Privacy Policy

At Collaborative Marketing, we take your privacy seriously. This policy explains what personal information we collect when you use our platform, how we use it, and what rights you have over it. We've written it in plain English so you actually know what's going on.

1. What we collect

When you use Collaborative Marketing, we may collect the following types of information:

Account information

• Your name and email address when you create an account
• A hashed (encrypted) version of your password — we never store your actual password
• The date you created your account and the last time you logged in

Business information

• Your business name, industry, website, and location
• Your marketing budget, target audience, and campaign goals
• The types of marketing campaigns you select
• Any content or materials you share with us for campaign creation

Payment information

• Your subscription plan (Starter, Social, Outreach, Autopilot, or Agency)
• Billing dates and payment status
• Note: We never store your credit card number. All payment processing is handled by Stripe. See their privacy policy at stripe.com/privacy.

Usage information

• Your progress through our campaign setup wizard
• Campaign deliverables and monthly reports associated with your account

2. How we use your information

We use the information we collect to:

• Provide our services — run your AI marketing campaigns, create content, and manage your ads
• Manage your account — let you log in, save your progress, and resume where you left off
• Process payments — charge your subscription each month and manage billing through Stripe
• Communicate with you — send welcome emails, campaign updates, renewal reminders, and monthly reports
• Improve our platform — understand how people use our tools so we can make them better
• Comply with legal obligations — keep financial records as required by law

We do not sell, rent, or trade your personal information with third parties for their marketing purposes.

3. Who we share your information with

We only share your information with third parties in the following circumstances:

Stripe — We use Stripe to process payments. When you subscribe, your payment information is sent directly to Stripe. We receive only a customer ID and subscription status in return. Stripe is PCI-DSS compliant.

Google and Meta (Facebook) — If you are on the Outreach, Autopilot, or Agency plan, we create and manage ad campaigns on your behalf using Google Ads and Meta Ads. This requires sharing your business name, website, and campaign objectives with these platforms. You agree to Google's and Meta's respective terms of service when you sign up for these tiers.

Legal requirements — We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of others.

Business transfer — If Collaborative Marketing is acquired or merges with another company, your information may be transferred as part of that transaction. We'll notify you before this happens.

4. Data retention

We keep your data for as long as your account is active or as needed to provide you services.

• Active accounts: We retain all your campaign data, reports, and account information for the duration of your subscription.
• After cancellation: When you cancel your subscription, we keep your campaign data for 30 days. During this period, you can restart your subscription and everything picks up exactly where you left off — no re-setup required.
• After 30 days: Your data is archived. We retain basic account information (name, email, billing history) for up to 7 years as required by financial regulations. Campaign content and business information is deleted.
• Account deletion: You can request full deletion of your account and all associated data at any time by contacting us. We'll process deletion requests within 30 days.

5. Cookies

Our platform uses a small amount of browser storage (specifically localStorage) to keep you logged in between sessions. This stores an authentication token on your device — it's not a third-party tracking cookie.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics on our platform.

6. Your rights

You have the following rights over your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can update your name, email, and business information at any time through your account.
• Deletion: You can request that we delete your account and all associated data.
• Portability: You can request your data in a machine-readable format.
• Opt-out of emails: You can unsubscribe from marketing and notification emails using the unsubscribe link in any email we send. Note that some emails (like payment receipts) are required for your account and cannot be opted out of.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

7. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Lawful Basis for Processing: We process your data under the following legal bases: (a) Performance of a contract — to provide our services as described in our Terms of Service; (b) Legitimate interests — to improve our platform, prevent fraud, and communicate with you; (c) Consent — for marketing communications, which you may withdraw at any time.

Data Transfers: Your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard these transfers.

Data Protection Officer: For GDPR-related inquiries, contact our Data Protection Officer at support@collaborativemarketing.agency.

Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data is being processed unlawfully.

Data Retention: We retain personal data only as long as necessary for the purposes described in this policy. When you cancel your account, we delete your data within 30 days, except where we are required by law to retain certain records (e.g., financial records for 7 years).

8. CCPA/CPRA Rights (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:

Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.

Right to Delete: You may request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Categories of Information Collected: Identifiers (name, email), commercial information (plan, payment history), internet activity (usage logs, pages visited), professional information (business details you provide).

To exercise any of these rights, email support@collaborativemarketing.agency or use the account deletion feature in your dashboard settings.

9. AI Data Processing

Our AI features process data you provide (business information, URLs, brand data) to generate marketing content and strategies. This data is used solely to deliver our services to you. We do not use your business data to train our AI models. AI-generated content created for your account belongs to you as described in our Terms of Service.

When you use our Brand DNA Scanner or AI Chat features, the data you input is processed in real-time and is not stored beyond your active session unless you have an account and the data is saved to your campaign.

10. Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. These include:

• Passwords are hashed using bcrypt before being stored — we cannot see your actual password
• Authentication tokens expire after 30 days
• Payment processing is fully delegated to Stripe — we never handle raw card data
• Our database is not exposed to the public internet

No system is perfectly secure. If you believe your account has been compromised, please contact us immediately.

11. Children's privacy

Our service is intended for businesses and adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with their information, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. If we make significant changes that affect how we use your data, we'll notify you by email at least 14 days before the change takes effect.

Continuing to use our service after a policy update means you accept the updated terms.

13. Contact us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please reach out:

• Email: support@collaborativemarketing.agency
• Website: collaborativemarketing.agency

We'll respond to all privacy-related inquiries within 5 business days.