Privacy Policy

Effective Date: September 06, 2026
Last Updated: September 06, 2026

Introduction

This Privacy Policy describes how Insider Perks, Inc. (“Insider Perks,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you interact with our website (https://insiderperks.com), our services, and our platform (collectively, the “Service”). It also describes how we access, use, store, and share Google user data and Meta user data obtained through third-party APIs.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

Definitions

Personal Data: Data about a living individual who can be identified from those data, or from those and other information in our possession or likely to come into our possession.
Usage Data: Data collected automatically through the use of the Service or from the Service infrastructure (e.g., page visit duration, IP address, browser type).
Data Controller: The natural or legal person who determines the purposes and means of processing personal data. For this Privacy Policy, Insider Perks is the Data Controller.
Data Processor (Service Provider): A natural or legal person who processes data on behalf of the Data Controller.
Google User Data: Any data obtained through Google APIs, including but not limited to data from Google Business Profile, Google Analytics, Search Console, Google Ads, Tag Manager, Merchant API, YouTube Data API, Google Drive, and Google Docs APIs.
Meta User Data: Any data obtained through Meta (Facebook/Instagram) APIs, including but not limited to data from the Meta Graph API, Pages API, and advertising APIs.
OAuth 2.0: The open authorization standard that allows third-party applications to obtain limited access to Google and Meta accounts with user consent.
Service: The https://insiderperks.com website and the Insider Perks platform operated by Insider Perks.

Data We Collect

3.1 Personal Data You Provide Directly

When you use our Service, you may provide the following types of personal data:

Contact Information: Name, email address, phone number, mailing address.
Business Information: Business name, address, hours of operation, photos, attributes, and other listing information.
Account Information: Username, password, account settings.
Billing Information: Payment method, billing address, transaction history (processed through our third-party payment processors).
Communications: Messages, emails, support requests, and any content you submit through the Service.

3.2 Usage Data Collected Automatically

When you access the Service, we may automatically collect:

Internet Protocol (IP) address
Browser type and version
Pages visited and time spent on those pages
Time and date of visit
Unique device identifiers and diagnostic data
Referring URLs and exit pages
Device type and operating system

3.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect information about your interactions with the Service. For details, see our Cookie Policy.

4.Google API Data Access and Use

Insider Perks integrates with various Google APIs to provide services to our clients who have explicitly authorized us to manage their digital marketing and online presence. We access Google user data only through OAuth 2.0 authorization with explicit consent from the account owner. We do not access any Google user data without the user having granted permission through Google’s standard authorization flow.

4.1 Google APIs and Data Types We Access

The following table details each Google API scope we request, the type of data accessed, and how we use it:

#	Scope	Google API	Data Accessed	How We Use It
1	business.manage	Google Business Profile	Business listing data including business names, addresses, hours, photos, attributes, posts, review responses, and performance metrics	To manage and optimise client business listings, respond to reviews, update business information, and post content on behalf of clients
2	analytics.readonly	Google Analytics (GA4)	Client website analytics including traffic data, user behavior, sessions, page views, and conversion data	To generate performance reports, analyse website traffic patterns, and provide data-driven recommendations to improve our clients' online presence
3	webmasters.readonly	Search Console	Client search performance data including impressions, clicks, positions, indexing status, and sitemaps	To monitor and improve client search engine visibility, identify indexing issues, and report on search performance
4	adwords	Google Ads API	Client advertising data including campaigns, ad groups, keywords, ad spend, performance metrics, and billing information	To manage, optimise, and report on client advertising campaigns, including keyword management, bid adjustments, and budget allocation
5	tagmanager.readonly	Tag Manager	Client tag and container configurations including tag definitions, trigger rules, and container versions	To audit and manage tracking implementations for client websites, ensuring accurate data collection and conversion tracking
6	content	Merchant API	Client product data including product listings, feed status, and product diagnostics	To manage and optimise Google Shopping product feeds for clients with e-commerce presence (only applicable to clients with Google Shopping feeds)
7	youtube.readonly	YouTube Data API	Client video data including video information and channel data	To monitor and report on client YouTube channel performance and video content metrics (only applicable to clients with YouTube content)
8	drive.file	Google Drive	Specific Google Drive files the user grants access to	To access and work with specific files shared by clients for campaign management purposes. We do not have access to the user's full Google Drive
9	documents	Google Docs	Google Docs documents the user grants access to	To view, edit, create, and delete documents shared by clients for campaign and content management purposes
10	documents.readonly	Google Docs	Google Docs documents the user grants access to	To read and reference documents shared by clients for reporting and analysis purposes

4.2 How We Access Google User Data

All Google user data is accessed through OAuth 2.0 authorization with explicit client consent. When you connect a Google account to the Insider Perks platform, you are presented with a consent screen that describes the specific data we will access. You grant us permission on a per-scope basis, and you may revoke access at any time through your Google account settings.

