Last updated: 04-11-2026

1. Who we are

Karma (karma-network.com) is a performance marketing agency operated by DirectPixel LDA, a company registered in Portugal (NIF 508960177), with registered office at Avenida da Liberdade, 230, 7ºandar 1250-148 Lisboa. DirectPixel LDA is the controller of the personal data described in this policy. Privacy contact: privacy@karma-network.com.

2. Data we collect through this website

• Contact and study-request forms: name, email, phone number, company, job title and any message you send. Purpose: to reply to your request and, where applicable, prepare a commercial proposal. Legal basis: steps taken at your request prior to entering into a contract and our legitimate interest in responding to business enquiries.
• Technical data and cookies: IP address, browser type and usage data, collected through cookies and similar technologies, as described in section 8 (Cookies).

3. Advertising platform data we process for our clients (including Meta)

To provide our services, our clients grant our Business Manager partner access to their advertising accounts on platforms such as Meta (Facebook and Instagram) and Google Ads. Through the official platform APIs (including the Meta Marketing API) we access, on a read-only basis:

• advertising performance data (e.g. spend, impressions, clicks, conversions, cost per result), which is aggregated and does not identify individual people;
• advertising account configuration (campaigns, ad sets, ads, creatives, targeting settings and audience names and sizes);
• names and IDs of the client’s business assets (ad accounts, Pages) needed to connect the data.

We do not use Facebook Login, and we do not collect the personal data of Facebook or Instagram users (such as names, emails, profiles or friend lists) through these APIs.

We use this data only to report on, analyse, audit and optimise the advertising of the client that owns each account. We do not sell this data, we do not use one client’s data for another client, and we do not combine it with other data to identify individuals. Access is limited to Karma team members who work on that client’s account. Access tokens are stored securely and are never shared.

4. Service providers (processors)

We use the following providers to process data on our behalf, under contracts that require them to protect it:

• Anthropic PBC (USA): AI-assisted analysis of advertising reports
• Google LLC / Google Ireland (Google Workspace): email, document and report storage
• Vercel Inc. (USA): hosting of internal reports
• HubSpot, Inc. (USA): CRM for enquiries received through the website
• Website hosting provider

5. International transfers

Some providers are located outside the European Economic Area. Where this happens, transfers rely on an adequacy decision (including the EU-US Data Privacy Framework, where the provider is certified) or on the European Commission’s Standard Contractual Clauses.

6. Retention

• Form enquiries: up to 24 months after our last contact, unless a contract follows.
• Advertising platform data: for the duration of our service agreement with the client and up to 12 months afterwards for reporting history; deleted or returned when the client asks or the agreement ends, unless the law requires us to keep it.

7. Your rights and how to request deletion

You may request access to, rectification, erasure, restriction or portability of your personal data, and you may object to its processing, by writing to [privacy@karma-network.com]. We reply within one month. Clients may at any time remove our partner access to their ad accounts in Meta Business Settings, which immediately stops our access, and may ask us to delete the data we hold. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD, www.cnpd.pt).

8. Cookies and similar technologies

Our website uses cookies and similar technologies. On your first visit, a cookie banner (OneTrust) lets you accept, reject or customise non-essential cookies, and you can change your choice at any time through the cookie settings link on the website. Non-essential cookies are only set with your consent. We use the following categories:

• Strictly necessary: needed for the website to work, for security, for language selection and to remember your cookie choices. These do not require consent.
• Performance and analytics: [Google Analytics, loaded through Google Tag Manager], to understand how visitors use the website.
• Targeting and advertising: Meta Pixel (Meta Platforms Ireland Ltd.), LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) and HubSpot tracking (HubSpot, Inc.), to measure our own advertising campaigns and show relevant ads to people who visited our website. Meta and LinkedIn may process this data under their own privacy policies.

Our contact forms use a hidden anti-spam field (honeypot) to block automated submissions; it does not profile you. Cookie lifetimes range from the browser session to 12 months. The full, up-to-date list of cookies, with their names, providers and durations, is available in the cookie settings panel.

9. Changes

We will publish any changes to this policy on this page and update the date above.