This policy explains how personal data is handled when you visit ultramarketer.com, run a website scan, create an account or use the UltraMarketer service. The controller of personal data is the administrator of the ultramarketer.com service. You can reach the administrator at support@ultramarketer.com.
Data we collect
- Account data. Email address, password (stored only as a hash), name and role if you add them, team membership.
- Scan data. The website address you enter, the choices in the scan form, and a pseudonymised form of your IP address used to apply scan limits.
- Connected account data. When you connect GA4, Search Console, Google Ads, Meta Ads, a CRM, an email platform, a site builder or social pages, we read the metrics and settings needed to plan and measure your marketing, such as sessions, conversions, revenue, spend, campaigns, search terms, pages and pipeline values.
- Content you create. Assets you prepare, edit and approve, expert review requests and answers.
- Execution records. What was sent to which connected account, by whom and when.
- Billing data. Plan, billing period, invoices and payment status. Card details are entered on the payment operator's page and are not stored by us.
- Technical data. Server logs with IP address, browser type and timestamps, kept for security and troubleshooting.
How we use it
- To provide the service: scans, Weekly Growth Plans, prepared assets, execution of actions you approve, reports and expert reviews (performance of a contract).
- To send service emails such as sign-in codes, password resets, plan and billing notices (performance of a contract).
- To keep the service secure, prevent abuse and enforce plan limits (legitimate interest).
- To meet tax and accounting duties for payments (legal obligation).
We do not sell personal data, we do not share it for cross-context advertising, and we do not train AI models on your data.
Google API Services
UltraMarketer's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google Analytics, Search Console and Google Ads is used only to provide and improve the features you use in UltraMarketer, is not transferred to others except as needed to provide those features, to comply with law or as part of a merger or acquisition, is not used for advertising, and is not read by humans except with your consent, for security purposes, to comply with law, or when aggregated for internal operations.
Who processes data for us
We use carefully selected service providers, bound by data processing terms, in these categories:
- hosting provider (servers and databases),
- payment operator (subscriptions, invoices, card payments),
- email delivery provider (service emails),
- AI model provider (generating plans and assets for paying accounts, without training on your content),
- the analytics, advertising, CRM, email and website platforms that you choose to connect, which receive only the actions you approve.
Some providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
How long we keep data
Account and workspace data is kept while your account is active. When you ask us to delete a workspace, its plans, assets, synced metrics and access tokens are deleted within 30 days, except records we must keep for tax and accounting, which are kept for the period required by law. Anonymous scan results are deleted after 90 days. Server logs are kept for up to 30 days.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom may also lodge a complaint with their data protection authority. California residents have the right to know, delete and correct personal information, to opt out of sale or sharing (we do neither) and not to be discriminated against for using these rights. To use any right, write to support@ultramarketer.com. We answer within 30 days.
Security
Traffic is encrypted with TLS, access tokens for connected accounts are encrypted at rest, and access inside a workspace follows the roles you assign. More on the security page.
Cookies
We use only cookies that are strictly necessary for the site to work. See the cookie policy.
Children
The service is for businesses and is not directed to anyone under 18.
Changes
We may update this policy. The date at the top shows the latest version, and material changes are announced by email to account owners.