Privacy

Privacy Policy

Last updated: July 28, 2026

1. Who We Are

Market My Business AI (“we”, “our”, “us”) is a marketing automation platform for small businesses. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it.

2. Information We Collect

  • Account information — your name, business name, email address, phone number, and business address you enter when signing up.
  • Payment information — processed and stored by Stripe. We never see or store your full card number.
  • Content you create — marketing posts, blog articles, videos, and images you generate or upload in the app.
  • Usage analytics — anonymized events (page views, feature usage) so we can improve the product.
  • Connected-account tokens — encrypted OAuth tokens for the platforms you connect (Facebook, Instagram, LinkedIn, YouTube, WordPress).

3. How We Use Your Information

  • To deliver the services you signed up for — generating and publishing your marketing content.
  • To bill you for paid subscriptions.
  • To send transactional emails (receipts, password resets, publish confirmations).
  • To improve the product with anonymized usage data.

We do not sell your personal data. We do not use your content to train AI models. We do not share your data with advertisers.

4. Data Retention and Deletion

You can request deletion of your account and all associated data at any time by emailing privacy@marketmybusinessai.com. We honor deletion requests within 30 days.

5. Security

All connections use TLS 1.2+. OAuth tokens for connected accounts are encrypted at rest using AES-128-CBC with HMAC-SHA-256 (Fernet). Payment data is handled entirely by PCI-DSS-compliant Stripe.

6. Facebook and Instagram Data

When you connect your Facebook Page or Instagram Business account, we request only the permissions needed to:

  • display your Page name in Market My Business AI so you confirm you connected the right Page,
  • publish posts when you click “Publish to Facebook” or “Publish to Instagram”,
  • optionally display engagement metrics.

We never publish without your explicit click. We never share Facebook or Instagram data with other practices or third parties. You can revoke our access at any time via your Facebook Settings → Apps and Websites.

7. YouTube Data (Google API Services)

When you connect your YouTube channel to Market My Business AI, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We also comply with the YouTube API Services Terms of Service.

What we access via the YouTube Data API v3, and why:

  • Your channel ID and channel title (scope: youtube.readonly) — so we can display “Publishing to [Your Channel Name]” in the UI and confirm you connected the right channel.
  • Video upload capability (scope: youtube.upload) — so we can publish videos you create in Market My Business AI (talking videos, monthly auto-videos, Reels/Shorts) to your channel when you explicitly schedule or click “Publish to YouTube”.

What we store:

  • An encrypted OAuth refresh token tied to your practice account. Tokens are encrypted at rest with Fernet (AES-128-CBC + HMAC-SHA-256). No plaintext tokens are ever stored.
  • Your channel ID and channel title, so we can show you which channel you’re connected to.

What we DO NOT do:

  • We do not access your YouTube analytics, subscriber list, comments, or private videos.
  • We do not read, modify, or delete videos you did not upload through Market My Business AI.
  • We do not sell, share, or transfer YouTube data to any third party. Data is used exclusively to deliver the publishing features you signed up for.
  • We do not use YouTube data for advertising, retargeting, credit assessments, or any purpose unrelated to the product feature.
  • We do not train AI/ML models on your YouTube data.

Data deletion and revocation:

  • You control the connection. Click “Disconnect” on the YouTube card in Connected Accounts at any time — we immediately delete our stored token and revoke the token at Google via the OAuth revocation endpoint.
  • You can also revoke access directly at https://myaccount.google.com/permissions.
  • Contact us at privacy@marketmybusinessai.com to request full deletion of any residual YouTube data associated with your account.

8. Children

The Service is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified via email to the address on file at least 30 days before they take effect.

10. Contact

Questions or concerns? Email privacy@marketmybusinessai.com.