Privacy Policy

We collect the following categories of information:

• Account and business information — names, email addresses, phone numbers, business name, services, service areas, website, and similar details provided by agency operators and their clients (for example, via intake and onboarding questionnaires).
• Connected-platform credentials — when you authorize it, OAuth access and refresh tokens and account identifiers for third-party services such as Google (Google Ads, Google Business Profile, Search Console, Analytics), Meta (Facebook and Instagram), and other marketing platforms, so we can perform the marketing services you request on your behalf.
• Performance and analytics data — metrics retrieved from those connected platforms (for example impressions, clicks, calls, spend, rankings, reviews, and engagement) used to produce reports and optimize campaigns.
• Content and assets — logos, images, copy, and files you upload, plus content we generate for your review and publication.
• Communications and preferences — messages, notification preferences, and, if you connect it, a Telegram chat identifier used solely to deliver notifications you opt into.
• Usage and technical data — log and operational data generated while using the platform.

• Provide, operate, and improve the HeyBoomy platform and its services.
• Create, schedule, and (with your approval) publish marketing content, ads, posts, and listings on your connected accounts.
• Generate analyses and performance reports from your connected platforms.
• Send you operational notifications and updates you opt into.
• Secure the service, prevent abuse, and meet legal obligations.

We do not sell your personal information, and we do not use it for advertising unrelated to the services you request.

HeyBoomy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We access Google user data (for example Google Ads, Google Business Profile, Search Console, and Analytics data) only to provide and improve the marketing features you explicitly authorize.
• We do not transfer or sell Google user data for advertising, credit-worthiness, or any purpose unrelated to delivering your requested services.
• We do not use Google user data to train generalized AI or ML models.
• Humans do not read Google user data unless you give consent for specific support, it is necessary for security or to comply with law, or the data has been aggregated or anonymized.

We share data only as needed to run the service, with vendors acting on our instructions, or to comply with law. Key categories:

• Marketing platforms you connect — Google, Meta, and other platforms, to perform the work you authorize.
• Infrastructure — cloud hosting, database, and compute providers that store and run the platform.
• AI and data providers — large-language-model and search or SEO data vendors used to generate content and analyses.
• Communications — email and messaging providers used to deliver notifications and reports you opt into.

Each connected platform’s own privacy policy and terms also apply to data held by that platform. We do not sell personal data to third parties.

• Data is transmitted over encrypted connections (HTTPS/TLS).
• Connected-platform tokens are stored server-side and are not exposed to other tenants or to client-facing surfaces.
• Access is restricted by organization and role (least-privilege), so each agency’s data is isolated from others.
• We request only the platform scopes needed to deliver the features you enable.

We retain data for as long as your account is active or as needed to provide the service, then delete or anonymize it within a reasonable period unless a longer retention is required by law. You can request deletion at any time (see Contact).

• Disconnect platforms — you can revoke a connected account’s access at any time (in HeyBoomy or in the platform’s own settings, for example your Google Account permissions).
• Access and deletion — request a copy of your data or its deletion by contacting us.
• Notifications — opt out of optional notifications at any time.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Questions or requests about this policy or your data: boomymarketing.com@gmail.com (Boomy Marketing Agency Inc.).