We do not access Google user data without your authorization. We do not store Google account credentials (passwords, authentication tokens) in a way that would allow us to access your Google account without your ongoing consent.

4.3 How We Use Google User Data

We use the Google user data obtained through the scopes listed above only for the purposes described in this policy, in compliance with the Google API Services User Data Policy and the Google APIs Terms of Service. Specifically:

Google Business Profile (business.manage): To manage and optimize our clients’ business listings, respond to reviews, post updates, and analyze listing performance metrics on behalf of our clients.
Google Analytics (analytics.readonly): To analyze client website traffic, user behavior, sessions, page views, and conversion data in order to generate performance reports and improve marketing strategies.
Search Console (webmasters.readonly): To monitor client search performance, including impressions, clicks, keyword positions, indexing status, and sitemaps, in order to optimize search visibility.
Google Ads API (adwords): To manage and optimize client advertising campaigns, including campaign creation, ad group management, keyword selection, bid management, performance tracking, and billing oversight.
Tag Manager (tagmanager.readonly): To audit and review client tag and container configurations, including tag definitions, trigger rules, and container versions, in order to ensure proper tracking and analytics setup.
Merchant API (content): To manage and diagnose client product listings, product feeds, and product feed status on Google Shopping, for clients who have Google Shopping feeds.
YouTube Data API (youtube.readonly): To access and manage client video information and channel data, for clients who have YouTube content, in order to optimize video marketing and content strategy.
Google Drive (drive.file): To access specific Google Drive files that the user explicitly grants access to, for purposes such as sharing documents, reports, or data files related to the Service.
Google Docs (documents, documents.readonly): To view, edit, create, delete, or read-only access Google Docs documents that the user explicitly grants access to, for purposes such as collaborative content creation, report generation, or document management related to the Service.

4.4 How We Store Google User Data

Google user data obtained through the scopes listed above is stored securely on our infrastructure in compliance with the Google API Services User Data Policy. We implement the following safeguards:

Encryption: Data is encrypted at rest and in transit using industry-standard encryption protocols (TLS 1.2+ for transit, AES-256 for data at rest).
Access Controls: Access to Google user data is restricted to authorized personnel on a need-to-know basis. We enforce role-based access controls (RBAC) and audit access logs.
Data Minimization: We collect only the data necessary to provide the specific services described above. We do not retain Google user data longer than is necessary to fulfill the purposes for which it was collected.
Retention Period: Google user data is retained for the duration of the client engagement. Upon termination of the client relationship, we will delete or return all Google user data within 30 days, unless retention is required by law or for the establishment, exercise, or defense of legal claims.

4.5 How We Share Google User Data

We do not sell Google user data. We do not share Google user data with third parties except as follows:

With our clients: Google user data obtained on behalf of a client is shared with that client in the form of reports, dashboards, and managed services as part of the service we provide.
With service providers: We may share Google user data with trusted service providers who assist us in operating the Service, subject to contractual obligations that require them to protect the data and use it only for the purposes for which it was shared. These service providers include hosting providers, analytics platforms, and communication tools.
For legal reasons: We may disclose Google user data if required by law, regulation, legal process, or enforceable governmental request.
Business Transfer: In the event of a merger, acquisition, or asset sale, Google user data may be transferred to the acquiring entity, subject to the terms of this Privacy Policy.

We do not use Google user data for any purpose other than as described in this policy. We do not use Google user data to develop, improve, or train general-purpose AI or machine learning models. We do not use Google user data for advertising or marketing unrelated to the client’s own campaigns.

4.6 Data Obtained Through Google APIs — Limitations

In compliance with the Google API Services User Data Policy, we acknowledge the following:

Data obtained through Google APIs must only be used in compliance with the policies of the API and in the way that we represent to our users in our app’s actions and in this Privacy Policy.
We will not use Google user data in a manner that is inconsistent with our published privacy policy.
We will not use Google user data to build products that compete with Google products or services.
We will not sell, trade, or otherwise transfer Google user data to third parties for any purpose other than those disclosed in this policy.

5. Meta API Data Access and Usage

Insider Perks uses Meta (Facebook/Instagram) APIs to manage social media publishing and analytics on behalf of our clients — specifically campground, RV resort, and glamping properties. We access Meta user data through OAuth 2.0 authorization (Facebook Login for Business), which requires your explicit consent before any data is accessed. Below is a detailed disclosure of each Meta permission, the data accessed, how we use it, how we store it, and how we share it.

