1. Who this policy is for

This policy explains how Agency of Digital Marketing ("we", "us"), which operates Agency of Digital Marketing, collects, uses, shares and protects information when you visit our websites, create an account, use the platform, or connect a social media account.

Agency of Digital Marketing is used by agencies and by the businesses they serve (our "customers") to run websites, customer records, marketing and social media posts. When a customer puts information about its own contacts or website visitors into the platform, the customer decides why and how that information is used and we process it on the customer's behalf. This policy describes how we handle it in that role; the customer's own privacy notice describes how the customer uses it.

2. Information we collect

• Account information: your name, email address, role, the agency or business you belong to, and your sign-in details. We never store passwords in readable form.
• Business and website information: business details, website content, images and files you upload, forms and settings.
• Customer records you manage in the platform: contacts, leads, bookings, messages and notes, entered by you or collected through your forms.
• Billing information: your plan, invoices and payment status. Card details are entered with our payment provider and are not stored by us.
• Messages sent or received for you through the platform: email, text message, WhatsApp and voice, with their delivery status.
• Social account connections: described in section 3.
• Usage and device information: logs, IP address, browser type, the pages and actions used, and security events, kept to run, secure and improve the service.
• Cookies and similar technologies on our own website: for security, preferences and measuring which campaigns brought a visitor (source, medium and campaign).

3. Facebook, Instagram and Threads accounts

If you choose to connect a Facebook Page, an Instagram professional account or a Threads account, we use Meta's own login and only the permissions you approve on Meta's screen. You choose which accounts to connect.

From Meta we receive and store: the id and name of the Pages and Instagram or Threads accounts you select; an access token that lets us publish for those accounts (stored encrypted, never shown to anyone, and used only to call Meta); the token's expiry date; and the result of each post we publish (its id and link). We also keep the posts you write or approve in Agency of Digital Marketing, with their text, pictures, time and status.

We do not read your private messages or friends list, we do not collect data about the people who see or react to your posts, we do not sell Meta data, and we do not use it for advertising or to build profiles. We use it only to publish the posts you or your team create and approve, and to show you their status. We send posts and tokens to Meta only to publish them.

Tokens are kept until you disconnect the account, the token ends and cannot be renewed, or you close your account. Disconnecting an account deletes its saved token at once.

4. Deleting your Facebook, Instagram and Threads data

You can disconnect any account in the platform (Social media, Accounts, Disconnect), or remove the app in your Facebook, Instagram or Threads settings. When you remove the app, Meta tells us and we delete the saved connection and the link between your Meta login and your account.

You can also follow the steps at /data-deletion or contact us. You are given a confirmation code and can check the status of the request at any time. We complete deletion within 30 days. What is deleted and what we may keep is explained at /data-deletion.

5. How we use information

• To provide, secure and support the platform and your account.
• To process payments and send invoices and service messages.
• To publish, send and schedule what you ask us to (posts, emails, messages) and to show you the results.
• To prevent abuse and fraud, enforce our terms and keep records the law requires.
• To fix problems and to develop and improve the service, using usage information that does not identify you wherever possible.

We do not sell personal information.

6. AI-assisted features

When you use an AI-assisted feature (for example drafting website text or a social post), the content you submit for that request, such as your business description, website content or instructions, is sent to an AI provider to produce a draft. We send only what is needed for the request. The providers we use today are Google, Groq and Anthropic, and they process the content under their own terms.

AI output is a draft: you review and approve it before it is published. We do not train our own models on your content.

7. Who we share information with

We share information only as needed to run the service, with:

• Hosting and infrastructure providers (our servers are hosted with OVH; Cloudflare provides DNS, security and content delivery).
• Payment processing (Stripe).
• Email delivery (Brevo), and text message, WhatsApp and voice delivery (Twilio).
• Image and media storage (Cloudinary).
• AI providers, only for the AI-assisted features you use (section 6).
• Meta, only when you connect a Facebook, Instagram or Threads account (section 3).
• Your agency: if you are a client of an agency, the agency that manages your account can see the account data its role allows.
• Authorities or other parties when the law requires it, or to protect rights and safety, and a successor if the business is sold, with notice.

These providers may only use the information to provide their service to us.

8. How long we keep information

We keep account and customer-record information while your account is open. After you close your account we delete it within 30 days, except what the law requires us to keep (for example billing records), which we keep only as long as required. Deleted information may remain in backups, which are overwritten on a rolling schedule. Access tokens are handled as described in section 3.

9. Security

We use encryption in transit, store access tokens and similar secrets encrypted, limit access by role, keep audit logs of sensitive actions, and separate each agency's and business's data. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.

10. Your choices and rights

You can ask us to give you a copy of your information, correct it, delete it, or stop using it for a purpose, and you can close your account. Depending on where you live (for example the European Union, the United Kingdom or California) you may have further rights, which we honour.

If your information was entered by a business that uses Agency of Digital Marketing (for example as a contact or a website visitor), please contact that business first; we will help it respond. You can reach us at [email protected]. We answer within 30 days. You may also complain to your local data protection authority.

11. International transfers

We and our providers may process information in countries other than yours, including the United States and Canada. Where the law requires it, we use appropriate safeguards for such transfers.

12. Children

Agency of Digital Marketing is for businesses and is not directed to children under 16. We do not knowingly collect information from children. If you believe we have, contact us and we will delete it.

13. Changes to this policy

We may update this policy. We will post the new version here with a new date, and tell account holders of material changes in advance.

14. Contact us

Agency of Digital Marketing. Privacy questions, deletion requests and rights requests: [email protected].