Privacy Policy

1. Scope of This Policy

MarketGlowup, Inc. ("MarketGlowup," "we," "us," or "our") is a Delaware corporation that provides marketing software for small businesses. This policy explains what information we collect, why we collect it, how long we keep it, and how you can have it deleted.

This policy covers both:

• the marketing website at marketglowup.com; and
• the MarketGlowup application at app.marketglowup.com, including any social media or advertising account you connect to it.

Where a connected platform requires different or stricter rules, those rules are set out in Section 3 and they govern the data from that platform.

2. Information We Collect

Information you provide

• Account details — your name, email address, company name, and the credentials you use to sign in.
• Billing details — your subscription plan and billing status. Payments are processed by Stripe on Stripe-hosted pages. We do not receive or store your full payment card number.
• Content you create in the app — brand information, campaigns, drafts, media, and scheduling data.
• Communications — questions, feedback, and support requests you send us.
• Communication preferences — including whether you have asked to receive product or marketing email.

Information collected automatically

When you visit the website or use the app we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Referring website information

Information from accounts you connect

If you connect a social media or advertising account, we receive data from that platform. This is covered separately in Section 3, because the platforms impose specific limits on what we may keep and for how long.

3. Data You Connect to MarketGlowup

How connections work

You may connect social media and advertising accounts — currently LinkedIn, Facebook, and Instagram — so that MarketGlowup can publish on your behalf and report on how that content performs. Every connection is started by you and authorized on the platform's own screen.

• Official APIs only. We access these platforms only through their official APIs, under each platform's developer terms. We never scrape, and we do not accept data obtained by scraping from any other source.
• Only assets you administer. A connection covers the specific organization pages, business pages, and advertising accounts you select and administer. It does not give us your personal profile, your private messages, or your list of connections, followers, or friends as individuals.
• Access tokens. We store the access tokens the platform issues, encrypted, and use them only to carry out actions you have asked for. You can disconnect at any time in MarketGlowup, or revoke our access from the platform's own settings. Either one stops all further access immediately.
• Never used for advertising or enrichment. We never use data about individual members or users of a connected platform for advertising, ad targeting, audience or custom-audience list building, sales prospecting, CRM enrichment, resale, or training machine learning models. We do not export it to anyone — including to you.
• The shortest period wins. Where more than one retention period in this policy could apply to the same data, we apply the shortest.
• Immediate deletion on revocation or member request. If a platform tells us our access has been revoked or terminated, or if a member of that platform asks us to delete data about them, we delete the affected data immediately, without needing a further request from you.

LinkedIn data

When you connect a LinkedIn organization to MarketGlowup, we access it through LinkedIn's official APIs under LinkedIn's API Terms of Use. We never scrape LinkedIn, and we do not accept LinkedIn data obtained by scraping from any other source.

What we store, and for how long. We retain the content of your organization's posts — text, media, and analysis we derive from them — for six months, after which it is permanently deleted along with everything computed from it. Aggregate performance metrics (impressions, clicks, engagement counts, follower counts, page views, advertising spend) are retained for one year. LinkedIn identifiers for your organization, posts, campaigns, and ad accounts are retained indefinitely so your historical reporting stays connected. Where more than one retention period could apply, we apply the shortest.

What we do not store. We do not store the text of comments or reactions made by LinkedIn members, and we do not store the names, photos, or profile information of members who interact with your posts. We retain only aggregate counts. We do not build a profile of any LinkedIn member, and we never use LinkedIn member data for advertising, ad targeting, audience list building, sales prospecting, or CRM enrichment. We do not export LinkedIn member data — to anyone, including to you.

Lead form data. Where you run LinkedIn lead generation campaigns, the responses collected by your lead forms are stored only under your account and are never combined with any other customer's data. We permanently delete them within ten days of your request or of your account closing.

Deleting your LinkedIn data. You can delete all LinkedIn data we hold for your organization at any time — see Section 9. Deleting your MarketGlowup account deletes all LinkedIn data associated with it. If a LinkedIn member asks us to delete their data, or if our access is revoked or terminated, we delete the affected data immediately and without needing a further request.

Meta (Facebook and Instagram) data

When you connect a Facebook Page or an Instagram professional account to MarketGlowup, we access it through Meta's official Graph API under the Meta Platform Terms. We never scrape Facebook or Instagram, and we do not accept Meta data obtained by scraping from any other source. We act only on Pages and accounts you administer.