5.1 Overview of Meta Permissions

#	Permission	What It Gives Access To
1	pages_manage_posts	Facebook Page publishing — create, edit, and delete posts on a connected Facebook Page, including text, photos, videos, links, and scheduled posts
2	pages_read_engagement	Facebook Page data — read Page posts, comments, reactions, follower counts, and engagement metrics on a connected Facebook Page
3	instagram.content_publish	Instagram publishing — create and publish photos, videos, Reels, and carousel posts to a connected Instagram professional account
4	instagram_manage_insights	Instagram analytics — impressions, reach, engagement, follower demographics, and content performance metrics for a connected Instagram professional account

Note: Confirm exact current permission names against Meta’s Permissions Reference before submission, as Meta periodically renames permissions.

5.2 How We Access Meta User Data

All Meta user data is accessed through OAuth 2.0 authorization (Facebook Login for Business) with explicit client consent. When you connect a Facebook Page or Instagram professional account to the Insider Perks platform, you are presented with a consent screen that describes the specific permissions we are requesting. You grant us permission on a per-permission basis, and you may revoke access at any time through your Facebook or Instagram account settings.

We do not access Meta user data without your authorization. We do not store Meta account credentials (passwords, authentication tokens) in a way that would allow us to access your accounts without your ongoing consent.

Client-side prerequisites: To connect a Facebook Page and Instagram account, a client must have: (a) a Facebook account, (b) a Facebook Page, (c) an Instagram professional account (Business or Creator — a personal account cannot be published to), and (d) the Instagram account linked to the Facebook Page.

90-day re-grant rule: If a permission goes unused for 90 days (e.g., because a client is inactive during an off-season), the client must re-authorize the permission. This is a Meta platform requirement, not a bug in our system. Our platform includes a re-grant flow to handle this without requiring a support ticket.

5.3 How We Use Meta User Data

We use the Meta user data obtained through the permissions listed above only for the purposes described in this policy, in compliance with Meta’s Developer Policies and Platform Terms. Specifically:

Facebook Page Publishing (pages_manage_posts): To create, schedule, edit, and delete posts on a client’s connected Facebook Page — including text updates, photo posts, video posts, link shares, and event promotions — based on content the client has approved. This replaces manual posting by the client or their staff.
Facebook Page Engagement (pages_read_engagement): To read a client’s Facebook Page posts, comments, reactions, shares, follower counts, and engagement metrics in order to generate performance reports, analyze audience engagement, and inform content strategy.
Instagram Publishing (instagram.content_publish): To create and publish photos, videos, Reels, and carousel posts to a client’s connected Instagram professional account based on content the client has approved. Instagram publishing uses a two-step Graph API process: first creating a media container, then publishing it. This replaces manual posting by the client or their staff.
Instagram Insights (instagram_manage_insights): To read a client’s Instagram impressions, reach, engagement rates, follower demographics (age, gender, location), and individual content performance metrics in order to generate analytics reports and inform content and marketing strategy.

5.4 How We Store Meta User Data

Meta user data obtained through the permissions listed above is stored securely on our infrastructure in compliance with Meta’s Developer Policies. We implement the following safeguards:

Encryption: Data is encrypted at rest and in transit using industry-standard encryption protocols (TLS 1.2+ for transit, AES-256 for data at rest).
Access Controls: Access to Meta user data is restricted to authorized personnel on a need-to-know basis. We enforce role-based access controls (RBAC) and audit access logs.
Data Minimization: We collect only the data necessary to provide the specific services described above. We do not retain Meta user data longer than is necessary to fulfill the purposes for which it was collected.
Retention Period: Meta user data is retained for the duration of the client engagement. Upon termination of the client relationship or revocation of access, we will delete or return all Meta user data within 30 days, unless retention is required by law or for the establishment, exercise, or defense of legal claims.

5.5 How We Share Meta User Data

We do not sell Meta user data. We do not share Meta user data with third parties except as follows:

With our clients: Meta user data obtained on behalf of a client is shared with that client in the form of reports, dashboards, and managed services as part of the service we provide.
With service providers: We may share Meta user data with trusted service providers who assist us in operating the Service, subject to contractual obligations that require them to protect the data and use it only for the purposes for which it was shared.
For legal reasons: We may disclose Meta user data if required by law, regulation, legal process, or enforceable governmental request.
Business Transfer: In the event of a merger, acquisition, or asset sale, Meta user data may be transferred to the acquiring entity, subject to the terms of this Privacy Policy.

