Privacy Policy

Last updated October 20, 2026.

The data controller for the purposes described in this policy is the administrator of the marketingagents.ai service. References to we, us, and our refer to the administrator of the marketingagents.ai service. Contact [email protected] for privacy questions or to exercise your rights.

MarketingAgents is a B2B subscription service. Specialized AI marketing agents prepare deliverables using briefs, workspace content, and authorized integrations. Customers review and approve the work. This policy covers personal data connected with running the website, accounts, subscriptions, support, and service security.

For personal data that a business customer supplies for processing on its instructions, that customer determines the purpose and lawful basis of the marketing work. We process that data on the customer's behalf to provide the service. Contact the relevant customer about its own campaigns or audience data. We assist with requests concerning data processed on that customer's behalf as applicable law requires.

The data involved depends on what you provide, the work you request, and the integrations you authorize. Do not place passwords, payment credentials, or unnecessary sensitive personal information in a brief, deliverable, preview input, or support message.

• Account data includes your email address, password in protected form, account verification events, account settings, and subscription status. Signup uses an email address, a password, and a 6-digit code sent by email.
• Workspace data includes briefs, brand context, uploaded or entered content, task instructions, deliverables, edits, approval decisions, and associated work history. It may include personal data contained in material you submit.
• Integration data includes connection details, access and refresh tokens where applicable, authorized scopes, and information read from connected marketing tools through official APIs.
• Homepage preview data includes inputs such as a site URL, the requested agent run, generated output, and technical information needed to operate the preview and its daily visitor limit.
• Technical data includes IP addresses, request and error information, device and browser characteristics, security events, and service activity logs. Cookie information is described in the Cookie Policy.
• Billing data includes plan choice, billing interval, charge dates, amounts, payment status, transaction references, and records of checkout acceptance. Payment instrument details and bank authentication records are held by the payment operator.
• Support data includes the account email, your message, the issue reported, and relevant records provided to resolve account, billing, data, or security requests.

We receive data directly from you, from authorized workspace activity, from connected services through the permissions you grant, and from the payment operator about transaction outcomes. A site URL or public marketing source may contain personal data even when publicly accessible.

Where the GDPR or a similar law requires a legal basis, we use the basis appropriate to the specific purpose. We do not treat acceptance of the Terms of Use as blanket consent to all processing.

Contract is the basis for creating and verifying your account, providing requested agent work, maintaining workspaces, processing authorized integration requests, managing subscriptions, and responding to service support requests. Processing must be necessary to provide the service you request, rather than merely convenient for unrelated purposes.

Legitimate interest supports protecting accounts, preventing abuse, enforcing reasonable usage controls, diagnosing faults, maintaining service reliability, and understanding service use through analytics without cookies. We consider the necessity of this processing and its effect on your rights. You can object where processing relies on legitimate interest.

Legal obligation supports required accounting records, tax records, responses to binding legal demands, and compliance with applicable data protection duties. We retain only the information relevant to the obligation and limit its use accordingly.

Consent applies where the law requires your choice for a particular activity. We explain the activity when requesting consent, and you may withdraw it through the indicated control or [email protected]. Withdrawal does not affect processing that was lawful before withdrawal. Workspace content processed on a customer's instructions follows that customer's lawful basis and applicable processing terms.

MarketingAgents uses leading AI models to generate requested deliverables. Prompts can include task instructions, relevant brief details, source material, and data retrieved through an authorized integration. Outputs and review decisions become part of the relevant workspace and work history.

Customer data is not used to train our agents. AI model providers process prompts on our behalf without training on customer data. Providing context for a requested task is part of delivering the service and does not mean that context becomes training material.

AI output may contain inaccurate statements or personal data inferred incorrectly from source material. Review output before approval or publication, and correct or remove inappropriate personal information. We do not use agent output to make decisions about individuals that produce legal or similarly significant effects without human involvement. Customers must not use the service to bypass safeguards required for such decisions.

You choose which supported tools to connect and authorize access through official APIs. The information read depends on the granted scopes and the task requested. Connection tokens enable that access and are treated as credentials, rather than ordinary brief content.

Use only accounts and data you are authorized to connect. Disconnect an integration or revoke authorization through the relevant tool when access is no longer needed. Revocation stops further authorized access through that connection but does not automatically erase information already included in deliverables, logs, or records that must be retained.

The Ads Agent has read-only access. It analyzes advertising information and prepares recommendations without changing campaigns or budgets. Other supported actions involving a connected destination depend on the integration and customer approval. The connected service also handles information under its own terms and privacy policy, which you should review before authorizing access.

