Privacy Policy

Last updated: September 26, 2026

Lockstep Media ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lockstepmedia.com, use our services, or authorize our applications to access your accounts on third-party platforms, including our Meta application LockStep API v2 (Meta App ID 1444953271013731).

1. Information We Collect

We may collect information you voluntarily provide, including:

• Name, email address, phone number, and business name when you submit a contact form or request a consultation
• Business information such as industry, location, and advertising goals
• Communications you send to us directly

We may also automatically collect certain technical information when you visit our site, including:

• IP address and browser type
• Pages viewed and time spent on the site
• Referring website or search terms

2. Meta Platform Data (Facebook & Instagram)

Lockstep Media operates a Meta application, LockStep API v2, that we use to manage advertising and content for our own businesses and for clients who have hired us. The application only accesses data after an authorized account owner or administrator explicitly grants permission through Meta's login and permissions flow. Depending on the permissions granted, we may access:

Ad account data

• Ad account IDs, names, currency, time zone, and account status
• Campaigns, ad sets, ads, creatives, budgets, bids, schedules, and targeting settings
• Performance and insights data such as impressions, reach, clicks, spend, conversions, and cost metrics
• Pixel and conversion event configuration associated with the ad account

Facebook Page data

• Page IDs, names, and basic Page information
• Page access tokens needed to publish on the Page's behalf
• Posts, media, and scheduled content we create or manage for the Page
• Page and post insights, such as reach, engagement, and follower counts
• Comments and messages on content we manage, where needed to moderate or respond on the client's behalf

Instagram professional account data

• Instagram business or creator account ID, username, and profile information
• Media we publish or manage, including images, videos, Reels, and captions
• Account and media insights, such as reach, impressions, engagement, and follower counts
• Comments on managed media, where needed to moderate or respond on the client's behalf

Basic profile data

• The name and Meta user ID of the person who authorizes the application, used only to identify which authorized user connected the account

We do not request or use Meta data beyond what is required to provide the services described below, and we do not access personal Facebook profiles, friend lists, or private messages that are unrelated to the Pages and accounts we manage.

3. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and provide requested services
• Manage ad campaigns: create, edit, launch, pause, and optimize campaigns on Meta (Facebook and Instagram) and Google Ads on your behalf
• Publish content: create, schedule, and publish posts, images, videos, and Reels to Facebook Pages and Instagram professional accounts you authorize
• Provide analytics: measure ad and content performance and prepare reports and recommendations for you
• Communicate about projects, results, and service updates
• Improve our website and services
• Comply with legal obligations

Data obtained through Meta's platform is used only to provide these services to the business that authorized it. We do not sell Meta platform data, use it to build user profiles for unrelated purposes, use it for surveillance, or use it to make eligibility decisions about anyone (such as for housing, employment, credit, or insurance). We use Meta platform data in accordance with the Meta Platform Terms and Developer Policies.

4. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Meta Platforms, Inc.: When we manage ads or publish content through the Meta platform, the data needed to perform those actions (such as campaign settings, creatives, and post content) is sent to Meta as required for the service to function. Meta's handling of that data is governed by the Meta Privacy Policy.
• Google: When we manage Google Ads campaigns on your behalf, the data needed to perform those actions is sent to Google, as described in the Google Ads API section below.
• Service providers: Trusted infrastructure providers we use to operate our business (such as secure hosting and CRM platforms), who process data only on our instructions and are bound by confidentiality obligations. Data obtained from Meta's platform is not shared with any third party other than Meta except as required to host and operate our own service.
• Legal requirements: When required by law or to protect our rights and the safety of others.

5. Google Ads API Data

As an authorized Google Ads API user, Lockstep Media accesses and manages Google Ads data solely on behalf of our clients and in accordance with the Google Ads API Terms of Service. We do not use Google Ads data for any purpose other than managing campaigns as directed by clients. Data accessed through the Google Ads API is not shared with unauthorized third parties.

6. Data Retention

We retain your information only for as long as necessary to provide our services and comply with legal obligations:

• Access tokens for Meta and Google are stored securely and kept only while you authorize our access. They are deleted when you revoke access, end your engagement with us, or request deletion.
• Campaign, content, and performance data is kept for the duration of our engagement so we can report on results, and is deleted within 90 days after the engagement ends unless you ask us to keep it longer or we are required to retain it by law.
• Contact and business records (such as invoices and correspondence) are kept as long as required for legal, tax, and accounting purposes.

You may request deletion of your data at any time, as described below.

7. Data Deletion Instructions

You can remove our access to your Meta data and ask us to delete it at any time.

Remove the app from your Facebook account

1. Go to your Facebook Settings & privacy → Settings.
2. Open Apps and websites (under Permissions or Your activity).
3. Find LockStep API v2 and select Remove.

For Pages and ad accounts managed through Meta Business Suite, a Business administrator can also remove the app under Business settings → Integrations → Connected apps.

Request deletion of data we hold

Email chris@lockstepmedia.com with the subject line "Data Deletion Request" and include the name of the Facebook Page, Instagram account, or ad account involved. We will confirm your request and delete the associated data, including stored access tokens, within 30 days, except for records we are legally required to keep. Data that already exists on Meta's platform (such as published posts or ad campaigns in your own ad account) remains under your control in your Meta accounts.

8. Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, use, or disclosure, including encrypted connections (HTTPS), restricted access to credentials and access tokens, and limiting access to staff who need it to deliver our services. However, no method of transmission over the internet is 100% secure. If we become aware of a security incident affecting platform data, we will notify affected clients and platforms as required.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Revoke our access to your Meta or Google accounts at any time
• Opt out of marketing communications at any time

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR). To exercise any of these rights, contact us using the details below. We will respond within 30 days and will not discriminate against you for exercising your rights.

10. Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze site traffic. You can control cookie settings through your browser.

11. Children's Privacy

Our services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated to active clients directly.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Lockstep Media
3508 Cedars Stable Rd
Harwood, MD 20776
Email: chris@lockstepmedia.com