Privacy Policy
Heartland Digital LLC, doing business as Heartland Next, provides digital advertising, fundraising, research, and campaign strategy services. This policy explains what information we collect, why we collect it, how we handle it, and how you can ask us to delete it.
Who this policy covers
This policy applies to visitors to heartlandnext.com and our related subdomains, to clients and prospective clients who contact us or engage our services, and to the internal software tools we operate in the course of that work. Those tools include the reporting application we maintain on the Meta platform, which is described in its own section below.
Information we collect
Information you give us directly
When you fill out a form on our website, send us an email, or call us, we receive whatever you choose to share. That typically means your name, your email address, your phone number, the organization you represent, and the substance of your message.
Information collected automatically
Our website records standard technical information when you visit, including your IP address, your browser type, the pages you view, and the site that referred you. We use this to understand how the site is performing and to keep it secure.
Client and campaign information
When we work with a client, we handle the information necessary to run that engagement. Depending on the services involved, this can include advertising account access, performance and billing data, donor and fundraising records, voter file data licensed from third party vendors, and creative assets.
Advertising platform data
We operate reporting applications that connect to advertising accounts on the Meta platform, on Google Ads, and on StackAdapt. Their only function is to read performance statistics for advertising accounts our clients have authorized us to access, and to place those statistics into reporting dashboards we build for those clients.
The application reads aggregate campaign performance data. That means figures such as amount spent, impressions, reach, frequency, clicks, click through rate, cost per click, and counts of actions such as link clicks and landing page views. These figures describe the performance of an advertisement. They do not identify the individuals who saw it.
The application does not read, request, collect, or store personal information about any individual who views or interacts with an advertisement. It does not access lead form submissions, message threads, comments, follower lists, or any other personal data belonging to end users of Meta products.
The application makes read requests only. It cannot create, modify, pause, or delete advertising campaigns, and it does not write any data back to the Meta platform. Access is granted by the account owner and can be revoked by the account owner at any time through their Meta Business Settings.
Performance data retrieved through the application is written to a private reporting workspace controlled by Heartland Next and shared with the client whose account the data came from. It is not sold, licensed, or disclosed to any other party.
MyAds, our client reporting hub
MyAds is the reporting hub where a client signs in to see how their advertising is performing. Each client has their own page and their own password, which we set and send to them. We do not create an account for anyone on the client side, and we do not collect a name, an email address, or anything else about the people who read a client’s reporting.
What a signed in person sees is the performance of their own advertising and nothing else. The hub holds no information about the individuals who saw or clicked an advertisement, because the figures it reads from the advertising platforms do not identify them.
The only cookie MyAds sets is the one that keeps a person signed in. There is no analytics tag, no advertising pixel, and no third party script anywhere in it.
Signing in with Google, for Heartland Next staff
The staff side of MyAds, which is the part that shows spend and budget across every client, uses Sign in with Google. This applies to Heartland Next employees and contractors. It does not apply to clients, who use the password described above and never sign in with Google at all.
When a member of staff signs in, we ask Google for two things and only two: confirmation that they are signed in, and their email address. We do not ask for and do not receive a name, a profile photo, contacts, a calendar, files, or anything else in that Google account.
The address is used for one purpose, which is to match the person to the staff list. We do not use it to advertise to anyone, we do not add it to a mailing list, and we do not sell or share it. An address that is not on the staff list is told so and no record of it is created.
Heartland Next’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer this information to anyone else, we do not use it for advertising, and no human reads it except where it is necessary to support you, to investigate abuse, or to comply with the law.
A member of staff can end our access at any time from their Google account, under Security and then connections to third party apps. Doing that stops the sign in working. To also have the address removed from the hub, ask us and we will delete it.
How we use information
- To respond to inquiries and to communicate with clients about active work
- To deliver the services a client has engaged us to perform, including advertising, fundraising, research, and reporting
- To produce performance reports and dashboards for the client whose accounts the data describes
- To issue invoices and maintain financial records
- To meet campaign finance disclosure obligations and other legal requirements
- To maintain the security and reliability of our systems
We do not sell personal information, and we do not share it for cross context behavioral advertising.
How we share information
We share information in a limited set of circumstances. We share it with service providers who perform functions on our behalf, such as advertising platforms, payment processors, email delivery services, and hosting providers, and only to the extent they need it to perform that function. We share it with a client when the information concerns that client’s own engagement. We share it when the law requires disclosure, including in response to a valid legal request or to comply with campaign finance reporting rules.
Where we hold data under license from a third party vendor, we use it only for the purposes that license permits.
How long we keep information
We keep client and engagement records for as long as the engagement is active and afterward for the period required by our contractual, tax, and campaign finance recordkeeping obligations. Advertising performance data is retained for the life of the reporting dashboard it supports, and is deleted when the engagement ends or when the client asks us to remove it. Website analytics data is retained on a rolling basis.
How to request deletion of your data
You may ask us to delete information we hold about you. Send the request to daniel@heartlandnext.com with the subject line “Data Deletion Request” and tell us what information you want removed and how we can identify it. We will confirm receipt and complete the deletion within thirty days, except where we are required by law to keep a record.
If you are an advertising account owner and you want to end our reporting application’s access to your account, you can do that yourself without contacting us. Open your Meta Business Settings, go to the ad account, and remove the Heartland Next partner or system user assignment. Access stops immediately. To also have the performance data we already retrieved deleted from our reporting workspace, send us the request described above.
Security
We restrict access to client data to the people who need it to do the work. Platform credentials and access tokens are stored in encrypted property stores rather than in application code, and access to advertising accounts is granted through platform partner and system user permissions rather than by sharing login credentials.
Your rights
Depending on where you live, you may have the right to request a copy of the information we hold about you, to ask us to correct it, to ask us to delete it, and to withdraw consent you previously gave. To exercise any of these, contact us using the information below. We will not treat you differently for making a request.
Children
Our services are directed to organizations and to adults. We do not knowingly collect personal information from anyone under the age of thirteen. If you believe a child has provided us with information, contact us and we will delete it.
Changes to this policy
We will update this policy when our practices change. The revision date at the top of the page reflects the most recent version. Material changes affecting active clients will be communicated directly.
Contact us
Heartland Digital LLC d/b/a Heartland Next
2529 Moundview Drive
Cincinnati, Ohio 45212
daniel@heartlandnext.com
(513) 315-5530