Privacy policy

1. Who we are

AI Ekip Agentic Marketing (“we”, “us”) is a paid advertising management service and software platform operated by [AI Ekip legal company name], [registered address] (“AI Ekip”). This policy covers this website (marketing.aiekip.com), the client platform at marketing.aiekip.com/app, and the services we provide to our clients.

For data we process on behalf of our clients (for example, the leads their ads generate), our client is the data controller and we act as their processor under our agreement with them. For our own website visitors, prospects and client contacts, AI Ekip is the controller.

2. Data we collect

Website visitors and prospects

• Contact and audit requests: name, email, company, website, monthly ad budget and your message.
• Campaign information: if you arrive from an ad or link, the UTM parameters and ad click IDs in the address (for example utm_source or gclid), the first page you visited and the referring site. These are stored in your browser for the session and sent only if you submit a form.
• Technical data: our hosting provider keeps standard server logs (IP address, browser, pages requested) for security and troubleshooting.

Clients and platform users

• Account data: name, email, role, password (stored only as a secure hash) and login activity.
• Data from connected accounts: described in section 3.
• Leads: the details people submit through your ad lead forms and website forms (typically name, email, phone and form answers), the campaign or ad that brought them, and the status and notes your team adds.
• Billing data: invoicing contact and company details. Card payments, if any, are handled by our payment provider; we don't store full card numbers.

3. Connected ad accounts and OAuth access

To manage and report on your advertising, you can connect accounts from Google (Google Ads, Google Analytics 4, Search Console), Meta (Facebook and Instagram ads, Lead Ads), LinkedIn, TikTok, Microsoft Advertising, Shopify and HubSpot. You connect each one through that platform's own sign-in and consent screen (OAuth). We never see or store your password for these platforms.

Depending on the platform and the permissions you approve, we access:

• Account and campaign structure: ad accounts, campaigns, ad groups or ad sets, ads, budgets, status and settings.
• Performance data: spend, impressions, clicks, conversions, conversion value and similar metrics, by day.
• Lead form submissions: leads from Meta Lead Ads, Google Ads lead forms and LinkedIn Lead Gen Forms.
• Website and sales data: sessions, traffic sources, landing pages and key events from GA4; search clicks and impressions from Search Console; daily orders and revenue from Shopify; contacts and deal outcomes from HubSpot.
• Write access (management): where you grant it, the ability to pause or enable campaigns and change budgets. Every change goes through a change request, your approval settings and our audit log.
• Conversions you choose to send: where you switch it on, we send conversion events (for example a lead marked as won) back to Meta's Conversions API and Google Ads. Personal identifiers such as email addresses are hashed (SHA-256) before they are sent.

Access tokens are encrypted at rest. You can revoke access at any time by disconnecting the platform in our app, or in the platform's own settings: for example your Google Account permissions or Meta's Business Integrations settings. When you disconnect, we delete the stored tokens and stop syncing.

4. How we use data

• To provide the service you hired us for: managing your campaigns, showing dashboards and reports, pacing budgets, raising alerts and handling your leads.
• To follow up on leads on your behalf, where you've switched on AI follow-up through AI Ekip's AI Sales Agent.
• To generate AI summaries, insights and answers to your questions about your own data.
• To reply to audit and contact requests and to send service-related messages.
• To keep the service secure, prevent abuse and meet legal obligations.

We do not sell personal data. We do not use data from one client's accounts to benefit another client, and we do not use data from your connected accounts for our own advertising.

AI processing. To create summaries and answers, relevant data is sent to our AI model provider(s) [name provider(s), e.g. Anthropic] under terms that do not allow them to use it to train their models. AI suggestions never change a live campaign without human approval.

Legal bases (EU/UK). Performance of a contract (providing the service), legitimate interests (security, improving the service, replying to enquiries) and consent where required (for example optional cookies).

5. Google API data

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you see in our platform, we don't use it for advertising, and people at AI Ekip read it only with your permission, for security, or where the law requires.

6. Who we share data with

• Service providers that help us run the service: hosting and databases [provider], email delivery [provider], AI model providers [provider] and AI Ekip's own agent platform for lead follow-up. They act on our instructions under data protection agreements.
• The ad and business platforms you connect, only as needed to perform actions you request (for example a budget change) or conversions you choose to send.
• Authorities, where the law requires it.
• A buyer or successor, if our business is sold or merged, under the same protections.

Some providers may process data outside your country. Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses.

7. How long we keep data

• Access tokens: until you disconnect the platform or our contract ends; then deleted immediately.
• Synced ad and analytics data: while your contract is active, and deleted within 30 days after it ends, unless you ask us to export it first.
• Leads: while your contract is active, or shorter if you set a retention period or delete them. Deleted within 30 days after the contract ends.
• Audit log and invoices: as long as needed for accountability and as required by tax and accounting law (typically [X] years).
• Audit and contact requests from prospects: up to 24 months after our last contact, unless you become a client.
• Backups: deleted data may remain in encrypted backups for up to [35] days before it's overwritten.

8. Deleting your data

You can ask us to delete your data at any time, including data we received through Facebook/Meta, Google or any other connected platform.

• Disconnect a platform: in the app, open Connections and choose Disconnect. This deletes the stored access token and stops all syncing. You can also remove our app from the platform's own settings.
• Request full deletion: email hello@aiekip.com with the subject “Data deletion request”, from the email address on your account, and tell us which account or data it concerns. We confirm receipt within 5 business days and complete deletion within 30 days, except data we must keep by law, which we'll tell you about.
• If you were a lead of one of our clients (for example you filled in a form on one of their ads), you can contact that business directly, or email us and we'll pass your request to them and help them carry it out.

9. Security

We use encryption in transit (HTTPS) and at rest for access tokens, role-based access so clients only see their own data, rate-limited logins and a full audit trail of changes. No system is perfectly secure; if a breach affects your personal data, we'll notify you and the relevant authorities as the law requires.

10. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. Email hello@aiekip.com to use these rights; we'll respond within 30 days. You can also complain to your local data protection authority.

11. Cookies and similar storage

This website doesn't use advertising cookies. It stores campaign information (UTM parameters and click IDs) in your browser's session storage, which is cleared when you close the tab. The client app uses storage that's strictly necessary for signing in. If we add analytics or advertising tags later, we'll update this policy and ask for consent where the law requires.

12. Children

Our services are for businesses and are not directed at children under 16. We don't knowingly collect their personal data.

13. Changes to this policy

We'll post any changes on this page and update the date at the top. For significant changes, we'll tell clients by email before they take effect.

14. Contact us

Questions or requests about privacy: hello@aiekip.com
[AI Ekip legal company name], [registered address]
Data protection contact: [name or role, if you appoint one]