripe), such as plan selection, payment status, and invoices. Payment card details are processed by the payment provider and are not stored as full card numbers by SROS

Usage, device, and diagnostics

• Usage data, device and browser information, IP address, cookies or similar technologies, and diagnostic or log data needed to operate and secure the Service

Support and communications

• Communications you send us, including support requests and the information contained in them
• Early-access, waitlist, or contact form submissions on our marketing site

AI-related content and metadata

• Prompts, inputs, generated outputs, and related usage metadata where you use AI-assisted features in SROS

We use information to:

• Provide, operate, maintain, and improve SROS
• Authenticate users and protect accounts
• Create and manage organizations and workspaces
• Process launches, campaigns, creatives, forms, and related workflows
• Synchronize connected services such as Meta and GoHighLevel according to permissions you grant
• Generate research, offers, copy, creatives, and other automation outputs
• Provide reporting and analytics within the Service
• Process billing, trials, and subscriptions
• Prevent fraud, abuse, and security incidents
• Provide customer support
• Meet legal, regulatory, and contractual obligations

We use service providers and integrations to operate the Service. Categories may include:

• Cloud hosting and database providers
• Authentication providers
• Payment processors
• Meta
• GoHighLevel
• AI / model providers
• Email delivery providers
• Analytics and monitoring providers

Where currently accurate for the SROS product, important providers include:

• Supabase — hosting, database, and authentication infrastructure
• Stripe — subscription billing and payment processing
• Meta — advertising platform integrations authorized by users
• GoHighLevel — CRM / marketing automation integrations authorized by users
• OpenAI — AI model services used for eligible generation features

These providers process information under their own terms and privacy policies. We do not control third-party platforms that you connect to SROS.

When you connect Meta to SROS, SROS may access Meta information that you authorize, which may include businesses, ad accounts, Pages, campaigns, advertising performance data, lead forms and leads, and pixels or datasets where authorized. Access depends on the permissions you grant through Meta OAuth and may change if you revoke access or if Meta changes available scopes or APIs.

SROS does not control or own your Meta accounts, Business Manager assets, or advertising accounts. You remain responsible for Meta account ownership, permissions, advertising compliance, and any spend you authorize on Meta.

SROS does not sell personal information. We may share information:

• With service providers that help us operate the Service (hosting, auth, billing, email, AI, analytics, and similar)
• At your direction or with your authorization
• To operate integrations you connect (such as Meta and GoHighLevel)
• For legal, security, fraud-prevention, or enforcement reasons, including to respond to lawful requests
• In connection with a corporate transaction such as a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards

We retain information while needed to provide the Service and to meet legal, security, accounting, and contractual obligations. Some historical, audit, billing, security, or reporting records may be preserved or anonymized where legally or operationally required even after an account or integration is closed.

We use reasonable technical and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on applicable law and your relationship with SROS, you may be able to:

• Access personal information we hold about you
• Request correction of inaccurate information
• Request deletion of personal information
• Disconnect integrations such as Meta or GoHighLevel from applicable account or client settings
• Manage certain marketing communication preferences for communications we control
• Exercise applicable state or country privacy rights where provided by law

We will respond to verifiable requests within the period required by applicable law. We may need to verify your identity and authority before fulfilling a request.

You may request deletion of your SROS account data or Meta-connected data associated with SROS by following the instructions on our User Data Deletion Instructions page. Disconnecting an integration stops future access but may not automatically erase all historical records already stored in SROS.

SROS is not intended for children under 13, or under the applicable minimum legal age in your jurisdiction. We do not knowingly collect personal information from children.

SROS and its service providers may process information in the United States and other countries where those providers operate. Those countries may have different data-protection laws than your home jurisdiction. Where required, we take appropriate steps to protect information in connection with such transfers.

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and revise the “Last updated” date. Your continued use of the Service after an update becomes effective constitutes acceptance of the revised policy, except where additional consent is required by law.

Related pages: Terms and Conditions · Data Deletion Instructions