Privacy Policy

Last updated: November 2024

1. Introduction

Kodiak Gym LLC ("we," "us," "our") operates Search Marketing AI and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

2.1 Information You Provide:

• Contact Information: Name, email, phone number, company name
• Business Information: Company details, website, industry, ad spend budget
• Account Information: Username, password, billing details
• Google Ads Data: Campaign performance, keywords, ad copy, conversion data
• Communications: Messages, support tickets, feedback

2.2 Automatically Collected:

• Usage Data: Pages visited, features used, time on site
• Device Information: IP address, browser type, operating system
• Cookies: See our Cookie Policy for details
• Analytics: Google Analytics data on website usage

2.3 Third-Party Data:

• Google Ads performance metrics (with your permission)
• Payment processing information (via Stripe/PayPal)
• Public business information from databases

3. How We Use Your Information

3.1 Service Delivery:

• Manage and optimize your Google Ads campaigns
• Generate performance reports and analytics
• Provide customer support and account management
• Process payments and maintain financial records
• Send service updates and important notifications

3.2 AI and Machine Learning:

• Train AI models to improve campaign optimization
• Analyze aggregate data to enhance our algorithms
• Predict campaign performance and provide recommendations
• Identify trends and best practices across accounts

3.3 Marketing (With Consent):

• Send promotional emails about our services
• Share industry insights and best practices
• Invite to webinars and educational content
• You can opt-out anytime

4. Legal Basis for Processing

Purpose	Legal Basis
Service delivery	Contract performance
Payment processing	Contract performance
Marketing emails	Consent (can withdraw)
Analytics	Legitimate interests
Legal compliance	Legal obligation

5. Data Sharing

5.1 Service Providers:

• Google: For Google Ads API access and analytics
• Payment Processors: Stripe, PayPal for billing
• Cloud Services: AWS for data storage and processing
• Email Services: For communications and reporting
• Support Tools: Customer service platforms

5.2 Legal Requirements:

• Comply with subpoenas or court orders
• Protect our legal rights
• Prevent fraud or abuse
• Respond to government requests

We Never:

• Sell your personal data to third parties
• Share client data with competitors
• Use your data for unrelated marketing
• Share identifiable data without permission

6. Data Security

• Encryption: TLS/SSL for data in transit, AES-256 at rest
• Access Controls: Role-based permissions and authentication
• Security Audits: Regular vulnerability assessments
• Employee Training: Privacy and security best practices
• Backup Systems: Redundant data storage
• Incident Response: Plan for data breaches

7. Data Retention

• Active Accounts: Throughout service term
• After Cancellation: 90 days for reactivation, then deleted
• Financial Records: 7 years (legal requirement)
• Marketing Data: Until opt-out or deletion request
• Anonymized Data: May retain indefinitely for AI training

8. Your Privacy Rights

You Have the Right To:

• Access: Request copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request data deletion (subject to legal requirements)
• Portability: Receive data in structured format
• Restriction: Limit how we process your data
• Objection: Object to processing for marketing
• Withdraw Consent: Opt-out of marketing anytime
• Complaint: Lodge complaint with data protection authority

9. Google Ads Data

• We access Google Ads data only with your explicit permission
• You can revoke access at any time via Google account settings
• We comply with Google API Services User Data Policy
• Data used only for providing agreed services
• Not shared with third parties except as disclosed

10. Cookies and Tracking

We use cookies for functionality and analytics. See our Cookie Policy for details on types of cookies, how to manage them, and opt-out options.

11. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children.

12. International Transfers

Your data may be transferred to and processed in the United States. We ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs)
• Adequate data protection measures
• Compliance with applicable transfer regulations

13. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we don't sell data)
• Right to deletion
• Right to non-discrimination for exercising rights

14. Changes to Privacy Policy

• We may update this policy periodically
• Material changes will be notified via email
• Continued use after changes constitutes acceptance
• Check this page regularly for updates

15. Contact Information