5.6 Data Obtained Through Meta APIs — Limitations

In compliance with Meta’s Developer Policies and Platform Terms, we acknowledge the following:

Our use and transfer of information received from Meta Platforms to any other app will adhere to Meta Platform Terms, including the Limited Use requirements.
We will not use Meta user data in a manner that is inconsistent with our published privacy policy.
We will not use Meta user data to develop products that compete with Meta products or services.
We will not sell, trade, or otherwise transfer Meta user data to third parties for any purpose other than those disclosed in this policy.

We obtain consent from users before publishing content or taking any other action on their behalf.

6 Text Messaging (SMS) and Mobile Information

Insider Perks operates text-messaging services on behalf of the campgrounds, RV parks and glamping resorts that use our CampVantage platform. If you text one of these properties, scan a code at a property and choose to text it, or tick the text-message box when you reserve online, we collect your mobile phone number, the content of the messages you send, and the date and time of your consent. We use this information only to provide the texting service you asked for: replying to your questions, sending reservation and check-in details you requested, and sending service updates during your stay at that property.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of sharing described elsewhere in this policy exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties, except with the property you are texting and the service providers who deliver the messages on our behalf (for example, our telecommunications provider), who may use it only to deliver the service.

Message frequency varies. Message and data rates may apply. You can stop at any time by replying STOP to any message; reply HELP for help. Consent to receive text messages is not a condition of any purchase. Program details: https://insiderperks.com/text-messaging/

7. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

To provide and maintain the Service: Including managing client accounts, processing transactions, and delivering the services described above.
To manage client listings and digital presence: Including Google Business Profile management, SEO optimization, advertising campaigns, and social media management.
To communicate with you: Including responding to inquiries, sending service updates, and providing customer support.
To improve the Service: Including analyzing usage patterns, diagnosing technical issues, and developing new features.
For marketing and promotional purposes: Including sending newsletters, promotional materials, and updates about our services. You may opt out of marketing communications at any time by following the unsubscribe link in any email or by contacting us.
To comply with legal obligations: Including responding to legal requests, enforcing our terms, and protecting our rights.

8. Legal Basis for Processing (EEA/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), Insider Perks processes personal data on the following legal bases:

Consent: Where you have given explicit consent for specific processing activities.
Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., improving our Service, providing customer support) and those interests are not overridden by your rights.
Legal Obligation: Where processing is necessary to comply with a legal obligation.

9. Data Retention

Insider Perks will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Google user data: Retained for the duration of the client engagement, deleted or returned within 30 days of termination unless retention is required by law.
Meta user data: Retained for the duration of the client engagement, deleted or returned within 30 days of termination or access revocation unless retention is required by law.
Personal data: Retained for as long as necessary to provide the Service and for the purposes described in this policy.

10. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data at rest and in transit (TLS 1.2+, AES-256).
Role-based access controls and regular access audits.
Regular security assessments and vulnerability testing.
Incident response procedures and breach notification protocols.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

11. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

Clients: For whom we manage listings, analytics, advertising, and social media accounts.
Service Providers: Third-party providers who assist us in operating the Service, subject to contractual obligations to protect your data.
Legal Authorities: When required by law, regulation, legal process, or enforceable governmental request.
Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred.

We do not sell your personal data to third parties.

12. International Data Transfers

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Insider Perks will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

For EEA/UK residents, we rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards for international data transfers.

13. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: The right to request a copy of the personal data we hold about you.
Rectification: The right to request correction of inaccurate personal data.
Erasure: The right to request deletion of your personal data (subject to certain exceptions).
Restriction: The right to request restriction of processing of your personal data.
Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
Objection: The right to object to the processing of your personal data for certain purposes.
Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time.

To exercise your rights, please contact us at hello@insiderperks.com. We may need to verify your identity before responding to your request.

13.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal data is collected, the right to delete personal data, and the right to opt out of the sale of personal data. We do not sell your personal data. You may also have the right to opt out of the sharing of personal data for cross-context behavioral advertising.

13.2 European Economic Area / United Kingdom (GDPR/UK GDPR)

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR) and the UK GDPR, including the rights described in Section 12 above. You also have the right to lodge a complaint with a data protection authority.

14. Children’s Privacy

The Service is intended for business users and is not intended for individuals under 18. We do not knowingly collect personal data from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to delete that information.

15. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policy of any third-party website or service you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. We encourage you to review this Privacy Policy periodically for any changes.

If we make material changes to this Privacy Policy, we will notify you by email or through a prominent notice on our website before the changes take effect.

17. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Insider Perks, Inc.
Email: hello@insiderperks.com
Phone: (216) 232-3105