Privacy Policy

Introduction

Thank you for visiting Agency Long ("Agency Long," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website agencylong.com and modernhumans.ai (collectively, the "Sites") and use our services.

Please read this Privacy Policy carefully. By accessing or using our Sites and Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not access or use our Services. Please also review our Terms of Service.

You must be at least 18 years old to use our Services. We do not knowingly collect information from anyone under 18.

Information We Collect

Information You Provide

We collect information you voluntarily provide, including:

• Name and email address when you contact us or schedule a demo
• Company name, job title, and business information
• Communication preferences and newsletter subscriptions
• Any information you include in messages to us

Information Collected Automatically

When you visit our Sites, we automatically collect:

• Device and browser information (type, version, operating system)
• IP address and approximate geographic location
• Pages visited, time spent, and navigation patterns
• Referring website and search terms

Social Media Platform Data (Modern Humans AI Users)

If you use our Modern Humans AI platform and connect social media accounts, we may access:

• Facebook/Instagram: Page information, content publishing permissions, analytics data
• YouTube: Channel information, video upload permissions, analytics data
• Google Business Profile: Business listing information, review data

We only access data necessary to provide our services and in accordance with each platform's API terms. Our use of Google API data adheres to the Google API Services User Data Policy, including Limited Use requirements.

Client Platform Data (Agency Long Grow Platform Users)

When clients use our grow platform (grow.agencylong.com), we collect and process additional data through authorized integrations:

• Shopify: Customer information (names, emails, order history, marketing consent status), product and inventory data, collected via API with client authorization
• Meta (Facebook/Instagram): Ad account performance data, campaign metrics, audience insights, page information, collected via authorized Business Portfolio access
• Email subscribers: Names, email addresses, engagement data (opens, clicks, bounces), consent records, and unsubscribe status — synced from client's Shopify store or uploaded directly by the client
• Google Ads: Campaign performance data and metrics (where applicable)

This data is processed solely to provide our services. We act as a service provider/data processor — our clients are responsible for obtaining proper consent from their customers and subscribers.

How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our Services
• Respond to inquiries and provide customer support
• Send newsletters and marketing communications (with your consent)
• Generate and publish AI-optimized content on your behalf
• Schedule and manage social media posts
• Analyze usage patterns to improve user experience
• Prevent fraud and ensure security
• Comply with legal obligations

AI Content Generation

Our Services include AI-powered content generation. When you use these features:

• We use your business information to generate relevant, personalized content
• Content is generated using third-party AI services (including Anthropic's Claude)
• You retain ownership of all content generated for your business
• We do not use your content to train AI models
• We do not use client-synced data (subscriber lists, ad performance, Shopify customer info) to train AI models or for any purpose unrelated to providing our Services

Email Marketing Data

Our platform sends marketing emails on behalf of clients, from their domains, to their subscribers. Here is how we handle email marketing data:

• Subscriber data (emails, names, engagement history, consent records) is provided by clients through Shopify sync, CSV upload, or manual entry
• We process unsubscribe requests automatically and immediately — subscribers can opt out via the unsubscribe link in every email
• We track email engagement (deliveries, opens, clicks, bounces, spam complaints) to maintain deliverability and provide analytics
• We do not independently collect subscriber data — all subscriber information comes from or through our clients
• Clients are responsible for ensuring they have proper consent from their subscribers before sending emails through our platform
• We do not use subscriber data to market our own services to your subscribers — their data is used exclusively to provide email services on your behalf

If you are a subscriber receiving emails from a business using our platform, contact that business directly regarding your data. You may also email us at support@agencylong.com and we will assist.

Ad Management Data

• When clients connect their Meta ad accounts, we access campaign data, performance metrics, and audience insights solely for ad management, optimization, and AI-powered recommendations
• We comply with Meta's Platform Terms — ad data is not sold, shared with unauthorized third parties, or used for purposes beyond providing our services
• Clients maintain ownership of their ad accounts and all associated data

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential cookies: Required for site functionality
• Analytics cookies: Help us understand how visitors use our Sites (via Vercel Analytics)
• Marketing cookies: Track effectiveness of our marketing efforts

You can control cookies through your browser settings. Disabling certain cookies may limit site functionality.

Third-Party Services

We use trusted third-party services to operate our business:

• Stripe: Payment processing
• Vercel: Website hosting and analytics
• Supabase: Database and authentication
• Anthropic (Claude): AI content generation
• Calendly: Appointment scheduling
• Intercom: Customer support
• Resend: Email delivery infrastructure
• Meta Marketing API: Ad campaign creation and management
• Supermetrics: Data syncing from ad platforms and e-commerce
• Google Sheets API: Data processing and reporting
• Shopify API: E-commerce and customer data syncing

Each service has its own privacy policy governing their use of your data.

Data Sharing

We do not sell your personal information. We may share information:

• With service providers who assist in operating our business
• We may share data with subprocessors (e.g., Resend for email delivery, Meta for ad execution) under agreements ensuring they process data only for our instructed purposes
• To comply with legal obligations or respond to lawful requests
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets (with notice)

Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Encrypted database storage
• OAuth 2.0 for social media integrations
• Regular security audits
• Access controls and authentication

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this policy. Specific retention periods:

• Account data: Duration of account plus 30 days
• Contact form submissions: 2 years
• Analytics data: 2 years (anonymized after 6 months)
• Marketing communications: Until you unsubscribe
• Client platform data (ad metrics, subscriber lists, campaign history): Duration of account plus 30 days for export
• Email engagement data (opens, clicks, bounces): 2 years
• Unsubscribe records and consent logs: Retained indefinitely for compliance

Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications
• Data portability: Request your data in a portable format

To exercise these rights, contact us at support@agencylong.com. We will respond within 30 days.

Rights for Email Subscribers (Non-Platform Users)

If you receive marketing emails from a business that uses our platform, your primary relationship is with that business, not Agency Long. To exercise your data rights (access, deletion, opt-out):

• Use the unsubscribe link in any email to immediately stop receiving emails
• Contact the business that sent you the email directly
• If you need additional help, email us at support@agencylong.com — we will work with the business to fulfill your request within 30 days

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

If you are a California resident whose data is processed through our platform on behalf of one of our clients, the client (as the business/controller) is responsible for responding to your CCPA requests. We will assist as their service provider.

Tennessee Privacy Rights (TIPA)

If applicable under the Tennessee Information Protection Act, Tennessee residents may have rights to access, correct, delete, and opt out of targeted advertising or sale of personal data. Contact us at support@agencylong.com to exercise these rights.

International Users

Our Services are operated from the United States. If you access our Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. where data protection laws may differ from your jurisdiction. By using our Services, you consent to this transfer.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of discovering the breach, in accordance with applicable law. We will also notify relevant regulatory authorities as required.

Children's Privacy

Our Services are not intended for children under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our Sites with a new "Last updated" date. For registered users, we will also send email notification of significant changes. Your continued use of our Services after changes indicates acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@agencylong.com

Mail:
Agency Long, Inc.
3401 Mallory Ln Suite 100
Franklin, TN 37067