What we store, and for how long. We retain the content of posts published or scheduled through MarketGlowup — text, media, and analysis we derive from them — for six months, after which it is permanently deleted along with everything computed from it. Aggregate performance insights (impressions, reach, engagement counts, follower and follower growth counts, profile views, advertising spend) are retained for one year. Meta identifiers for your Page, Instagram account, posts, campaigns, and ad accounts are retained indefinitely so your historical reporting stays connected. Where more than one retention period could apply, we apply the shortest.

What we do not store. We do not store the text of comments or reactions made by Facebook or Instagram users, and we do not store the names, photos, or profile information of people who interact with your Page or account. We retain only aggregate counts. We do not build a profile of any Facebook or Instagram user, and we never use Meta user data for advertising, ad targeting, custom or lookalike audience building, sales prospecting, or CRM enrichment. We do not export Meta user data — to anyone, including to you.

Lead ad data. Where you run Meta lead generation ads, the responses collected by your lead forms are stored only under your account and are never combined with any other customer's data. We permanently delete them within ten days of your request or of your account closing.

Deleting your Meta data. You can delete all Facebook and Instagram data we hold at any time — see Section 9, or the standalone instructions at marketglowup.com/data-deletion. Deleting your MarketGlowup account deletes all Meta data associated with it. If a Facebook or Instagram user asks us to delete their data, or if our access is revoked or terminated, we delete the affected data immediately and without needing a further request.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Publish, schedule, and report on content at your direction
• Send you product and billing notifications, and — if you have asked for them — marketing communications
• Respond to your inquiries and provide customer support
• Analyze aggregate usage patterns to improve the website and the app
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal obligations

We do not use data from your connected platform accounts for any purpose other than delivering the Service to you, subject to the limits in Section 3.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as described here:

• Service providers — vendors who help us run the Service, including hosting and infrastructure providers, Stripe for payments, email delivery providers, analytics providers, and AI model providers that process content you create or ask us to generate. They may use the data only to provide their service to us. We do not send data about individual members or users of a connected platform to AI model providers.
• Legal requirements — where required by law or in response to valid legal process.
• Business transfers — information may transfer as part of a merger, acquisition, or sale of assets. Any acquirer remains bound by this policy for data collected under it.

We never share data from one customer's connected accounts with another customer, and we never combine one customer's connected data with another's.

6. How Long We Keep Data

Data from connected platform accounts is retained for the periods set out in Section 3, and those periods govern.

• Account and content — kept while your account is active. When you close your account we delete it and the content in it.
• Billing and tax records — kept for as long as applicable law requires us to keep them, which may be longer than the life of your account.
• Website analytics and logs — kept in aggregate or de-identified form.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Access tokens for connected accounts are encrypted at rest and are accessible only to the parts of the Service that need them. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

You have the right to:

• Access, correct, or delete your personal information
• Receive a copy of the data you provided to us
• Object to or restrict certain processing
• Opt out of marketing communications at any time
• Request information about how your data is processed
• File a complaint with your data protection authority

We do not sell personal information as that term is defined by the California Consumer Privacy Act, and we will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us at privacy@marketglowup.com.

9. Deleting Your Data

You can delete the data we hold at any time. Full instructions are also published at marketglowup.com/data-deletion.

Deleting data from one connected account

• In the app, go to Settings → Connections and choose Disconnect and delete data on the connection. This permanently deletes the stored content, derived analysis, and metrics for that organization, Page, or account.
• Or email privacy@marketglowup.com with the name of the LinkedIn organization, Facebook Page, or Instagram account. We will confirm and complete the deletion within 30 days.

Deleting your whole account

Deleting your MarketGlowup account deletes all data from every connected account associated with it.

Requests from platform members and users

If a LinkedIn member, or a Facebook or Instagram user, asks us to delete data about them, we delete the affected data immediately rather than within the 30-day window above. The same applies if a platform notifies us that our access has been revoked or terminated.

10. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the website and app are used. You can control cookie settings through your browser preferences; blocking some cookies will prevent parts of the app from working.

11. Third-Party Links

Our website and app contain links to third-party websites, including the social platforms you connect. We are not responsible for the privacy practices of these external sites, and we encourage you to review their privacy policies.

12. Children's Privacy

Our services are not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

13. International Data Transfers

MarketGlowup is operated from the United States, and the information we collect is processed and stored there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards, including the European Commission's standard contractual clauses, for such transfers.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date at the top of this page. Material changes affecting data from connected platform accounts will also be notified in the app.

15. Contact Information

If you have any questions about this privacy policy or our privacy practices, please contact us: