Privacy Policy

What we collect. Account details (email, business name), the business data you submit for analysis, data we retrieve from third-party accounts you explicitly connect, and usage/operational logs needed to run and secure the service.

How we use it. To provide the product, run the AI pipeline on your data, meter usage against your plan, secure the platform, and email you about your account. We do not sell your data.

Processors. We use infrastructure and AI providers (hosting, database/auth, and LLM inference) to operate the service; your data is processed by them solely to deliver it.

Connected accounts

What connecting does. You may connect third-party marketing accounts — Google (Search Console, Analytics, and in future Business Profile and Ads), Meta, LinkedIn and TikTok. Connecting is always initiated by you, is never required to use the product, and can be undone at any time.

We only read. We retrieve performance measurements — impressions, clicks, sessions, rankings and similar metrics — so the product reports what your marketing actually did instead of estimating it. We do not post, publish, edit, delete or change anything in a connected account, and we never run or modify advertising campaigns.

Where a permission looks larger than what we do. Some providers publish no read-only permission for the data we need. Google Business Profile offers only a single manage permission, and LinkedIn page analytics are available only under a permission labelled “manage organization pages.” Where that is the case, the provider's consent screen will describe more access than we use. Our commitment is unchanged: we read, and nothing else. For Google Ads you can additionally grant our connection the Read only role in your Google Ads account, which makes any change technically impossible rather than merely promised.

How credentials are stored. Access and refresh tokens are encrypted with AES-256-GCM before they are written to our database, are bound to your account so they cannot be used in another tenant's context, and are never displayed in the product, logged, or sent to any third party.

Revoking. Disconnect any provider from the Connections screen in the product; we delete the stored credential and, where the provider supports it, revoke it upstream too. You can also revoke us directly at myaccount.google.com/permissions for Google, or in the equivalent settings for other providers. Revoking stops all future retrieval immediately.

Google user data

What we access. With your consent we read Search Console performance data for sites you select and Google Analytics reporting data for properties you select, plus your Google account's basic identity (name, email address) solely to label the connection so you can see which account is connected.

Limited Use. Perpetual Marketing's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer or sell Google user data to third parties for advertising, market research or credit assessment; we do not use it to serve advertisements; we do not allow humans to read it except with your explicit consent, where required for security or to comply with law, or where the data has been aggregated and anonymised; and we do not use Google user data to develop, improve or train generalised AI or machine-learning models.

Retention. Metrics we retrieve are kept while your account is active so the product can show change over time. Disconnecting a provider deletes its stored credential immediately; deleting your account deletes the retrieved data.

Your rights: a copy, and deletion

Get a copy. In the app, open Account → Your data. Download my data gives you your own records: your account, the businesses you belong to, invitations sent to you or by you, and what you wrote in them. Download business data gives an owner or admin everything we hold for that business, one file per kind of record (files uploaded for Local Services verification are listed; ask us for the files themselves). Passwords and the secrets that would let someone act as you (sign-in links, connected-account tokens) are never in a download.

Delete a business. Its owner can delete a business from the same screen. Everything in it is deleted at once, for everyone who uses it, and cannot be brought back. If the business has an active subscription, cancel it in Billing first; we never cancel a subscription for you.

Delete your account. You can close your account from the same screen. We delete your sign-in, the businesses you own on your own, and your place in the businesses you belong to. If you own a business that other people also use, delete that business first, or ask us to hand it over to one of them. Anything you wrote inside a business you don't own stays with that business, which is responsible for it; it no longer points to your email address.

By email. You can also ask us at hello@perpetual.marketing to send you a copy, correct something, or delete your data. We confirm the request comes from the account holder before acting, and answer within 30 days.

What we keep, and for how long

While you use the service. We keep your account and your businesses' data until you delete them, as described above.

Customer reviews we analyse. Reviews you paste in, and reviews we buy from our review-data provider, are kept with the business they were gathered for and deleted with it. If we read reviews through a Google Business Profile connection, we keep them for no more than 30 days, as Google's terms require. We never store review text from Google Maps.

Backups. Our database provider keeps backups of the whole database for up to 7 days. Something you delete disappears from the service at once, but can remain in those backups until they expire. We use them only to recover from a failure, and if we ever have to restore one, we delete again whatever had already been deleted.

Payments. Stripe, our payment processor, keeps invoices and payment records for as long as tax and accounting law require. Deleting your account here does not delete them there; you can still download your invoices through Billing until you close your account.

What we keep after a deletion. A short record that a business was deleted: when, by which account, and how many records were removed. It holds no names, no email addresses and no content, and lets us show that a deletion happened and keep usage limits honest. We also keep our own record of what our support staff did on an account.

General

Email. We send transactional account emails (e.g. confirmation). You can contact us to manage communications.

Tenant isolation. Each business's data is isolated at the database layer; other tenants cannot access it.

Contact. hello@perpetual.marketing. See also our Terms.