Privacy Policy

Agent Elephant (“we”, “us”, “our”) respects and protects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Agent Elephant marketing platform, our websites, and any related services (collectively, the “Services”).

Agent Elephant is an AI-powered marketing tool and automation platform. The Services help you design campaigns, orchestrate automated marketing workflows, manage audience segments, generate creative assets, and measure analytics across connected channels. This policy covers both your account information and the marketing campaign data you process with the platform.

By creating an account or otherwise using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

We collect the following categories of information to operate and improve the Services:

• Account details — your name, business or brand name, email address, phone number, billing information, and role within your organisation.
• Marketing campaign parameters — campaign objectives, budgets, schedules, channel selections, bidding rules, and automation triggers you configure.
• Target audience segments — targeting criteria, filters, and customer or lead lists you upload or build inside the platform.
• Creative assets and content — ad copy, images, videos, landing page content, and AI-generated drafts you create or store in the Services.
• Connected platform tokens — authorisation tokens for third-party advertising and analytics platforms you connect (e.g. Meta Ads, Google Ads), used solely to act on your behalf.
• Analytics and usage metrics — campaign performance data, feature usage, interaction events, and aggregated reporting statistics.
• Device information — device type, operating system, browser, IP address, approximate location derived from IP, and crash or diagnostic logs.

We do not collect sensitive personal data (such as government identifiers, health data, or biometric data) through the Services, and we ask that you do not submit such data to us.

We use the information we collect to:

• Power marketing automation — execute the campaign workflows, schedules, and automations you configure, including publishing and syncing with connected ad platforms.
• Optimise campaign workflows — monitor delivery, detect errors, and improve automation reliability and recommendations.
• Generate insights — produce analytics, performance summaries, and AI-assisted suggestions for your marketing.
• Provide customer support — respond to your requests, troubleshoot issues, and communicate service updates.
• Maintain platform security — protect accounts, detect fraud or abuse, and enforce our Terms of Service.
• Meet legal obligations — comply with applicable laws, regulations, and lawful requests.

We do not use your campaign data, audience segments, or creative assets to train public AI models, and we do not build advertising profiles of your customers for our own benefit.

Agent Elephant is a business and professional marketing tool. The Services are intended for users who are at least 18 years of age, and we do not knowingly collect personal data from children under 13 (or under the equivalent minimum age in the relevant jurisdiction).

Our marketing automation features are designed to comply with child safety standards including the U.S. Children's Online Privacy Protection Act (COPPA), the GDPR's protections for children's data, and applicable family-advertising policies of major ad platforms.

If we learn that we have collected personal data from a child without verifiable parental consent, we will delete it promptly. Parents or guardians may contact us using the details in the Contact Information section.

We do not sell or rent your personal data or your marketing data to anyone. Ever.

We share information only in the following limited circumstances:

• Vetted infrastructure partners — cloud hosting, content delivery, and database providers that store and process data on our behalf under contractual confidentiality and security obligations.
• Marketing and analytics integrations — the advertising and analytics platforms you explicitly connect, which receive data strictly as directed by you.
• Payment processors — billing partners that process subscription payments securely.
• Professional advisers — auditors, lawyers, and insurers bound by confidentiality duties.
• Legal compliance — disclosure where required by law, regulation, or a valid legal process such as a court order.
• Business transfers — in connection with a merger, acquisition, or asset sale, with notice to you and continued protection of the data.

Any partner that touches your data is vetted for security and privacy practices before onboarding, and is bound by data processing agreements consistent with this policy.

We apply enterprise-grade safeguards designed to protect your information:

• Encryption in transit — all traffic between your devices, our platform, and connected services is protected with TLS.
• Encryption at rest — stored data, including backups, is encrypted using industry-standard algorithms.
• Access controls — role-based permissions, least-privilege access for our personnel, and multi-factor authentication for administrative systems.
• Monitoring and audits — continuous logging, intrusion detection, and regular internal and third-party security reviews.
• Isolation — your workspace data is logically segregated from other customers' data.

No method of transmission or storage is completely secure, but we review and improve our safeguards continuously. If a security incident affecting your data occurs, we will notify you and applicable regulators as required by law.

We retain your personal data only for as long as your account remains active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account and campaign data — retained while your subscription is active and for a 90-day grace period after cancellation, then permanently deleted.
• Billing records — retained for the period required by tax and accounting laws.
• Backups — deleted from encrypted backups within 30 days of the deletion request.

You can request deletion of your account and personal data at any time using the one-click “Delete my data” request in your account settings, or by contacting our support team. We will confirm and complete verified deletion requests within 30 days. Aggregated, anonymised statistics that no longer identify you may be retained for product analytics.

Depending on where you live, you have rights under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended (CCPA/CPRA), India's Digital Personal Data Protection Act (DPDP), and similar laws:

• Access — obtain a copy of the personal data we hold about you.
• Correction — fix inaccurate or incomplete data.
• Deletion — request erasure of your personal data.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Objection and restriction — object to or restrict certain processing, including direct marketing.
• Non-discrimination — exercise your rights without discriminatory treatment.

You can manage most of these choices directly in the platform: edit your profile, adjust notification preferences, revoke connected platform authorisations, or export campaign data. To exercise any right, contact us at the details below — we respond to verified requests within 30 days. You may also appoint an authorised agent to submit a request on your behalf, and you will not receive discriminatory treatment for exercising your rights.

Agent Elephant integrates with third-party advertising, analytics, and infrastructure services — such as Meta Ads, Google Ads, and cloud hosting providers — at your direction.

• When you connect an integration, we exchange only the tokens and data needed to perform the actions you configure.
• Third-party services operate under their own privacy policies and terms, which we encourage you to review.
• We are not responsible for how a third-party platform handles your data once it is transferred at your instruction.
• You can disconnect any integration at any time from your workspace settings, which revokes the stored token on our side; we recommend also revoking access in the provider's own settings.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page shows the current version.

For material changes, we will notify you through the app, by email to your account address, or by a notice on our website before the change takes effect. Continued use of the Services after the revised policy takes effect means you accept the updated terms.

Questions about this Privacy Policy or our data practices? Our support team is happy to help:

• Agent Elephant — Support Team
• Email: nitheshreddy.email@gmail.com
• Phone: +91 9849000525
• Country: India

We aim to acknowledge every privacy enquiry within 2 business days and to resolve verified rights requests within 30 days, in line with GDPR, CCPA, and DPDP timelines.