Market My Business AI ("Market My Business AI", "we", "us", "our") is a product of The Oncall Bot LLC and operates marketmybusinessai.com (the "Service"). This page tells you how we collect, use, and protect data when you use the Service.
1. Information We Collect
- Account info: name, email, password (hashed), practice name.
- Practice profile data you provide: logo, brand colors, services offered, marketing preferences, contact information.
- Generated content: images and captions you create using the Service.
- Facebook data (only if you connect your Facebook Page): your Page ID, Page name, Page access token, and engagement metrics for posts you publish through Market My Business AI.
- Usage data: IP address, browser type, pages visited, timestamps.
2. How We Use Your Information
We use your information solely to provide the Service: to authenticate you, generate marketing content tailored to your business, publish posts to your connected Facebook Page when YOU click "Publish to Facebook", and improve the Service. We do not use Facebook data for advertising, profiling, or any cross‑tenant analytics.
3. How We Share Your Information
We do not sell or rent your data. We share data only with:
- Service providers that help us operate (hosting, email delivery, AI model providers under strict data‑processing agreements).
- Legal requests when required by valid court order or subpoena.
- Business transfers in the event of a merger or acquisition (with prior notice).
Your Facebook Page access token is NEVER shared with third parties.
4. Data Storage and Security
Data is stored on encrypted servers in the United States. Facebook Page access tokens are encrypted at rest using AES‑256. Passwords are hashed with bcrypt. We use HTTPS for all data transmission. While we use industry‑standard safeguards, no method of transmission over the internet is 100% secure.
5. Your Rights
You can:
- Access your data via your account settings.
- Update or correct your data at any time.
- Disconnect Facebook at any time — this immediately deletes your Page access token from our database.
- Delete your entire account by emailing privacy@marketmybusinessai.com.
We respond to requests within 30 days.
6. Facebook Data Specifics
When you connect a Facebook Page, we receive:
- your Page ID,
- Page name,
- a Page access token, and
- (if requested) engagement counts for posts published through Market My Business AI.
We use this data EXCLUSIVELY to:
- display your Page name in Market My Business AI so you confirm you connected the right Page,
- publish posts when you click "Publish to Facebook",
- optionally display engagement metrics.
We never publish without your explicit click. We never share Facebook data with other practices or third parties. You can revoke our access at any time via your Facebook Settings → Apps and Websites.
7. YouTube Data (Google API Services)
When you connect your YouTube channel to Market My Business AI, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We also comply with the YouTube API Services Terms of Service.
What we access via the YouTube Data API v3, and why:
- Your channel ID and channel title (scope:
youtube.readonly) — so we can display "Publishing to [Your Channel Name]" in the UI and confirm you connected the right channel. - Video upload capability (scope:
youtube.upload) — so we can publish videos you create in Market My Business AI (talking videos, monthly auto-videos, Reels/Shorts) to your channel when you explicitly schedule or click "Publish to YouTube".
What we store:
- An encrypted OAuth refresh token tied to your business account. Tokens are encrypted at rest with Fernet (AES-128-CBC + HMAC-SHA-256). No plaintext tokens are ever stored.
- Your channel ID and channel title, so we can show you which channel you're connected to.
What we DO NOT do:
- We do not access your YouTube analytics, subscriber list, comments, or private videos.
- We do not read, modify, or delete videos you did not upload through Market My Business AI.
- We do not sell, share, or transfer YouTube data to any third party. Data is used exclusively to deliver the publishing features you signed up for.
- We do not use YouTube data for advertising, retargeting, credit assessments, or any purpose unrelated to the product feature.
- We do not train AI/ML models on your YouTube data.
Data deletion and revocation:
- You control the connection. Click "Disconnect" on the YouTube card in Connected Accounts at any time — we immediately delete our stored token and revoke the token at Google via the OAuth revocation endpoint.
- You can also revoke access directly at https://myaccount.google.com/permissions.
- Contact us at privacy@marketmybusinessai.com to request full deletion of any residual YouTube data associated with your account.
8. Children
The Service is not intended for users under 18. We do not knowingly collect data from minors.
9. Changes to This Policy
We may update this Privacy Policy. Material changes will be notified via email to the address on file at least 30 days before they take effect.
10. Contact
Questions or concerns? Email privacy@marketmybusinessai.com.
