Privacy Policy

1. Introduction

The Plaid Agency (“we,” “our,” or “us”) operates a marketing intelligence and reporting platform (the “Platform”) that helps businesses understand their digital content engagement and audience behavior. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

2. Information We Collect

2.1 Account Information

When you sign in to the Platform using Microsoft Azure Active Directory authentication, we collect your name, email address, and organizational affiliation. Access is limited to authorized team members with @theplaidagency.com email accounts.

2.2 Third-Party Service Data

When you connect third-party services to the Platform, we access and store data from those services on behalf of your organization. This includes:

• Google Analytics (GA4): Website traffic data including page views, session counts, user engagement metrics, bounce rates, and geographic data. We access this data using OAuth 2.0 tokens you authorize through Google.
• Google Search Console: Search performance data including impressions, clicks, click-through rates, and average search position for your web pages.
• LinkedIn: Organization page data including post content, engagement metrics (impressions, reactions, comments, shares, clicks), and audience analytics. We access this data using OAuth 2.0 tokens you authorize through LinkedIn. We only access data for organization pages you administer and explicitly authorize.

2.3 Usage Data

We automatically collect certain information when you access the Platform, including browser type, access times, and pages viewed. This information is used solely to maintain and improve the Platform.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform
• Generate marketing analytics reports and content engagement visualizations
• Calculate content warmth scores and engagement metrics across channels
• Detect patterns and surface insights using AI-powered analysis
• Authenticate users and manage access permissions
• Communicate with you about Platform updates and changes
• Monitor and analyze usage patterns to improve the Platform

4. Third-Party Services and Data Sharing

4.1 Service Providers

We use the following third-party services to operate the Platform:

• Supabase: Database hosting and user authentication
• Vercel: Application hosting and deployment
• Anthropic (Claude AI): AI-powered pattern detection and insight generation. Aggregated, anonymized engagement data may be sent to the Claude API for analysis. No personally identifiable information is shared.
• Microsoft Azure AD: User authentication and single sign-on

4.2 LinkedIn Data Use

When you connect a LinkedIn organization page, we access your LinkedIn data solely to provide analytics and reporting within the Platform. Specifically:

• We only access data from LinkedIn organization pages you explicitly authorize
• We store LinkedIn post content and engagement metrics in our secure database
• We do not share your LinkedIn data with other third parties
• We do not post to LinkedIn on your behalf
• We do not access your personal LinkedIn profile data beyond basic identification
• You can disconnect your LinkedIn authorization at any time through the Platform

4.3 Data Sharing

We do not sell, trade, or rent your personal information or your connected service data to third parties. We may share information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or respond to lawful requests
• To protect and defend our rights or property
• With service providers who assist in operating the Platform (as listed above)

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encrypted data transmission (TLS/HTTPS)
• Secure OAuth 2.0 token storage with automatic token refresh
• Row-level security policies in our database
• Role-based access control for Platform users
• Regular security monitoring and updates

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account information and connected service data for as long as your account is active or as needed to provide the Platform services. Analytics data is retained for historical trend analysis and reporting purposes.

When a third-party service connection is disconnected, we retain previously collected data for historical reporting but stop collecting new data from that service.

You may request deletion of your data by contacting us at the email address below.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Withdraw consent for data processing
• Disconnect third-party service authorizations at any time
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us using the information in Section 10.

8. Cookies and Tracking

The Platform uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking pixels. Session cookies are required for the Platform to function and are deleted when you close your browser or your session expires.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: