Privacy Policy

Agency Connect Inc., a US Delaware corporation doing business as AgencyAccess (“AgencyAccess,” “we,” “us,” or “our”), provides software and related services that help agencies collect information and obtain access to third-party accounts from their clients.

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you use our websites, applications, onboarding pages, integrations, and related services (collectively, the “Services”).

It also explains the choices and rights that may be available to you.

If you do not agree with this Privacy Policy, please do not use the Services.

1. Who is responsible for your information?

For information we collect about visitors to our website, AgencyAccess account holders, prospective customers, and people who communicate directly with us, Agency Connect Inc. generally acts as the data controller or business responsible for that information.

AgencyAccess customers may also use the Services to collect information from their own clients, employees, contractors, or other individuals.

When we process information through an onboarding page, intake form, integration, or similar feature on behalf of an AgencyAccess customer, that customer generally determines why and how the information is processed. In those circumstances, the customer is generally the controller or business, and Agency Connect Inc. acts as its processor or service provider.

If you submitted information through an onboarding page sent to you by an agency, you may wish to contact that agency directly regarding its privacy practices or requests concerning your information.

2. Information we collect

The information we collect depends on how you interact with AgencyAccess and which features you use.

Information you provide to us

We may collect information such as:

• name;
• email address;
• company or agency name;
• account username or login identifier;
• billing and subscription information;
• information submitted through forms;
• customer-support communications;
• feedback and survey responses;
• marketing preferences; and
• other information you choose to provide.

Payment information

Payments are processed through third-party payment providers such as Stripe.

We may receive information about a transaction, such as the amount, subscription plan, payment status, billing contact information, and limited payment-method details.

We generally do not store full payment-card numbers or card security codes.

Information submitted through AgencyAccess customers

Our customers may create onboarding pages, intake forms, or other workflows that request information from their clients.

The information collected may include business information, website addresses, advertising information, budgets, objectives, account identifiers, responses to custom questions, and other information selected by the AgencyAccess customer.

AgencyAccess processes this information on behalf of the relevant customer.

Information from third-party integrations

AgencyAccess enables users to connect or grant access to third-party services, including advertising, analytics, social media, ecommerce, marketing, and other business platforms.

Depending on the integration and permissions selected, we may receive or process information such as:

• user or account identifiers;
• account names;
• business or organization identifiers;
• account and asset lists;
• profile information;
• permission and role information;
• connection status;
• authentication or authorization tokens issued by the third-party platform;
• information necessary to complete or verify an access request; and
• other information authorized through the relevant platform's API.

The specific information available to AgencyAccess depends on the platform, the permissions requested, and the choices made by the person authorizing the connection.

AgencyAccess uses official authorization mechanisms and APIs where available. We do not ask clients to provide their third-party platform passwords to AgencyAccess.

Third-party platforms operate under their own privacy policies and terms.

Google user data

When you connect a Google service, AgencyAccess may access Google user data only to the extent authorized by you and necessary to provide the requested AgencyAccess functionality.

AgencyAccess's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not used for advertising, sold, or used for purposes unrelated to the user-facing functionality for which access was granted.

Information collected automatically

When you use the Services, we may automatically collect certain technical information, including:

• IP address;
• browser type and version;
• device type;
• operating system;
• language;
• approximate geographic region derived from an IP address;
• referring and exit pages;
• pages or features viewed;
• dates and times of access;
• application activity;
• error and diagnostic information; and
• other log and usage information.

We use this information to operate, secure, troubleshoot, analyze, and improve the Services.

3. Cookies and similar technologies

We and our service providers may use cookies, local storage, pixels, and similar technologies to operate the Services, maintain sessions, remember preferences, understand usage, measure performance, and improve our website.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

You may also be able to control cookies through your browser settings or any cookie-management tools made available on our website.

4. How we use information

We may process personal information to:

• provide and operate AgencyAccess;
• create and administer accounts;
• authenticate users;
• provide onboarding pages and intake forms;
• establish and manage third-party platform connections;
• facilitate access requests and permissions;
• display connection and onboarding status;
• process subscriptions and payments;
• provide customer support;
• communicate about accounts, transactions, service changes, and security matters;
• send marketing communications where permitted;
• personalize and improve the Services;
• analyze usage and product performance;
• detect, investigate, and prevent fraud, misuse, security incidents, and technical problems;
• enforce our agreements and policies;
• comply with legal obligations;
• establish, exercise, or defend legal claims; and
• carry out other purposes disclosed to you when information is collected.

We do not use information obtained through third-party account integrations for unrelated advertising purposes.

5. Legal bases for processing

If you are located in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction that requires a legal basis for processing, we rely on one or more of the following bases:

Performance of a contract. We process information when necessary to provide the Services you or an AgencyAccess customer requested.

Legitimate interests. We may process information where reasonably necessary to operate, secure, support, improve, and develop the Services, provided those interests are not overridden by your rights.

Consent. We process information based on consent where required, including for certain cookies, marketing activities, or third-party account connections.

Legal obligations. We may process information when necessary to comply with applicable law.

Protection of rights and safety. We may process information where necessary to protect the rights, safety, and security of AgencyAccess, our customers, our users, or others.

Where AgencyAccess processes personal information solely on behalf of a customer, the customer is responsible for establishing the applicable legal basis for that processing.

6. How we disclose information

We may disclose personal information in the following circumstances.

