Privacy Policy

This privacy notice for MarketingMonster ("we", "us", "our") explains how and why we collect, store, use and share ("process") your personal information when you visit our website, create an account, buy a plan, use our web dashboard, tools or desktop application (the "Services"), and when you contact us.

Reading it will help you understand your privacy rights and choices. If you do not agree with our practices, please do not use the Services. Questions go to [email protected].

Information you give us. When you register, buy a plan, use the Services or contact us, you may provide:

• account details: your name, email address and password (which we store only as a hash), and, if you enable it, the secret that powers your two-factor authentication;
• payment details: our payment providers collect your card details or PayPal credentials on their own pages; we receive only the amount, currency, outcome, plan and a transaction reference, and we keep a ledger of your account balance;
• the work you do with the tools: the domains, keywords, competitors, projects, reports and settings you enter or generate;
• referral information: the link you were invited with, the people who joined through your link, and the rewards credited to you;
• preferences such as your language, notification choices and dashboard settings; and
• anything you include in a message to support or in a support chat.

Information collected automatically. When you use the Services we record technical and usage data such as your IP address, browser and device type, operating system, language, the pages and tools you use, when your sessions start and end, timestamps, and error and performance logs. The desktop application additionally reports its version, your operating system version and crash reports; it does not read your files or your browsing outside the application.

We do not ask for identity documents or government identifiers, and we do not ask for information about your health, religion, sexual life or political opinions.

You are responsible for the accuracy of what you give us and for having the right to enter any client data into the tools.

We process your information to:

• create and manage your account, sign you in, protect it with two-factor authentication where you enable it, and keep your sessions secure;
• give you the tools included in your plan, start and end tool sessions, and enforce the session and device limits of your plan;
• take payment, keep your balance and ledger accurate, apply referral rewards, issue refunds and detect payment fraud;
• answer your support requests, run the support chat, and tell you about things that affect your account, such as security notices, renewals, receipts and changes to these policies;
• send you news and offers, only if you opted in, and always with a way to opt out;
• keep the Services safe: detecting shared accounts, automation and abuse, enforcing our Terms of Service and the rules of the tools, and protecting the rights and safety of everyone using the Services;
• understand how the Services are used so that we can fix problems and improve them; and
• comply with the law and respond to lawful requests.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process your personal information only when we have a valid legal reason to do so:

• Performance of a contract: to provide the Services you subscribed to, including tool access and payment.
• Consent: for optional things such as marketing email and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests: to secure and improve the Services, prevent fraud and abuse, and communicate with you about your account, as long as those interests are not overridden by your rights.
• Legal obligations: to keep the records that tax, accounting and consumer law require, and to respond to lawful requests from authorities.
• Vital interests: where necessary to protect someone's life or safety.

If you are in Canada, we rely on your express or implied consent, and on the exceptions permitted by law, such as investigating a breach of an agreement or complying with a legal requirement.

We do not sell your personal information. We share it only with:

• our payment providers, which handle your payment details and tell us the outcome;
• the makers of third-party tools, only to the extent a tool needs to receive what you type into it in order to work; your MarketingMonster account details are not shared with them;
• hosting, storage, email delivery, monitoring and analytics providers that help us run the Services, each bound to use your data only for the service it provides to us;
• authorities, courts and legal advisers, when the law requires it or when necessary to protect our rights, our users or the public; and
• a successor business, if we are involved in a merger, sale of assets, financing or acquisition, in which case your information may be transferred as part of that transaction under the same protections.

We use a small number of cookies and browser storage entries. Essential ones keep you signed in, protect forms against forgery, remember your language and remember dashboard preferences. These are necessary for the Services to work and cannot be switched off while you use them.

Where we use analytics to understand how the Services are used, those cookies are non-essential and are set only with your consent where the law requires it. You can control cookies through your browser settings; blocking essential cookies will prevent you from signing in.

The Services link to, and give you access to, websites and tools operated by other companies. We do not control them, and this notice does not cover them. Information you enter directly into a third-party tool is processed by its maker under that maker's own privacy policy, which we encourage you to read. We are not responsible for the content, privacy practices or security of third-party websites or tools.

