Privacy Policy

Marketing Genius (“Marketing Genius”, “we”, “us”) provides an AI growth intelligence platform that connects to advertising accounts, analyzes performance data, and produces marketing recommendations, campaign blueprints and landing pages for business owners.

For personal data submitted by our customers through the platform, we act as a data processor on their behalf. For account, billing and website data, we act as a data controller. Questions can be sent to privacy@airqualityprosusa.com.

• Account data: name, email address, password credentials managed by our authentication provider, organization name and team membership roles.
• Business profile data: company details, service areas, offers, logos, brand assets and website URLs you provide so the AI can generate marketing work.
• Connected advertising data: Google Ads account identifiers, campaigns, keywords, search terms, budgets, conversions and performance metrics retrieved through the Google Ads API with your authorization.
• OAuth tokens: encrypted access and refresh tokens required to maintain your advertising connection. These are never exposed to browsers and are readable only by privileged server processes.
• Lead and booking data: if you publish a managed landing page, we process the contact details submitted by your website visitors (name, email, phone, service address, appointment preferences and notes) strictly on your behalf.
• Usage and technical data: log records, IP address, browser type, device information, pages viewed, feature interactions and error diagnostics.
• Billing data: subscription plan, invoices and payment status. Card details are handled by our payment processor and never stored by us.

• Provide, operate, secure and support the platform.
• Analyze advertising performance and generate recommendations, blueprints, creative and landing pages.
• Authenticate users and enforce organization-level access controls.
• Detect, investigate and prevent fraud, abuse and security incidents.
• Send transactional messages such as booking confirmations, alerts and service notices.
• Meet legal, tax and accounting obligations.
• Improve product reliability and quality using aggregated or de-identified data.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

• Contract: to deliver the service you subscribed to.
• Legitimate interests: to secure the platform, prevent abuse and improve our product.
• Consent: for optional analytics cookies and marketing email, which you may withdraw at any time.
• Legal obligation: to comply with tax, accounting and law enforcement requirements.

When you connect an advertising account, we request read and campaign management scopes from Google. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google data is used only to provide and improve the user-facing features you requested.
• We do not transfer Google user data to third parties except as necessary to provide the service, comply with law, or as part of a merger with prior notice.
• We do not use Google user data for advertising, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with law, or where the data is aggregated and anonymized.
• You may revoke our access at any time from your Google Account permissions page or by disconnecting the account in Settings, which deletes the stored tokens.

Recommendations, ad copy, landing pages and briefings are generated using large language models and image models operated by our AI infrastructure providers. Prompts may include your business profile and de-identified performance metrics. We instruct our providers not to use your content to train their foundation models. AI output can be inaccurate; you remain responsible for reviewing and approving anything before it is published or spent against.

We share data only with vetted providers under written data protection terms:

• Cloud hosting, database, authentication and storage infrastructure.
• Google Ads API for reading and, when you approve, managing your campaigns.
• AI model providers for generating recommendations and creative.
• Transactional email delivery for confirmations and notifications.
• Payment processing for subscriptions.

We may also disclose data when legally required, to enforce our terms, to protect rights and safety, or in connection with a corporate transaction with notice to affected customers.

We use strictly necessary cookies for authentication, session integrity, security and to remember your consent choice. Analytics and marketing cookies are optional and are only set after you accept them in our cookie banner. Blocking strictly necessary cookies will prevent you from signing in.

Full details are in our Cookie Policy. You can change your choice at any time.

• Account and organization records: for the life of the account and up to 12 months after closure.
• Advertising performance data and generated work: for the life of the account, so historical decisions remain auditable.
• OAuth tokens: deleted immediately when you disconnect the account or close the workspace.
• Lead and booking submissions: retained on behalf of the customer until they delete them or close the account.
• Security logs and backups: typically up to 90 days.
• Billing records: retained as long as required by tax and accounting law.

• Encryption in transit (TLS) and at rest for stored data.
• Row Level Security enforced on every tenant table so organizations can only access their own records.
• Advertising credentials isolated from client applications and readable only by privileged server roles.
• Role-based access, least-privilege service accounts and audit logging of sensitive operations.

No system is perfectly secure. If a breach affects your personal data, we will notify affected customers and regulators as required by applicable law.

If you are in the EEA, UK or Switzerland (GDPR), you have the right to access your personal data, correct inaccurate data, request erasure, restrict or object to processing, receive your data in a portable format, withdraw consent at any time, and lodge a complaint with your local supervisory authority.

If you are a California resident (CCPA/CPRA), you have the right to know the categories and specific pieces of personal information collected, the sources, purposes and recipients; to request deletion; to request correction; to limit the use of sensitive personal information; and to opt out of sale or sharing. We do not sell or share personal information, and we will never discriminate against you for exercising a right. Authorized agents may submit requests with written proof of authorization.

How to submit a request:

• Email privacy@airqualityprosusa.com with the subject line “Data Request”, or use the contact form linked below.
• State the right you are exercising: access, correction, deletion, portability, restriction, objection, opt-out or withdrawal of consent.
• Include the email address associated with your account (or the page where you submitted your details) so we can locate your records.
• We verify your identity before acting, usually by confirming control of that email address. We ask for the minimum information needed and never require an account to submit a request.
• We acknowledge requests within 10 business days and respond within 30 days (GDPR) or 45 days (CCPA/CPRA), extendable once where the law allows, with notice to you.
• Requests are free unless they are manifestly unfounded or excessive, in which case we will tell you before charging anything.

To delete your entire workspace, you can also open Settings inside the app and choose account deletion; this removes your organization data and disconnects and deletes stored advertising credentials. Some records may be retained where law requires it.

If your personal data was submitted through a page published by one of our customers, that customer is the controller. We will forward your request to them and support them in responding.

We are based in the United States and our infrastructure providers may process data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or other lawful transfer mechanisms.

The platform is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will delete it.

We may update this policy as the product evolves. Material changes will be announced in the app or by email before they take effect, and the “last updated” date above will change.

Privacy and data rights requests: privacy@airqualityprosusa.com
Legal, contracts and compliance: legal@airqualityprosusa.com

Prefer a form? Use our contact form and select a privacy or legal topic — it reaches the same team and we reply to every request.