Privacy Policy & Data Protection

1. Introduction & Overview

AI Marketing Agent ("we", "us", "our", operating at https://aimarketingagent.in) provides an autonomous agentic AI platform designed for LinkedIn-first marketing, brand voice synthesis, editorial planning, and post generation. This Privacy Policy informs you of our policies regarding the collection, use, storage, and disclosure of personal data when you use our website, web application, and related services.

By accessing or using AI Marketing Agent (aimarketingagent.in), you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not access or use our services.

2. Google User Data Accessed, Collected & Stored

When you choose to authenticate, sign up, or sign in using your Google account ("Sign in with Google"), we request access through Google OAuth 2.0. We request only the minimal, basic authentication scopes necessary to create and manage your account:

• openid: To authenticate your session using the OpenID Connect protocol.

• https://www.googleapis.com/auth/userinfo.email: To retrieve your primary Google account email address.

• https://www.googleapis.com/auth/userinfo.profile: To retrieve your public profile name and avatar image URL.

What We Collect from Google: Specifically, we only collect and store your Google account unique user ID, your email address, your full name, and your avatar profile picture URL.

What We NEVER Access: We DO NOT request, access, read, or store any sensitive Google data. We never access your Gmail inbox, emails, contacts, Google Drive files, Google Docs, photos, search history, or Google passwords.

3. How We Use Google User Data & Personal Information

We use information collected via Google OAuth and our web application exclusively for legitimate business and operational purposes:

• Authentication & Account Management: To authenticate your identity, establish secure login sessions, and create your dedicated multi-tenant marketing workspace.

• Profile Display: To display your name and profile avatar within your workspace header and account settings.

• Platform Service Delivery: To enable you to plan editorial calendars, formulate brand voice guides, and draft LinkedIn marketing content.

• Transactional Notifications: To send important security notices, login confirmations, invoice receipts, and critical service notifications.

4. Google API Services User Data Policy & Limited Use Disclosure

AI Marketing Agent's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we affirm and commit to the following:

• No Sale of Google User Data: We do not sell, rent, lease, or trade your Google user data or personal information to third parties, advertising brokers, or data aggregators under any circumstances.

• No Advertising Use: Google user data is never used or transferred to serve targeted, personalized, or interest-based advertising.

• No Human Inspection: Human personnel are strictly prohibited from viewing or reading your private Google user data unless you provide explicit affirmative consent to resolve a specific technical support request, or as required by applicable law or security forensics.

• Permitted Transfers Only: We only transfer user information to third-party infrastructure providers (such as secure cloud database hosting via Supabase) strictly to provide or improve the core user-facing features of the application, under strict confidentiality agreements.

5. AI Processing & Zero Public Model Training Commitment

AI Marketing Agent integrates with advanced generative AI APIs, including the Google Gemini API, to assist users in synthesizing brand voice guidelines, generating viral hooks, and drafting LinkedIn posts.

We maintain an uncompromising commitment to enterprise data confidentiality: Your Google user data, brand voice guidelines, draft topics, proprietary industry insights, and marketing copy are NEVER used to train, retrain, or fine-tune public foundation AI models.

All AI API interactions are governed by commercial cloud enterprise privacy terms that prohibit third-party model training on customer inputs and outputs.

6. Data Storage, Security & Retention

We implement industry-standard administrative, technical, and physical safeguards to protect your personal data:

• Encryption in Transit: All communications between your browser, our servers, and third-party APIs are encrypted using Transport Layer Security (TLS 1.3).

• Encryption at Rest: All stored database records, user profiles, and generated marketing content are encrypted using AES-256 encryption in our PostgreSQL database infrastructure powered by Supabase.

• Multi-Tenant Row Level Security: Multi-tenant tenant data is strictly segregated using PostgreSQL Row Level Security (RLS) policies. Only authenticated users belonging to an organization can query or modify their respective workspace records.

• Data Retention: We retain personal data only for as long as your account is active, or as required to comply with our legal, accounting, and regulatory obligations.

7. Data Deletion & Revoking Google Account Permissions

We believe in complete user autonomy and data control. You have the right to request deletion of your data or revoke permissions at any time:

• In-App Account Deletion: You can delete your brands, marketing posts, and account records directly from the Settings tab in your AI Marketing Agent workspace.

• Manual Deletion Requests: You can email our dedicated privacy team at support@aimarketingagent.in with the subject line "Data Deletion Request". Upon receiving your verified request, we will permanently purge all your personal data, workspace brands, and activity logs from our production databases within 30 calendar days.

• Revoking Google OAuth Access: You can revoke AI Marketing Agent's access to your Google account at any moment by visiting Google's Third-Party Apps & Services management page at: https://myaccount.google.com/connections. Revoking access immediately prevents any future authentication calls through Google.

8. Compliance with India DPDP Act 2023 & Global Privacy Regulations

In accordance with India's Digital Personal Data Protection (DPDP) Act 2023, the European General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA):

• Right to Access: You have the right to obtain confirmation and a copy of the personal data we hold about you.

• Right to Correction: You have the right to correct inaccurate or incomplete personal data via your workspace settings.

• Right to Erasure / To Be Forgotten: You have the right to have your personal data permanently wiped from our systems.

• Right to Withdraw Consent: Where data processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

9. Contact Information & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, your Google user data, or our data handling practices, please contact us:

• Platform Name: AI Marketing Agent

• Official Website: https://aimarketingagent.in

• Privacy & Support Email: support@aimarketingagent.in

• Operating Entity: AI Marketing Agent (aimarketingagent.in)

We are committed to resolving inquiries promptly and will respond to all verified privacy communications within 48 business hours.