Privacy Policy

Effective date: June 8, 2026

1. Who we are

ManyMarketing AI (“ManyMarketing,” “we,” “us,” or “our”) provides AI Discovery Intelligence™ software that helps businesses improve their visibility across search engines and generative AI systems. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, “CCPA/CPRA”) and Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), together with substantially similar provincial laws such as Quebec’s Law 25, BC PIPA, and Alberta PIPA.

2. Information we collect

  • Account & identity data: name, business email, company, role, phone, country.
  • Billing data: processed by Stripe; we receive transaction metadata only and never store full card numbers.
  • Usage & device data: IP address, browser, pages viewed, timestamps, diagnostic logs.
  • Content you submit: domains, URLs, competitor lists, prompts, and assets you upload.
  • Cookies & similar technologies: required for authentication, security, and limited analytics.

3. How we use information

  • Provide, secure, and improve the Service and its AI features.
  • Authenticate users, prevent fraud, and enforce our Terms.
  • Process payments and send transactional messages (receipts, security alerts, product updates).
  • Comply with legal obligations and respond to lawful requests.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

4. Legal bases (PIPEDA & provincial laws)

Under PIPEDA and Quebec’s Law 25, we rely on your consent (express or implied), the performance of a contract with you, our legitimate business interests, and compliance with legal obligations. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at privacy@manymarketing.ai.

5. Sharing with service providers

We share personal information only with vetted processors that support the Service, including hosting providers, our authentication and database provider, Stripe (payments), Resend (transactional email), and analytics tooling. These vendors act on our written instructions and may not use your data for their own purposes.

6. International transfers

We may process personal information in the United States, Canada, and other jurisdictions. Where required, we use appropriate safeguards such as Standard Contractual Clauses and equivalent measures recognized by Canadian privacy regulators.

7. Data retention

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, accounting, and dispute-resolution obligations. You can request deletion at any time (see Section 9).

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, role-based access controls, and row-level security in our database. No method of transmission or storage is 100% secure.

9. Your rights

California residents (CCPA/CPRA):

  • Right to know what personal information we collect and how it is used or disclosed.
  • Right to delete personal information, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of the “sale” or “sharing” of personal information (we do neither).
  • Right to limit use of sensitive personal information.
  • Right to non-discrimination for exercising your rights.

Canadian residents (PIPEDA, Law 25, BC/AB PIPA):

  • Right to access, correct, and request deletion of your personal information.
  • Right to withdraw consent, subject to legal or contractual restrictions.
  • Right to be informed of automated decision-making that significantly affects you.
  • Right to data portability where applicable.
  • Right to complain to the Office of the Privacy Commissioner of Canada or your provincial regulator (e.g., the Commission d’accès à l’information du Québec).

To exercise any right, email privacy@manymarketing.ai. We verify requests using account-bound credentials and respond within the statutory timelines (45 days under CCPA/CPRA; 30 days under PIPEDA).

10. Children

The Service is not directed to individuals under 16, and we do not knowingly collect their data.

11. Changes to this policy

We will post material changes here and update the effective date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

Privacy questions or requests: privacy@manymarketing.ai.

See also our Terms of Service.