Last updated July 15, 2026
BAD Marketing is a marketing service operated by Nico Winter, based in Ottawa, Ontario, Canada. You can reach us at nico@badvibestattoos.com.
Your account details (name, email, and a hashed password); your Instagram handle and your public posts and captions, which we retrieve to build your ads; business details you give us such as city, booking method, and pricing; your Facebook and Instagram advertising connection, including an access token that we store encrypted so we can run ads on your behalf; the performance data of ads we run for you; payment details, which are handled by our payment processor (we never see or store full card numbers); and basic activity within the app.
To generate and run your ads, to bill you, to provide support, and to improve the service. Improving the service includes learning in aggregate across accounts what makes ads perform, so everyone's ads get better over time. Test accounts are excluded from this.
Only the service providers that help us operate: Meta (to run your ads), our Instagram data provider, Google and Anthropic (to analyze photos and draft copy), our payment processor, and our hosting, database, storage, and email providers. We share only what each needs to do its job, and we do not sell your data.
Advertising tokens are encrypted at rest, passwords are hashed, database access is limited, and the part of our system that holds the sensitive keys is not reachable from the public internet.
We keep your data while your account is active. You can ask us to delete your account and associated data at any time by emailing nico@badvibestattoos.com. We will delete it and revoke any stored advertising tokens, and we honor data-deletion requests required by Meta.
You can access, correct, or delete your information by contacting us. We use only an essential login cookie, and no advertising trackers.
We may update this policy from time to time and will post the new date above.
Questions? Email nico@badvibestattoos.com.