Our servers and those of our providers may be located in countries other than yours, including countries whose data protection laws differ from those of your home country. Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards recognised by law, such as standard contractual clauses and adequacy decisions, and we require our providers to protect your information to the same standard.

We keep personal information only for as long as we need it for the purposes described here, unless the law requires or permits a longer period.

• Account details are kept while your account exists and are deleted or anonymised within 30 days of you closing it.
• Tool sessions run in isolated environments that are destroyed when the session ends; the projects, reports and settings you save in your dashboard are kept while your account exists.
• Payment and ledger records are kept for as long as tax and accounting law requires, typically seven years, even after your account is closed.
• Security and error logs are kept for a limited period, generally no longer than 12 months, and then deleted.
• Backups are kept for a limited period and then destroyed, so deleted data disappears from backups on a rolling basis.

We have implemented appropriate technical and organisational measures to protect your personal information, described in more detail in our Security document: encryption in transit, hashed passwords, two-factor authentication, isolated tool sessions, access controls, hosted payment pages, regular updates and tested backups. Nevertheless, no transmission over the internet and no storage technology can be guaranteed to be completely secure, and we cannot promise that unauthorised third parties will never defeat our security. You access the Services at your own risk and should use a strong password, turn on two-factor authentication and keep your devices secure.

The Services are for adults and businesses. We do not knowingly collect personal information from, or market to, anyone under 18. By using the Services you represent that you are at least 18. If we learn that we have collected information from a person under 18, we will close the account and delete the information promptly. If you become aware of such a case, please contact us at [email protected].

Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw a consent you gave earlier. Withdrawing consent does not affect processing that happened before, or processing that rests on another legal basis.

You can exercise many of these rights yourself: your account settings let you change your name, email, password, two-factor authentication and preferences, and deactivate your account. For everything else, write to [email protected]. We will act on verified requests within the time the law allows, usually one month.

Marketing. You can unsubscribe from marketing email at any time with the link in each email or from your notification settings. We will still send you messages that are necessary to run your account.

If you are in the European Economic Area or the United Kingdom and believe we are processing your information unlawfully, you have the right to complain to your local data protection authority. Swiss residents may contact the Federal Data Protection and Information Commissioner.

Most browsers offer a Do-Not-Track setting. No uniform standard for recognising and honouring such signals has been finalised, so we do not currently respond to them. If a standard is adopted that we must follow, we will update this notice. Where the law gives an opt-out preference signal legal effect, we honour it as the law requires.

If you live in California, Colorado, Connecticut, Virginia, Utah or another state with a comprehensive privacy law, you may have additional rights: to know what personal information we collect, use and disclose; to access and delete it; to correct it; to receive a copy; to opt out of targeted advertising, sales and profiling with legal effects; and not to be discriminated against for exercising these rights. We do not sell personal information and do not use it for targeted advertising.

In the past twelve months we have collected the categories of information described in section 2 for the purposes in section 3 and disclosed them to the categories of recipients in section 5. To exercise a right, contact us at [email protected]. We will verify your identity by asking you to confirm information from your account. You may authorise an agent to act for you; we will ask for proof of that authorisation. If we refuse a request, you may appeal by replying to our decision, and we will respond to the appeal within the period the law sets.

California's "Shine the Light" law lets residents ask once a year what personal information we shared with third parties for their direct marketing. We do not share personal information for third-party direct marketing.

We may update this notice from time to time. The updated version is indicated by the "Last updated" date at the top and takes effect as soon as it is published. If we make material changes, we will let you know by posting a notice on the Services or by sending you an email. Please review this notice regularly to stay informed about how we protect your information.

Questions, comments and requests about this notice or about your information: [email protected].

You can review and change your account information and deactivate your account from your settings at any time. Deactivation is permanent: it ends your plans and removes your profile, projects, referral data and balance; payment records are kept only as long as the law requires. To request a copy of your data or to ask us to correct or delete information you cannot reach yourself, write to [email protected] from the email address on your account.