Privacy Policy

Effective date: not yet set
Service: MarketingMind AI at https://marketingmindai.com
Legal operator: Legal entity name: not yet set
Privacy contact: Privacy email: not yet set

This Privacy Policy explains how Legal entity name: not yet set ("MarketingMind," "we," "us," or "our") collects, uses, discloses, protects, and deletes personal information when you use MarketingMind AI, including our website, campaign workspace, research and AI features, and supported account connections.

1. What you should know first

• You can provide a business brief and use available assessment features without connecting every external platform.
• Connecting an account is your choice. We access only the resources and permissions you authorize for an available feature.
• Your campaign and connected-account information are not published as a public directory or shared with unrelated customers.
• We do not sell personal information or connected Google account data.
• We use AI to help produce requested analyses and drafts. AI processing, its providers, and its limits are explained below.
• You can withdraw permissions and request access, correction, or deletion using the methods in this policy.

An account connection, a report synchronization, and an external action are separate. Authorizing access does not itself authorize advertising spend, publication, or messages to other people.

2. Information we collect

Account and workspace information. Your name, email address, sign-in identifier, organization, account role, workspace membership, preferences, and account or support communications. If you sign in through another provider, we receive the identity information you approve.

Business and campaign information. Information you provide about your business, industry, location or service area, audience, products or services, business stage, marketing needs, objectives, offers, constraints, websites, platform inventory, and campaign content. We also store associated drafts, evidence, analyses, plans, and feedback.

Connection information. When you authorize a supported integration, we receive authorization credentials such as access or refresh tokens, granted permissions, provider account identifiers, selected properties or resources, and connection or synchronization status. Google handles your Google password; we do not receive it through OAuth.

Connected platform data. The account information and reports described in section 3, to the extent an available feature, your permissions, the provider, and your account allow access.

Public research information. Business websites and other public sources you identify or that are relevant to a requested research task, along with source links, research inputs, and collected business information. Public availability does not mean information can be used without applicable legal or platform restrictions.

Technical information. Information reasonably needed to operate and secure the service, such as IP address, browser or device information, timestamps, session events, error reports, and security logs.

Payment information, if applicable. If you purchase a paid service, we process the plan, transaction, billing-contact, and invoice information needed to administer it. Any payment provider is identified at checkout and in the service-provider information below.

Please keep business briefs focused on marketing. Do not submit passwords, access tokens, payment-card details, privileged client files, or sensitive information about identifiable clients, patients, employees, or other individuals unless a specific feature expressly supports that information with appropriate safeguards and authority.

3. Google account connections

Available connectors may access the following information after you authorize the connection and select the appropriate resource. A listed connector is not a promise that every account or feature is currently available.

We request permissions in context for the connector you choose. Some provider permissions are broader than our enabled features. For example, a provider may not offer a separate permission for every read-only use. We limit our actual operations to the features and actions you authorize.

We do not access your Gmail, Drive files, contacts, or private messages merely because you connect one of the services above. A new integration or materially different use requires its own explanation and, where required, your permission.

Search-volume estimates or keyword research, when available, are separate from connected-account performance. Neither account connection nor this policy guarantees access to keyword planning or any particular data.

4. How we use information

We use information for the disclosed purposes needed to:

• Create and secure accounts and workspaces, manage access, and respond to support requests.
• Save and restore business briefs and campaign work.
• Establish the connections you request, verify access to selected resources, and maintain permitted authorization.
• Collect and display supported reports when synchronization is enabled.
• Produce the research, AI analyses, drafts, readiness assessments, plans, and other outputs you request.
• Identify sources, limitations, missing information, and the status of your campaign work.
• Administer any purchased services, investigate misuse, maintain reliability, and meet applicable legal obligations.

We do not treat acceptance of a general policy as permission for unrelated uses. Where an optional use needs separate consent, we explain the choice when it is offered.

5. Google API data and Limited Use

MarketingMind AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

We restrict Google API data, including relevant derived information, to the authorized, visible user-facing features. We do not sell it, provide it to data brokers, use it to target or retarget advertisements, or use it for credit or lending decisions.

Transfers are limited to permitted purposes, including delivering a disclosed feature with the required consent, security, legal obligations, or a qualifying business transfer with prior consent where Google requires it.

Human access to Google API data is limited to circumstances permitted by Google's policies, such as your affirmative agreement to view specific data, necessary security investigation, legal requirements, or permitted aggregated internal operations.

6. AI analysis and model providers

We use AI to help analyze the business information and permitted evidence needed for the feature you request. Outputs can include summaries, questions, marketing suggestions, and draft plans.

Before we send connected Google data to an AI processor for an available feature, we explain the data, purpose, and processor and obtain the consent required by Google and applicable law. Only information needed for the requested task is included. Authentication credentials are not included in AI inputs.

We do not use Google API data to train, fine-tune, or improve foundational, generalized, or cross-customer AI or machine-learning models. We require any processor receiving that data to follow the applicable purpose, confidentiality, retention, and no-training restrictions. We do not use private customer campaign content to build a shared training dataset without a separate lawful and clearly disclosed arrangement; that arrangement cannot override restrictions on Google data.

AI processors and processing locations used for enabled features are identified in section 8. AI outputs may be incomplete or incorrect and should be reviewed before use. Automated analysis does not itself authorize an external action or make a consequential decision about an individual.

