Privacy Policy

1. Introduction

MarketingOS (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data we handle. This Privacy Policy describes how we collect, use, and share information when you use our Service.

2. Our Role: Data Processor

MarketingOS acts as a data processor for client-provided lead personal data (e.g., email addresses, phone numbers, names). Our clients — the brands that use the platform — are the data controllers. We process this data solely on behalf of, and under the instructions of, our clients.

We do not sell, rent, or share lead personal data with unrelated third parties for their own purposes. All processing is governed by our Data Processing Addendum (DPA), available at /legal/dpa.

3. Information We Collect

Account information: When you register, we collect your name, email address, and organization details.

Client-provided lead data: Brands may import or generate lead records containing names, email addresses, phone numbers, and other contact information. This data is stored in the lead table and associated tables on behalf of the controlling brand.

Usage data: We collect standard web analytics (page views, feature usage) to improve the Service. This data is aggregated and does not identify individual leads.

4. How We Use Information

We use information to operate and improve the Service, respond to support requests, enforce our Terms of Service, and comply with legal obligations. Lead personal data is processed exclusively to fulfill the client's demand-generation workflows.

5. Data Export & Deletion

Clients (data controllers) may request a full exportof their brand's stored data at any time. Clients may also request the permanent deletionof their brand's data, including all lead records. Upon receiving a valid deletion request, we will remove the data from active systems and backups within thirty (30) days.

Data subjects (individual leads) may exercise their rights through the controlling brand. Brands should contact us at our support channels to initiate export or deletion requests.

6. Data Retention

We retain client-provided data for the duration of the client's active subscription. After termination, data is retained for a reasonable wind-down period (not to exceed 90 days) before permanent deletion, unless a longer retention is required by law.

7. Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, and regular security assessments. Access to lead personal data is restricted to authorized platform administrators.

8. Third-Party Services

The Service may integrate with third-party tools (e.g., email providers, analytics). We ensure that any sub-processors meet equivalent data protection standards as outlined in our DPA.

9. YouTube API Services

MarketingOS uses YouTube API Services to let clients connect their own YouTube channel and publish content to it directly from the platform. By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service.

Google's use and transfer of information received from Google APIs is governed by the Google Privacy Policy, including the Google API Services User Data Policy, including its Limited Use requirements.

You may revoke MarketingOS's access to your YouTube account at any time via the Google Security Settings page. Disconnecting your channel, or requesting deletion under Section 5 above, removes any YouTube data and access tokens we hold for that channel from our active systems.

10. Changes to This Policy

We may update this Privacy Policy periodically. The most current version will always be available at this URL. Material changes will be communicated to active clients via email.