Privacy Policy

1. Data Controller Information

MKTGToolkit acts as the Data Controller for all personal data collected through our platform. We are responsible for determining how your data is processed and ensuring compliance with applicable data protection regulations.

2. Data We Collect

CCPA/CPRA Compliant

3. Lawful Basis for Processing

GDPR Compliant

We process your data under the following legal bases:

• Contractual Necessity: To provide the social media and email marketing services you signed up for.
• Consent: For marketing emails, non-essential cookies, and optional AI-powered features.
• Legal Obligation: For tax records, compliance requirements, and responding to legal requests.
• Legitimate Interest: For security monitoring, fraud prevention, and service improvement.

4. How We Use Your Data

• To create and manage your MKTGToolkit account
• To provide social media scheduling and publishing services
• To deliver email campaign functionality
• To sync with third-party platforms (ClickUp, social networks)
• To generate AI-powered content suggestions
• To send transactional emails (password resets, campaign notifications)
• To improve our services through anonymized analytics

5. Sub-processors & Third Parties

We share data with the following categories of service providers:

6. Data Retention

We retain your data according to the following schedule:

7. Your Rights & Data Deletion

Depending on your location (EU/UK/California), you have the following rights:

You may initiate a permanent account deletion through your Account Settings. Upon request, all data associated with your profile will be purged from our active systems within 30 days.

8. California Consumer Rights (CCPA/CPRA)

California residents have additional rights:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected.
• Right to Delete: Request deletion of personal information collected.
• Right to Opt-Out: Opt-out of the sale or sharing of personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

We do not sell your personal information. We share data only with necessary sub-processors as outlined in Section 5.

9. International Data Transfers

MKTGToolkit utilizes Standard Contractual Clauses (SCCs) approved under EU Decision 2021/914/EU to ensure that data transferred outside the EEA/UK is protected to the same standards as within those regions.

We conduct Transfer Impact Assessments (TIAs) for transfers to third countries and implement supplementary measures where necessary.

10. Security Measures

We implement industry-standard security measures including:

• AES-256 encryption for stored data and API tokens
• TLS 1.3 for all data in transit
• Multi-factor authentication options
• Regular security audits and penetration testing
• Access logging and monitoring

11. Cookies & Tracking

We use cookies and similar tracking technologies. For detailed information about our cookie practices and how to manage your preferences, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website at least 30 days before the changes take effect.