Privacy Policy

Effective date: September 26, 2026

Last updated: September 26, 2026

This Privacy Policy explains how Marketing Magnet collects, uses, shares, and protects information through our website, marketingmagnet.com, and through the applications, connectors, and software we build and operate, including our application MarketingMagnet Analytics.

Who we are

Marketing Magnet is a marketing strategy and technology company, founded and led by Den Bradshaw. Our website is marketingmagnet.com.

Marketing Magnet LLC (“Marketing Magnet,” “we,” “us,” or “our”) is responsible for the information described in this policy. You can reach us through our contact form.

What this policy covers

This policy covers:

• Our website, marketingmagnet.com, including our contact form.
• MarketingMagnet Analytics, the internal application we use to access Google Ads, Google Analytics, Google Tag Manager, and Google Search Console data that our clients authorize us to access.
• Software we build, including WordPress plugins and other tools released “by Marketing Magnet,” to the extent that software sends information to us.

Our clients’ own websites and apps are covered by their own privacy policies, even when they use software we built. Third-party services we mention here, such as Google, Cloudflare, and Akismet, handle information under their own privacy policies.

Information we collect from website visitors

Contact form. When you submit our contact form, we collect the information you enter: your name, email address, company, website, what you need, and your message. We use it to respond to you, to discuss and provide the services you ask about, and to keep a record of our business correspondence.

The form also sends us, in fields you do not see, the address of the page you submitted it from and any campaign tags in that page’s address (UTM source, medium, campaign, term, and content). We use these to understand how people find us.

When you submit the form, our form software may also record technical details such as your IP address and browser type, along with the date and time of your submission. We use these details to prevent spam and abuse.

Form entries are stored in our website’s database on our web hosting provider’s servers, and each entry is sent to us by email so we can reply. Before a submission is accepted, it is checked by Akismet to filter out spam, as described below.

Please do not send passwords, payment card or bank account numbers, government identification numbers, or health information through the form.

Information collected automatically. When you visit our site, our hosting provider, Cloudflare, and any security software we use automatically receive standard technical information, including your IP address, browser and device type, the pages you request, the page that referred you, and the date and time of your visit. Our host records standard server logs, including IP addresses, for security and troubleshooting. The host keeps them for its standard retention period.

Cookies. Our site uses cookies and similar technologies for basic functionality and security. They are described below.

Comments. Our site does not accept comments.

Analytics. We do not currently use website analytics tools on our site. We may add them later; if we do, we will update this policy first to describe what they collect.

Cookies

The cookies you may encounter on our site are:

You can block or delete cookies in your browser settings. Blocking cookies may affect how parts of our site work.

Do Not Track. Some browsers send a “Do Not Track” signal. There is no common standard for responding to it, so our site does not change its behavior when it receives one. We do not use cookies to track you across other websites for advertising, and we do not place advertising tags on our site. If a page embeds content from another service, that service may set its own cookies, as described under “Embedded content” below.

Tracking by other parties. Third parties whose services we use, such as Cloudflare, may collect information about your online activities over time and across different websites when you use our site, under their own privacy policies.

Cloudflare and other services we use

Cloudflare. Our website is delivered through Cloudflare’s network, which protects it from attacks, including automated bot traffic, and helps it load quickly. Cloudflare processes information about each request to our site, including your IP address, browser information, and the pages you request, and it may set the strictly necessary security cookies listed above. See Cloudflare’s Privacy Policy.

Akismet. Contact form submissions are checked by Akismet, a spam filtering service from Automattic. Akismet typically receives your IP address, browser user agent, the referring page, our site address, and the content you submit, including your name, email address, and message. Automattic states that it keeps most spam-related data for between two weeks and ninety days, and that Akismet’s algorithms learn from content marked as spam across the websites that use it. See Akismet’s privacy information.

Security software. We may also use security software that protects our site from attacks. Software of this kind records information such as IP addresses, browser user agents, requested pages, and login attempts, and may share IP addresses associated with attacks with its provider’s threat intelligence service.

Hosting. Our website is hosted by a web hosting provider, whose servers receive the technical information described above under “Information collected automatically.”

Fonts. Our site’s fonts may be loaded from a third-party font service. When they are, that service receives the technical information needed to deliver the font files, such as your IP address and browser type.

Embedded content. If a page on our site embeds content from another service, such as a video, that service may collect information about your visit as described in its own privacy policy.

Google user data accessed through our applications

Marketing Magnet operates internal tools that access Google Ads, Google Analytics, Google Tag Manager and Google Search Console data belonging to our clients. This access occurs only where a client has explicitly granted it to our service account, and it is limited to the accounts that client has authorized.

Together, these tools make up our application, MarketingMagnet Analytics. If a client authorizes MarketingMagnet Analytics through Google’s sign-in and consent screen instead of adding our service account, the same limits apply: we can access only the accounts and permissions that client grants.

What Google user data we access. Depending on what a client authorizes, we may access:

• Google Ads: account and campaign settings, ad groups, ads, keywords, audiences, budgets, bids, conversion settings, change history, search term reports, and performance data such as impressions, clicks, cost, and conversions.
• Google Analytics: property and data stream settings, and reports on how the client’s website or app is used, such as sessions, users, events, key events, traffic sources, pages, and device and location dimensions. We work with report data, not with the names or contact details of the client’s visitors.
• Google Tag Manager: container settings, including tags, triggers, variables, and published versions.
• Google Search Console: search performance data (queries, pages, clicks, impressions, click-through rate, and position), indexing and URL inspection results, and sitemap status.
• Google Sheets and Google Drive: only specific files a client chooses to share with our service account, such as a shared reporting spreadsheet.

We do not request access to Gmail, Google Calendar, Google Contacts, or Google Photos.

Google offers a single permission for its Ads API, which Google describes as the ability to see, edit, create, and delete Google Ads data. Our reporting and analysis tools only read data. We make changes to a client’s Google Ads account only when that client has engaged us for campaign management, and only within the access level the client grants.

We use this data solely to deliver marketing analysis, reporting and campaign management to the client who granted access. Specifically:

• We do not sell Google user data
• We do not transfer it to third parties except as necessary to provide the service the client requested, or where required by law
• We do not use it for advertising, or to build profiles of individuals
• We do not allow humans to read it except where required to resolve a specific problem, with the client’s knowledge, or where required by law
• We do not use it to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models
• We do not use it to determine credit-worthiness or for lending purposes
• We do not build databases from it, and we keep it, and anything derived from it, only as described under Retention below

Reviewing and reporting on a client’s data is the service a client engages us to provide. We review only the accounts and data a client has specifically asked us to work on.

AI-assisted analysis. We may use artificial intelligence tools to help analyze a client’s data and draft reports for that client. When we do, we send only the data needed for the analysis the client requested, and a person at Marketing Magnet reviews the work before we deliver it. We do not use Google user data to train or improve artificial intelligence models, and we do not send it to any tool for that purpose.

People who help us. Anyone who works on a client engagement with us, including contractors, must follow the same limits described in this section.

New uses. If we ever want to use Google user data in a way this policy does not describe, we will update this policy and ask the affected client for consent before we use the data in the new way.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This commitment applies to MarketingMagnet Analytics and to any other application we operate that receives information from Google APIs, including Google Workspace APIs such as Google Sheets and Google Drive.

WordPress plugins and other software we build

Marketing Magnet builds WordPress plugins, connectors, and AI tools, including some released under the name “by Marketing Magnet.” Unless a product comes with its own privacy notice that says otherwise, this section describes how it handles information.

• Our plugins run on the website where they are installed. They are designed not to send that site’s visitor information or content to Marketing Magnet. If a product sends any information to us, this policy or the product’s own privacy notice describes what it sends and why.
• Update checks. If a licensed plugin is set up to receive updates from our update server, it periodically sends us its license key, the site’s web address, and the plugin version so we can deliver updates. We use that information only to deliver updates and manage licenses.
• Connections to other services. Some plugins connect a website to third-party services that the site owner chooses and sets up with the site owner’s own credentials, such as search, analytics, AI, security, or booking services. Information flows directly between the website and that service, under the site owner’s account and that service’s terms. Marketing Magnet does not receive it unless the product’s own privacy notice says otherwise.
• Site owners’ responsibility. A website that uses our plugins is responsible for telling its own visitors about the plugins and services it uses.
• Support. If you ask us for support and give us access to your website or data, we use that access only to provide the support you asked for.
• Tools we build for clients. Some tools we build, such as forms or assessments, run on a client’s own website or systems. The client is responsible for the privacy notice that covers its users, and we handle that information only on the client’s instructions.

Information clients share with us

When a client asks us to work with personal information about the client’s own customers, for example uploading a customer list to Google Ads to build an audience, we handle that information only on the client’s instructions, only for that client’s campaigns, and under our agreement with that client.

How we share information

We share information only as described in this policy:

• Service providers that help us run our website and business: web hosting, email delivery, content delivery and security (Cloudflare), spam filtering (Automattic’s Akismet), any security software we use, and any artificial intelligence tools we use to help analyze client data (see “Google user data accessed through our applications” above). They use information to provide their services to us. Some also use certain information under their own privacy policies, as described above: Akismet learns from content marked as spam across websites, and a security software provider may receive IP addresses associated with attacks for its threat intelligence service.
• Contractors, if any, who help us deliver client work, under the same limits that apply to us.
• Legal reasons, when we believe disclosure is required by law, or is necessary to protect the rights, property, or safety of Marketing Magnet, our clients, or others. Google user data is disclosed for legal reasons only where required by law.
• Business transfers. If Marketing Magnet is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. For Google user data, we will obtain the client’s explicit consent before any such transfer.

We do not sell personal information, and we do not share it with others for their advertising.

Retention

Contact form submissions are retained for as long as needed to respond and maintain the business relationship.

Client analytics data is accessed via API and is retained only as long as the engagement requires; it is deleted on request when the engagement ends. The same applies to reports and notes we derive from that data.

Access revocation

A client may revoke our access at any time by removing our service account from their Google Ads, Analytics, Tag Manager or Search Console property. Access ends immediately.

Our service account appears as a user in each product, and we will confirm its address on request. In Google Ads, users are managed under Admin, then Access and security. In Google Analytics, under Property access management. In Tag Manager, under User Management. In Search Console, under Settings, then Users and permissions.

If you authorized MarketingMagnet Analytics through Google’s consent screen, you can remove its access at any time from the page in your Google Account that lists the apps linked to your account (see Google’s instructions). Google notes that it might take some time before a revocation has full effect.

You can also ask us to disconnect our access and delete your data by using our contact form.

Your rights

You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Submit your request through our contact form and we will respond within 30 days.

We may need to confirm your identity before we act on a request, and we may keep information when the law requires us to. Depending on where you live, you may have additional rights under local law, and you can use the same contact form to exercise them.

Opting out of sale and similar requests. We do not sell personal information. If you want to direct us not to sell your personal information, or to make a similar request under the law where you live, submit it through our contact form, which is our designated address for these requests, and we will respond within 30 days.

Children’s privacy

Our website and services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, tell us through our contact form and we will delete it.

International visitors

Marketing Magnet is based in the United States, and our website is operated from the United States. If you visit from another country, your information will be processed in the United States and in other countries where our service providers operate, where data protection laws may differ from those in your country.

Security

Credentials are stored outside public repositories and access is limited to the accounts required for each engagement.

We also protect information with measures suited to its sensitivity, including:

• Encrypted connections (HTTPS) are available for our website, and all data we receive from Google APIs travels over encrypted connections.
• Service account keys and any OAuth tokens are kept on systems we control and are never shared with clients or third parties.
• Our automated tools use read-only access unless a client engages us to make changes on their behalf.

No method of transmission or storage is completely secure. If a security incident affects your information, we will notify you as required by law.

Changes

We will update this page when our practices change, and revise the date above.

If we make a material change, we will also post a notice at the top of this page. If a change affects how we use Google user data, we will notify affected clients directly and ask for their consent before we use the data in the new way.

Contact us

To ask a question about this policy or about your information, or to make a privacy request, please use our contact form and tell us that your message is a privacy request.