Marketing Buddy is owned and operated by Mango Villa LLC, 30 N Gould St, Ste R, Sheridan, WY 82801 (“we”, “us”). We provide a marketing operations workspace at mymarketingbuddy.com that connects to third-party marketing, analytics, email, social and commerce services you choose and lets AI agents you control work in that workspace. This policy explains what we collect, why, and the choices you have.
1. Information we collect
- Account information. Your email address, name and profile picture from Google sign-in or the email and password you register with. Authentication is handled by Firebase Authentication.
- Billing. If you subscribe or buy AI credits, Stripe processes the card. We store the Stripe customer id, subscription status, and credit balance. We do not store your full card number.
- Workspace content. Business context, goals, tasks, notes, playbooks, articles, creative files and other content you or your connected AI agents create in your workspace.
- Connected-service data. When you connect a service (for example Google Analytics, Google Search Console, Google Tag Manager, Google Ads, Gmail, YouTube, Meta, X, Klaviyo, Resend, Brevo, Stripe, WooCommerce/WordPress, RevenueCat, App Store Connect, Google Play Console, Discord or Telegram), we receive the access tokens or API keys you authorize and the data those services return for your workspace, such as analytics reports, campaign settings, audience counts, email metrics, messages sent to your shared inbox, and order or payment summaries.
- Visitor data from the My Marketing Buddy pixel. If you add our pixel to your website or app, it records for you the pages and app screens your visitors view, how they arrived (campaign parameters, ad click identifiers and the referring site), their device, browser, language and time zone, the Google Analytics and Meta browser identifiers already set on your site, and, when your site identifies a visitor or the visitor types an email address into a form, that email address, name and the user id you send. It sets a first-party cookie on your own domain. You decide to collect this data and we process it on your behalf to provide the service; you are responsible for telling your visitors and, where required, getting their consent (the pixel can wait for it). Pixel data is kept for 13 months after a visitor was last seen, and you can erase one person’s data at any time in Setup → Tracking.
- Usage and technical data. Server logs (IP address, browser, timestamps, request paths) and error reports needed to run and secure the service.
2. How we use it
- To provide the service: showing your data in the app, running syncs you or your agents request, and executing actions you approve.
- To let AI clients you connect through OAuth sign-in or a token you mint read and write your workspace on your behalf. This includes the My Marketing Buddy plugin in ChatGPT. We do not train models on your data.
- To secure the service, prevent abuse and debug problems.
- To communicate with you about your account and the service.
3. Google user data
Marketing Buddy’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data (Analytics, Search Console, Tag Manager, Ads, Gmail, YouTube) is used only to provide the features you enable, is shown only to you and the agents you authorize, is not used for advertising, and is not sold. Gmail data is used only to read replies to your outreach and to send messages you approve. You can revoke access at any time in the Integrations page or at myaccount.google.com/permissions.
4. Sharing
We do not sell personal information. We share data only with: the third-party services and AI clients you connect, as needed to perform the actions you request; infrastructure providers that host the service (Google Cloud / Firebase, Vercel) under their data-processing terms; and authorities when required by law. When you connect Marketing Buddy in ChatGPT, information returned by the tools you use is sent to OpenAI to answer your requests. This can include your business context, marketing tasks, content, and reports from connected services. The receiving AI provider’s terms and privacy policy also apply. You control which AI clients can connect and can revoke access in Settings → Connect MCP. Anyone with a manually minted token can act as you in your workspace, so treat it like a password.
5. Storage and security
Workspace data is stored in Google Cloud Firestore and Firebase Storage. Connected-service OAuth tokens and API keys are encrypted at rest with a key held separately from the database and are never exposed to the browser or over the MCP endpoint. Access to workspace data requires your signed-in session, a token you minted, or a token issued to an AI client you authorized through OAuth. MCP OAuth access tokens, refresh tokens, and client secrets are stored as hashes. We also store the authorized client, your account identifier, connection timestamps, expiry, and revocation status to manage those connections. No method of transmission or storage is completely secure; we work to protect your data but cannot guarantee absolute security.
6. Retention and deletion
We keep your workspace for as long as your account exists. You can disconnect any integration (which deletes its stored credentials), revoke MCP tokens and OAuth-connected apps, and delete content in the app. Revoking a connection prevents further access through it; it does not delete information already returned to your AI provider. To delete your account and workspace entirely, email hello@mymarketingbuddy.com from your account address; we will remove it within 30 days except where retention is required by law.
7. Your rights
Depending on where you live you may have rights to access, correct, export or delete your personal information, or to object to certain processing. Email hello@mymarketingbuddy.com to exercise them. You may also lodge a complaint with your local data-protection authority.
8. Cookies
We use a single session cookie to keep you signed in and browser storage for interface preferences (such as which sidebar groups are open). We do not use advertising cookies. If a customer adds the My Marketing Buddy pixel to their own website, it sets a first-party cookie on that website’s domain to recognise returning visitors for that customer; we do not use it for advertising or share it across customers.
9. Children
The service is for businesses and is not directed to anyone under 18.
10. Changes
We will post updates here and change the date above. Material changes will also be announced in the app.
11. Contact
Mango Villa LLC
30 N Gould St, Ste R, Sheridan, WY 82801
hello@mymarketingbuddy.com