Privacy Policy
Fabrica is a trade name of Strong Products LLC, a Utah limited liability company ("Fabrica", "we", "us"). We run paid advertising for hospitality and experience businesses. This policy explains what information we handle through this website (hellofabrica.com), our client portal (clients.hellofabrica.com), and the advertising and analytics platforms we operate on behalf of our clients, and what we do with it.
1. This website
hellofabrica.com does not set cookies, run analytics, or use tracking pixels. The site is served by Cloudflare, which processes standard request data (IP address, browser type, pages requested) to deliver the site and protect it from abuse. We do not collect any personal information from visitors to this site unless you email us or use the contact form. The contact form sends what you type (your name, email address, and anything else you fill in) to us as an email; it is not stored on the website.
2. The client portal
clients.hellofabrica.com is a private dashboard for our clients. Access is controlled by Cloudflare Access, which sends a one-time login code to an email address we have approved. We store:
- The email address used to log in, as recorded by Cloudflare Access.
- Approval marks and notes a client leaves on creative review pages, stamped with the login email and time.
This information is used only to run the portal and to keep a record of which approvals were given by whom.
3. Client advertising and analytics data
With a client's authorization, we access that client's accounts on advertising and analytics platforms, currently Google Ads, Google Analytics 4, and Meta (Facebook and Instagram) advertising products, through those platforms' official APIs. We use this access to build and manage campaigns, read performance data, and prepare reports for that client.
The data we receive is campaign and aggregate performance data: spend, impressions, clicks, conversions, audience sizes, and similar metrics. We do not receive or build profiles of individual consumers, and we do not use one client's data for any other client or for our own marketing.
Access is granted by the client in their own account settings (for example, Partner access in Meta Business Settings or manager-account access in Google Ads). The client can revoke it at any time, and revoking it ends our ability to retrieve data from that platform immediately.
4. Meta Platform Data
Where we receive data through Meta's APIs ("Platform Data"), we handle it in accordance with Meta's Platform Terms and Developer Policies. Specifically:
- We use Platform Data only to provide advertising management and reporting services to the client whose assets it relates to.
- We do not sell, license, or share Platform Data with third parties, except service providers acting on our behalf as described below.
- We keep Platform Data only as long as needed to provide the service and as required by law, and delete it when the client engagement ends, when the client revokes access, or on request. See our data deletion instructions.
- We protect Platform Data with access controls, encrypted storage of credentials, and limited access to the people who need it.
5. Email and correspondence
If you email us or use the contact form, we keep the correspondence and your contact details to respond and to run the engagement. Our email is hosted on Google Workspace.
6. Service providers
We use a small number of providers to run our business: Cloudflare (website and portal hosting, login), Google (Google Ads, Google Analytics, Google Workspace), and Meta (advertising APIs). Each processes data only for the purpose of providing its service to us.
7. How long we keep information
Portal records are kept for the length of the client engagement and up to 12 months after it ends, unless the client asks us to delete them sooner. Client platform data retrieved through APIs is kept only as long as needed for reporting on that engagement. Email correspondence is kept as a business record.
8. Your rights
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Email jono@stronggoods.net. We will respond within 30 days. Deletion requests are handled as described on our data deletion page.
9. Children
Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect information from children.
10. Changes
If we change this policy, we will post the new version here with a new effective date.
11. Contact
Strong Products LLC (Fabrica)
Utah, United States
jono@stronggoods.net