MarketingOS Privacy Policy

MarketingOS may process information you provide, information created through your use of the service, and information received from services you connect. This may include account identifiers, connected-account metadata, ecommerce product data, campaign content, uploaded assets, generated copy and images, OAuth credentials, and publishing metadata.

Shopify connections may provide product and public storefront data. Meta and TikTok connections may provide OAuth tokens, account identifiers, granted permissions, and publishing results. Klaviyo configuration may include a server-side private API key, account and list metadata, campaign identifiers, and email sync or send status. The information available depends on the provider and permissions you approve.

OAuth access and refresh tokens are stored server-side and used only to access connected services on your behalf. Token values are not displayed publicly. MarketingOS may refresh, rotate, validate, or revoke credentials as needed to maintain or disconnect an authorized integration.

We process campaign plans, social and email copy, schedules, product details, uploaded files, creative briefs, generated assets, approval status, and publishing metadata to provide the workflows you request.

Information may be used to:

• operate, maintain, and improve MarketingOS;
• connect and manage authorized third-party services;
• create, organize, preview, and publish campaign content;
• provide account, token-health, and publishing status;
• protect service integrity and troubleshoot errors; and
• comply with applicable legal obligations.

Campaign information, product details, instructions, and selected assets may be sent to AI service providers to generate or transform copy, images, prompts, or other requested output. Do not submit sensitive information that is unnecessary for the requested task. Generated output and related inputs may be stored as part of your MarketingOS workspace.

MarketingOS may interact with Meta, TikTok, Shopify, Klaviyo, OpenAI, and cloud, database, or storage providers used to operate the service. These providers process information under their own terms and privacy practices. MarketingOS sends information to connected platforms only as needed to perform authorized operations.

Information is stored using server, database, and cloud services supporting MarketingOS. Reasonable technical and organizational measures are used to protect information, but no system can guarantee absolute security. Users are responsible for protecting their own account access and connected-provider accounts.

Information may be retained while needed to provide MarketingOS, maintain connected workflows, resolve disputes, enforce agreements, and satisfy applicable requirements. Retention periods may vary by data type and operational need. Connected providers may retain data under their own policies.

You may choose what content to submit and which supported services to connect. You may disconnect supported accounts through MarketingOS or the provider’s account controls. Disconnecting prevents future authorized access but may not automatically remove campaign records, publishing history, or information retained for legitimate operational or legal purposes.

MarketingOS uses cookies and similar session data for essential functions such as maintaining sessions, protecting OAuth flows against request forgery, and associating callbacks with the correct workspace. These values may be restricted to server access and configured with browser security attributes where appropriate.

This policy may be updated as MarketingOS and its integrations evolve. The effective date will be revised when changes are published. Continued use after an update means the revised policy applies from its stated effective date, subject to applicable law.

Privacy questions or requests may be sent to support@getmarketingos.app.