7. Workspace access and other disclosures

Your information may be available to the people you authorize within your workspace and to representatives you authorize to help manage the campaign. Organization administrators may manage workspace membership and settings. We apply the relevant resource permissions and provider-specific restrictions.

We share information with service providers only as needed for the disclosed functions, under appropriate contractual and access restrictions. We may also disclose information where required by law or necessary to address fraud, security, or legal claims, subject to applicable restrictions.

If our business is reorganized or transferred, information remains subject to applicable privacy obligations. Google API data is transferred only where Google's rules allow it, including prior consent where required. We do not publish private connected-account information for unrelated businesses to use.

8. Service providers and international processing

Our current providers for the enabled service are:

Google separately processes information under its own Privacy Policy. Other platforms' own notices govern their independent services.

Information may be processed outside the country or province where you live, in the locations identified above. It may be subject to lawful access by courts, law enforcement, or other authorities in those locations. We remain responsible for our handling of information and use appropriate contractual and technical safeguards.

You can contact our Privacy Officer at Privacy email: not yet set to request information about our practices involving service providers outside Canada, including the functions they perform and where information is processed. We do not claim that all information stays in Canada.

9. Retention and deletion

We keep information only for as long as reasonably needed for the disclosed purpose, your active service, applicable provider rules, security, and lawful recordkeeping.

• Business briefs, campaign content, and permitted evidence are retained while needed for your workspace, unless deleted earlier or a shorter provider rule applies.
• Authorization credentials are kept only while needed for an authorized connection and are revoked or removed when no longer needed.
• Following a verified deletion request or account closure, information is normally removed from active systems within Active data deletion timeframe: not yet set, subject to lawful exceptions and any shorter provider deadline.
• Ordinary backup copies expire within Backup retention period: not yet set. Deleted information is not restored for ordinary use. A backup schedule does not extend a provider-mandated deletion deadline.
• We may retain limited information needed for legal obligations or a specific security or dispute purpose, subject to applicable law and provider restrictions. Any retained information is restricted to that purpose.

YouTube-specific rules. If you request deletion of stored YouTube data, delete your MarketingMind account, or revoke YouTube consent through our service, we delete the associated data as soon as possible and within seven calendar days. Revocation through Google's security settings requires prompt deletion, no later than 30 calendar days. Other stored YouTube API data is refreshed or deleted within 30 days unless a provider rule permits longer retention with authorization checks at least every 30 days.

Deleting information held by MarketingMind does not delete the underlying information from Google or another connected platform. Use that platform's own controls to delete its source information.

10. Disconnecting accounts and withdrawing permission

You can use available connection controls or contact Privacy email: not yet set to disconnect an integration or request deletion of associated stored data.

You can also revoke Google access at Google Account permissions. Revocation prevents further authorized access; related synchronization and features may stop working. Stored data is handled under section 9 and applicable provider rules.

Some Google connectors can share a Google authorization. Revoking that authorization can affect more than one connected service. Detaching a resource from one campaign and revoking the underlying authorization are different actions; the relevant controls explain their effect.

11. Cookies and local browser storage

We use cookies and similar browser storage as needed for functions such as sign-in sessions, security, preferences, and saved form drafts. A draft stored in your browser may remain there until cleared, even if you sign out. Use care on shared devices.

Optional analytics, advertising, or other non-essential tracking currently used by the service: Optional tracking tools and purposes or none: not yet set.

Where required, we obtain consent before using optional tracking. Browser controls can remove or block cookies and local storage, but some essential features may stop working. Connecting your own GA4 property is separate from any analytics used to operate our website.

12. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and its risks. These include access restrictions, secure transmission, protected credential storage, and operational controls designed to reduce unauthorized access.

OAuth credentials are protected in server-side storage and are not made available to the AI models or other customers. No internet service can guarantee absolute security. We address and notify affected parties about security incidents as required by applicable law.

13. Your privacy choices and requests

Depending on applicable law, you may request access to your personal information, correction of inaccurate information, withdrawal of consent, or deletion, subject to lawful limits. You may also ask about our practices or raise a privacy complaint.

Send requests to Privacy email: not yet set. We may verify your identity and authority using information proportionate to the request; do not send passwords or tokens. We respond within applicable legal time limits and explain any lawful refusal or limitation.

If your organization supplied the information and manages the workspace, we may coordinate the request with its authorized administrator. This does not remove rights you have under applicable law. You may also contact the relevant privacy regulator.

Where we offer optional promotional communications, you can use the unsubscribe mechanism or contact us. Necessary account and security notices may still be sent.

14. Children and sensitive information

MarketingMind is intended for adult business users and is not directed to children. We do not knowingly seek personal information from children under 18. Contact us if you believe a child has provided information so we can take appropriate steps.

The service is not a general repository for privileged legal files, medical records, identification documents, or sensitive case histories. An ordinary marketing brief does not require those materials.

15. Changes to this policy

We update the effective date when this policy changes and provide additional notice when required. Material changes to how Google data is accessed, used, or shared are explained before the new use, and we obtain renewed consent where required. Changes do not authorize retroactive use beyond the permission originally given.

16. Contact

Privacy Officer: Legal entity name: not yet set
Email: Privacy email: not yet set
Business mailing address: not yet set

For account and service support, contact Support email: not yet set.

See also our Terms of Use. When you use the YouTube integration, it uses YouTube API Services; Google's Privacy Policy and the YouTube Terms of Service also apply to the relevant Google services.