How this policy applies
This policy covers the website, account administration, audits, subscriptions and related support communications. We act as controller for information used to operate accounts and the website. When we process personal information from customer-connected accounts on the customer's instructions, the customer determines the purposes and we act as processor or service provider as applicable.
Customers are responsible for the notices, permissions and lawful basis needed to connect data or submit audit inputs. A data processing agreement is available on request at [email protected]. It addresses customer data processing responsibilities. Third-party platforms you connect have their own privacy terms, which govern their separate collection and use of information.
Data you provide and connect
We collect information you submit to create an account, verify access, request an audit or ask for support. Once you authorize a connection, we read permitted data from that account to provide the analysis you request. We do not use connections to change campaigns or settings in the source platform.
- Account information includes your email, password hash, verification codes and related verification records.
- Audit inputs include the submitted URL, business type, advertising channels and spend band, along with the public HTML of the audited URL and inspected public pages.
- Connected account data includes authorized advertising, analytics, commerce and CRM information, such as campaign performance, events, revenue and deal records where permitted.
- Uploaded data includes information you choose to provide through CSV upload.
- Support information includes your message, account reference and any relevant information you choose to send.
- Subscription information includes plan, billing status, transaction references and invoice records. Payment processing providers handle payment details as needed to process charges.
Do not send passwords, live connection tokens or unrelated personal records to support. Submit only data necessary for the service and within your authority to provide. Read the marketing data analysis answers for context on connections and analysis.
Why personal information is used
We use personal information to deliver requested audits and analysis, maintain account access, support subscriptions and respond to questions. We also use relevant service records to protect the service, investigate misuse and meet legal obligations. Each use is limited to its purpose and the information needed to carry it out.
- Authenticate users, verify email ownership and maintain account security.
- Fetch public audit pages and present tracking findings with evidence and fix steps.
- Read authorized connected data and provide monitoring, attribution, reports and AI analyst answers.
- Process billing, maintain subscription records and provide invoices.
- Send account, security, billing and requested service communications.
- Respond to support messages and privacy requests.
- Understand website use through permitted analytics and improve service reliability.
- Investigate abuse, resolve disputes and comply with applicable legal obligations.
We do not use customer information to make campaign changes. Visit marketing data security for an explanation of read-only access and data protection controls.
GDPR grounds for processing
Where the GDPR applies, we rely on the legal basis appropriate to each processing purpose. Contract performance supports providing the service you request. Legal obligations support required financial and compliance records. Legitimate interests support proportionate security and service administration. Consent supports optional analytics where required and can be withdrawn without affecting earlier lawful processing.
For legitimate interests, we consider the purpose, necessity and effect on your rights. You may object to processing based on those interests. Customer-connected personal data is processed under customer instructions and the applicable data processing agreement. The customer remains responsible for identifying a valid basis for collecting that data and making it available for analysis.
How long information is kept
Audit results are retained for 30 days. Account data is retained while the account is active. Analysis history follows the subscription window, with 6 months on Starter, 24 months on Growth and 36 months on Scale. Yearly Scale includes custom retention. These history windows do not require keeping every account record for that duration.
Audit inputs and public HTML are used for the requested inspection and associated findings, with identifiable audit material removed when its audit retention purpose ends. Verification information is retained only as needed to verify access and maintain security. Technical and analytics records are retained only as needed for their stated purposes and applicable legal obligations.
Cancellation stops renewal and preserves access through the paid period. After the period ends, account and connected data are deleted, subject to limited retention needed for legal obligations, billing disputes or security. You can request earlier deletion. Records retained for those limited purposes are restricted and deleted when no longer needed. Where a backup must expire through its retention cycle, deleted data is not returned to active use.
Compare the analysis windows on the marketing analytics platform page. Send deletion questions to [email protected], including your account email and the data involved.
Who processes information for the service
Service providers process information needed to operate the service under appropriate confidentiality and data protection obligations. Recipient categories are hosting, email delivery, payment processing and analytics. They receive information relevant to their function. We do not authorize them to use customer personal information for unrelated advertising or to sell it.
- Hosting supports computing, storage and service delivery.
- Email delivery supports verification and account or service communications.
- Payment processing supports payments, billing status and invoices.
- Analytics supports understanding website use where permitted.
Information may also be disclosed when legally required, to respond to valid legal process or to protect lawful rights and service security. If a service transfer requires transferring records, the recipient must respect applicable privacy obligations and we provide notice where required. Customer-requested reports and exports are disclosed to the recipients the customer authorizes.
Processing across national borders
Personal information may be processed in countries other than the country where you are located, including the United States. Privacy laws can differ between locations. Where GDPR or similar rules apply to a restricted transfer, we use a lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, as applicable.
Where contractual safeguards are used, we assess relevant transfer risks and use supplementary safeguards where required. You can request information about the safeguards applicable to your data by emailing [email protected]. We may limit disclosure of confidential security details while providing information needed to understand the protection of your personal information.
Rights under the GDPR
Where the GDPR applies, you may request access to, correction of or deletion of your personal information. You may also request restriction, object to processing and request portability where applicable. These rights have legal conditions and exceptions. Withdrawing consent does not affect processing that was lawful before withdrawal or processing supported by another valid basis.
Email [email protected] to exercise a right. We may request proportionate information to verify your identity and locate the relevant records. If data is processed on a customer's instructions, we direct the request to that customer or assist them as appropriate. You may complain to your competent data protection supervisory authority.
Rights under the CCPA and CPRA
Where California privacy law applies, you may request to know and access the personal information collected about you, correct inaccurate information and request deletion, subject to legal exceptions. You may also have rights concerning sensitive personal information, sale and sharing. We do not sell personal information or share it for cross-context behavioral advertising.
The categories of information, sources, purposes and recipients are described in this policy. We do not use or disclose sensitive personal information beyond permitted service, security and legal purposes. You may use an authorized agent, subject to reasonable verification of identity and authority. We do not discriminate against you for exercising a privacy right.
Submit requests to [email protected]. We respond within applicable legal deadlines and explain any restriction or exception. Residents of other US states may have similar rights, including a right to appeal a denied request. Where an appeal right applies, reply to the decision and ask for review.
Protecting account and customer data
We use encryption in transit through TLS, encryption at rest and access controls to protect service information. Connections use read-only access, while roles and permissions on Scale support team access management. No service can guarantee absolute security. Protect your credentials, review account access and avoid sending sensitive records through support email.
SSO using SAML is included on yearly Scale. Security concerns and processing questions can be sent to [email protected]. If a personal information incident requires notification under applicable law or a data processing agreement, we provide the required notices. Review marketing data security for retention and responsible disclosure information.
The service is intended for businesses
The service is designed for business users and is not directed to children. We do not knowingly collect personal information from children for account creation or marketing. If you believe a child has provided personal information through the service, contact us so we can assess the situation and remove information where required.
Customers must avoid submitting children's personal information unless they have an appropriate lawful basis and the service use is authorized under applicable terms and law.
How changes are communicated
We may update this policy when service practices or legal requirements change. The date on this page identifies the latest update. For material changes, we provide notice through the service or by email where required, and seek consent where the law requires it before applying a new use of information.
The current policy describes current processing practices. Updates do not remove privacy rights or authorize uses that require consent without obtaining that consent.
How to raise a privacy question
Contact [email protected] with questions about this policy, a data processing agreement or a privacy request. The operator is the administrator of the datamarketer.com service. Include your account email if applicable, the information involved and the outcome you seek. Do not include passwords, verification codes or unnecessary personal records.
The Terms of Service explain account responsibilities and subscriptions. You may request clarification before submitting an audit or connecting data.