Privacy Policy

1. Who We Are

Secret Agent Digital Marketing ("SADM," "we," "us," or "our") operates the CyborgCRM platform and related marketing services available at https://secretagentdigitalmarketing.com. We are a digital marketing agency providing content scheduling, CRM, analytics, and AI-powered growth tools to businesses.

Contact: info@secretagentdigitalmarketing.com

2. Information We Collect

• Account information: name, email address, password (hashed), role, and subscription tier.
• Business content: social media posts, images, video scripts, captions, and creative assets you upload or generate.
• CRM records: contacts, leads, deals, activities, companies, and notes you manage within the platform.
• Usage and device logs: IP address, browser type, device identifiers, page views, and interaction events for analytics and security.
• Data from connected accounts: When you connect Facebook Pages, Instagram Business, or LinkedIn, we access only:
  • Page and profile identifiers (Page ID, account name, profile picture URL);
  • Permission to publish content you schedule through the platform;
  • Engagement metrics (likes, comments, shares, reach) on content published on your behalf.

3. What We Do Not Access

We do not access or store your private messages, direct messages, friend lists, personal timeline posts, or any account data unrelated to the Pages and profiles you explicitly connect for publishing. We do not sell personal information to third parties.

4. How We Use Your Information

• Operating, maintaining, and improving the platform and its features;
• Publishing content to connected social media accounts at your direction;
• Generating performance reports and analytics on your published content;
• Providing customer support and responding to inquiries;
• Detecting, preventing, and investigating fraud, abuse, and security incidents;
• Complying with legal obligations and protecting our rights.

5. How We Share Information

We share data only with the following categories of recipients and only as necessary:

• Service providers: cloud hosting, AI content generation, payment processing, email delivery, and analytics — under contractual obligations to protect your data.
• Connected platforms: the social media platforms (Facebook, Instagram, LinkedIn) you publish to, for the purpose of posting content and retrieving engagement data.
• Legal requirements: when required by law, court order, or to protect rights, property, or safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with continuity of obligations under this policy.

6. Data Retention

We retain your personal information for as long as your account is active. Upon account closure, we delete or anonymize your data within 90 days, except where retention is required by law, to resolve disputes, or to enforce our agreements — in which case we retain only what is necessary for that purpose.

7. Data Deletion Instructions

You can request deletion of your data at any time through any of the following methods:

• In-app deletion: Navigate to Settings and delete your account, which removes your records and associated content.
• Disconnect a platform: Visit Integrations → Meta Connections (or Social) and disconnect Facebook, Instagram, or LinkedIn to immediately revoke platform access. Your tokens are invalidated and removed instantly.
• Email request: Send a Data Deletion Request to info@secretagentdigitalmarketing.com with the subject line "Data Deletion Request." We process and complete all verified deletion requests within 30 days.

8. Your Rights

Depending on your jurisdiction, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete data;
• Delete your personal information;
• Port your data to another service in a structured, machine-readable format;
• Withdraw consent for data processing at any time, without affecting processing performed before withdrawal.

To exercise any of these rights, contact us at info@secretagentdigitalmarketing.com.

9. Security

We protect your data using industry-standard security measures including encrypted transmission (TLS/SSL), strict role-based access controls, and secure credential management. OAuth access tokens for connected platforms (Facebook, Instagram, LinkedIn) are stored securely on the server side and are never exposed in frontend code or client-side storage.

10. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

11. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy and applicable law, including standard contractual clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice within the platform at least 30 days before the changes take effect. The "Last updated" date above indicates when this policy was most recently revised.