Privacy Policy

MarketAgencyAI LLC ("we," "us," "our," or "MarketAgencyAI") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding your data.

This Privacy Policy complies with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

We collect personal data directly from you when you use the Service:

• Account information: name, email, company name, business type, phone number
• Onboarding data: business description, industry, target audience, marketing goals (provided in the chat interface)
• Billing information: payment method, billing address, invoice history
• Service usage: generated assets, API calls, feature interactions
• Technical data: IP address, browser type, operating system, device type, page views, referring URL
• Cookies: session authentication, theme preference (see our Cookie Policy)

We collect data in the following ways:

• Directly from you when you complete the onboarding chat
• Automatically through cookies and similar tracking technologies (session only)
• From third-party payment processors when you enter billing information
• From analytics and monitoring services integrated into the platform

We use your personal data for the following purposes:

• Provide the Service: generate marketing assets, configure your GoHighLevel account, deliver videos via HeyGen
• Billing and payment: process subscriptions, issue invoices, prevent fraud
• Customer support: respond to inquiries, troubleshoot issues, manage your account
• Product improvement: analyze usage patterns, improve AI models and features, conduct A/B testing
• Legal compliance: enforce our Terms of Service, respond to legal requests, prevent illegal activity
• Security: protect against fraud, unauthorized access, and other security threats

We share your personal data with the following sub-processors to deliver the Service:

• Azure OpenAI: processes your business description and onboarding data to generate content via LLM inference. Processing occurs in US data centers.
• HeyGen: generates video content and welcome videos from your scripts. Video data may be stored in HeyGen systems.
• Cloudflare: hosts the MarketAgencyAI platform, handles edge caching and DDoS protection. Your traffic is proxied through Cloudflare servers.
• GoHighLevel: provisions and configures your marketing automation account. Your customer data and generated assets are synced to GoHighLevel.

Each sub-processor is bound by its own privacy policy and data processing agreement. You may request an updated list of sub-processors at any time by emailing privacy@marketagencyai.com.

We do NOT:

• Sell personal data to advertisers or third parties
• Share data with marketing or analytics companies for targeted advertising
• Use cookies for cross-site tracking
• Rent or lease your data
• Share data with unaffiliated third parties for their own marketing purposes

GDPR Rights (EU residents):

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data ("right to be forgotten")
• Right to restrict processing
• Right to data portability (receive your data in machine-readable format)
• Right to object to processing
• Right to withdraw consent at any time

CCPA Rights (California residents):

• Right to know what data is collected
• Right to delete personal data
• Right to opt-out of the sale of personal data (we do not sell data)
• Right to non-discrimination for exercising CCPA rights

Opting Out of Product Improvement:

If you do not want your data used to improve our platform or train our AI models, email privacy@marketagencyai.com with "OPT-OUT: PRODUCT IMPROVEMENT" in the subject line.

To exercise any of these rights, contact privacy@marketagencyai.com with your request. We will respond within 30 days.

We retain your personal data for as long as your account is active. After account closure or cancellation:

• Active account data is retained for 90 days for service recovery and support
• After 90 days, personal data is deleted or anonymized, unless retained for legal compliance
• Backup copies are deleted within 180 days
• Data may be retained longer if required by law (tax, accounting, or fraud prevention)

MarketAgencyAI is based in the United States. Your personal data is processed and stored in the US. If you are accessing the Service from outside the US, we rely on:

• Standard Contractual Clauses (SCCs): we have executed SCCs with our processors to ensure adequate protection of personal data transferred from the EU
• Adequacy Decisions: if applicable, we rely on adequacy findings from relevant authorities

By using the Service, you consent to the transfer of your personal data to the United States and processing under US law.

The Service is intended for business users 18 years old and above. We do not knowingly collect personal data from children under 18. If we become aware that a child under 18 has provided personal data, we will delete it immediately and notify the parent or legal guardian.

We implement industry-standard security measures to protect your personal data:

• In Transit: all data transmission uses TLS 1.2 encryption (HTTPS)
• At Rest: sensitive data is encrypted in our database
• Secrets Management: API keys and credentials are stored in Cloudflare Worker encrypted environment variables, never in code or logs
• Access Control: only authorized employees with a business need can access personal data
• Monitoring: we monitor for unauthorized access and suspicious activity

However, no method of transmission over the internet or storage is completely secure. We cannot guarantee absolute security.

We may update this Privacy Policy at any time. Material changes will be communicated via email at least 30 days before taking effect. Continued use of the Service after the notice period constitutes acceptance.

For privacy questions, data requests, or to exercise your rights, contact:

privacy@marketagencyai.com

MarketAgencyAI LLC
Delaware, USA