Service providers

We use companies that help us operate the Services, including providers of:

• cloud hosting and infrastructure;
• database services;
• payment processing;
• authentication;
• email and communications;
• customer support;
• analytics;
• security and monitoring; and
• other technical and business services.

These providers may process information only as necessary to provide services to us and subject to applicable contractual and legal restrictions.

AgencyAccess customers

If you interact with an onboarding workflow created by an AgencyAccess customer, information you provide and connection status information may be made available to that customer as necessary to provide the requested functionality.

Third-party platforms

When you choose to connect a third-party platform, information may be exchanged with that platform as necessary to authenticate the connection, obtain the permissions you select, or perform the requested action.

Business transactions

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction, subject to applicable contractual, platform, and legal requirements.

Legal and safety purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with law, regulation, legal process, or government request;
• enforce our agreements;
• investigate fraud or security incidents;
• protect the rights or property of AgencyAccess; or
• protect the safety of users or others.

With your direction or consent

We may disclose information where you direct us to do so or otherwise provide consent.

7. Sale and targeted advertising

AgencyAccess does not sell Customer Data or information obtained through third-party integrations for monetary consideration.

We also do not use Google API user data for advertising.

If our practices change in a way that constitutes a “sale” or “sharing” of personal information or targeted advertising under an applicable privacy law, we will provide any notices and opt-out mechanisms required by that law.

Where applicable, we will honor recognized legally required universal opt-out preference signals.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and financial records, resolve disputes, enforce agreements, and comply with legal obligations.

Retention periods depend on the type of information and why we process it.

Information processed solely on behalf of an AgencyAccess customer may be deleted or returned in accordance with our agreement with that customer.

When an integration is disconnected, we may delete authorization credentials or other integration information that is no longer needed, subject to technical, legal, security, and platform requirements.

Disconnecting an integration from AgencyAccess or cancelling an AgencyAccess subscription does not necessarily revoke permissions previously granted directly between a client and an agency within a third-party platform. Those permissions may need to be changed or revoked within the relevant third-party platform.

9. Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information.

These measures may include encryption in transit, access controls, authentication protections, monitoring, and other security measures appropriate to the nature of the information processed.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International data transfers

Agency Connect Inc. is a United States company, and personal information may be processed in the United States and other countries in which we or our service providers operate.

These countries may have privacy laws that differ from those in your jurisdiction.

Where required by applicable law, we use appropriate mechanisms designed to protect personal information transferred internationally, which may include contractual safeguards such as the European Commission's Standard Contractual Clauses and applicable United Kingdom transfer mechanisms.

11. Your privacy rights

Depending on where you live and subject to applicable law, you may have rights regarding your personal information, including the right to:

• request access to personal information;
• obtain a copy of personal information;
• correct inaccurate information;
• request deletion;
• restrict or object to certain processing;
• receive certain information in a portable format;
• withdraw consent;
• opt out of certain marketing;
• opt out of certain sales, sharing, or targeted advertising where applicable; and
• appeal a decision concerning a privacy request where applicable.

You may exercise applicable rights by contacting us at support@agencyaccess.co.

We may need to verify your identity before completing a request.

You may also use an authorized agent where permitted by law.

We will not discriminate against you for exercising privacy rights provided by applicable law.

Information controlled by an AgencyAccess customer

If your information was submitted to AgencyAccess through an onboarding page or workflow operated by an AgencyAccess customer, please contact that customer first.

Because we generally process that information on the customer's behalf, we may refer your request to the relevant customer or assist that customer in responding.

EEA, UK, and Swiss users

Where applicable, you may also have the right to lodge a complaint with the data protection authority responsible for your location.

You may withdraw consent at any time where our processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12. United States state privacy disclosures

Residents of certain U.S. states may have additional rights under state privacy laws.

Depending on the applicable law and whether AgencyAccess meets the relevant statutory requirements, these may include rights to access, correct, delete, or obtain copies of personal information and to opt out of certain processing.

The categories of personal information we may collect include:

• identifiers and contact information;
• commercial and subscription information;
• internet and electronic network activity;
• professional or business information;
• approximate location information;
• information submitted through forms;
• third-party account and integration information; and
• inferences or analytics derived from use of the Services.

We collect this information from the sources and for the purposes described elsewhere in this Privacy Policy.

We may disclose these categories of information to service providers, AgencyAccess customers, third-party integration providers, professional advisers, authorities where legally required, and parties involved in corporate transactions, as described above.

We do not knowingly use or disclose sensitive personal information for purposes requiring a right to limit its use under applicable U.S. state privacy laws.

13. Marketing communications

You may unsubscribe from promotional emails by using the unsubscribe mechanism included in those messages.

Even if you opt out of marketing communications, we may still send transactional or administrative messages relating to your account or use of the Services.

14. Third-party services

The Services contain integrations with and links to third-party websites, applications, and platforms.

AgencyAccess does not control the privacy practices of those third parties. Your use of third-party services is governed by their own privacy policies, terms, and settings.

15. Children

AgencyAccess is intended for business use and is not directed to children under 18.

We do not knowingly collect personal information directly from children under 18. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date above.

If changes materially affect how we process personal information, we may provide additional notice or obtain consent where required by law or applicable third-party platform requirements.

17. Contact us

If you have questions about this Privacy Policy or wish to exercise a privacy right, contact:

Agency Connect Inc. 1942 W Gray St., Unit 70, Houston, TX 77019 United States

Email: support@agencyaccess.co

For privacy-related requests, please include enough information for us to understand and respond to your request.