Access is limited to the data needed for the relevant function. Service providers process information on our behalf under appropriate confidentiality, security, and data protection requirements. We describe recipients by category.

• The hosting provider processes website, account, workspace, integration, and technical information needed to store and operate the service.
• The payment operator processes checkout and transaction information, payment instrument details, and bank authentication records. It may act independently for its own payment compliance obligations.
• The email delivery provider processes addresses and message content needed for verification codes, account notices, billing communications, and support correspondence.
• AI model providers process task prompts and related context on our behalf without training on customer data.
• Providers of analytics without cookies process technical service information for service measurement without advertising or tracking cookies.

Information is also available to authorized users within the relevant customer workspace according to their access. An approved action may send content to a connected destination selected by the customer. Disclosure required by a binding legal obligation is limited to the relevant competent authority and information legally required. We do not make customer data available for a provider's unrelated advertising purposes.

Service providers may process data outside the country where you or your business are located. An international transfer can occur when information is stored abroad or accessed remotely from another jurisdiction. Data protection rules may differ between those places.

Where applicable law requires transfer safeguards, we use an adequacy decision or appropriate contractual safeguards, such as standard contractual clauses, together with additional measures where needed. We assess the relevant transfer context and apply safeguards to the particular processing. Contact [email protected] for information about safeguards relevant to your data and how to obtain an appropriate copy, subject to protection of confidential information.

We retain personal data for the purpose for which it was collected and for applicable legal requirements. Retention depends on the category of information, the account relationship, an outstanding request or dispute, and whether the information remains necessary. We do not apply indefinite retention to all customer content.

Account and workspace information is kept while needed to provide the subscription and manage the account. After an account deletion request or the end of the relationship, information is deleted or anonymized when it is no longer needed, subject to legal retention duties and unresolved disputes. Subscription cancellation stops renewal and does not itself request account deletion.

Integration tokens are retained only while needed for the authorized connection and its secure operation. Preview inputs and technical logs are kept for service delivery, abuse prevention, troubleshooting, and relevant security investigations. Support correspondence is kept while needed to handle the request and related accountability obligations.

Billing, purchase acceptance, and transaction records may outlast workspace content because accounting duties or payment disputes require them. Backup copies follow their retention cycle and are not used to restore deleted data into ordinary service use. Where deletion is delayed by a legal requirement, retained information is restricted to that purpose.

Depending on your location and the applicable law, including the GDPR, you may request access to personal data, correction of inaccurate information, deletion, restriction of processing, or a portable copy of eligible data. You may also object to processing based on legitimate interest and withdraw consent where consent is the basis.

Email [email protected] with the right you wish to exercise and enough account context to identify the relevant data. We may verify your identity using proportionate information and confirm your authority over a workspace. Do not send a password, verification code, or complete payment card number. We respond within the period required by applicable law.

Rights are subject to legal conditions. For instance, accounting records may need to be retained after a deletion request, and a workspace export must respect other people's rights. If we cannot fulfill all or part of a request, we explain the applicable reason and available ways to challenge the decision. You may complain to the relevant data protection supervisory authority.

Where US state privacy laws apply, including the CCPA and CPRA, eligible residents may request disclosure of the categories and specific pieces of personal information handled, access, correction, deletion, and portability. Applicable rights may also include opting out of the sale or sharing of personal information and limiting certain uses of sensitive personal information.

We do not sell personal data. We do not share personal data for cross-context behavioral advertising, and we do not use advertising or tracking cookies. An applicable opt-out request or recognized opt-out preference signal is respected as required by law. We do not use sensitive personal information to infer characteristics for advertising.

Submit requests to [email protected]. An authorized agent may submit a request with evidence of authority, and identity verification may still be needed. We do not discriminate against someone for exercising an applicable privacy right. Where state law provides an appeal, reply to the decision at the same address to request review and information about further remedies.

The service is intended for business users and is not directed at children. We do not knowingly collect children's personal data for their use of the service. If you believe a child has supplied information, contact [email protected] so the circumstances can be reviewed and the data removed where appropriate.

We use technical and organizational measures appropriate to the processing, including encryption in transit and at rest, access controls, and security monitoring. No system can eliminate every risk. Protect account credentials, limit workspace permissions, and report suspected unauthorized access promptly. Send security reports to [email protected] without including live credentials or unrelated personal data.

We update this policy when processing practices or legal requirements change. The date above identifies the current version. Material changes are communicated through an appropriate account or service notice, and consent is requested when required. A policy update does not remove rights that mandatory law provides.

For privacy requests, information about processing on a customer's behalf, or questions about this policy, contact [email protected]. The Contact page also explains the support route available inside a signed-in account.