Privacy Policy

1.Information we collect

We collect information you give us directly, information generated by using the product, and information collected automatically.

• Account information: name, email address, company name, and password or OAuth identity (Google) if you sign in that way.
• Billing information: your plan, billing cycle, and payment details. Card numbers are never stored on our servers; payments are processed by Stripe, our payment processor.
• Product data: the website URL you connect, content and strategy documents our agents generate for your account, and your approval or rejection of that content.
• Usage data: pages viewed, features used, and actions taken inside the dashboard, used to operate and improve the product.
• Job applications: if you apply to a role on our Careers page, we collect your name, email, phone number, resume, cover letter, and any links you provide.
• Support communications: anything you send us when you contact support.

2.Data from connected accounts

CMO Owls agents work from your real business data. If you choose to connect an account, we access only what that integration requires, and only after you grant permission:

• Google Search Console and Google Analytics 4: ranking, traffic, and conversion data for the website you connect.
• LinkedIn and X (Twitter): permission to publish drafts to your connected page or account after you approve them.
• WordPress and Webflow: permission to publish approved content to your site.
• Slack: permission to deliver digests to a channel you choose.

You can disconnect any of these integrations at any time from Settings. Disconnecting revokes our access going forward; it does not retroactively delete data already processed.

3.How we use your information

We use the information above to:

• Provide, operate, and maintain the product, including running the agents that generate content and audits for your account.
• Process payments and manage your subscription.
• Send transactional communications, such as sign-in codes, billing receipts, and product notifications.
• Send product updates and promotional offers, but only to accounts that have actively opted in, via a separate, specific checkbox at signup or a toggle in Settings that is never on by default. Every marketing email lets you unsubscribe with one click, and unsubscribing never affects your ability to use the product.
• Monitor for and prevent fraud, abuse, and security incidents.
• Improve the product, including understanding which features are used and how.
• Comply with legal obligations.

We do not sell your personal data, and we do not use your connected site's content or business data to train models for other customers.

4.Legal basis for processing (GDPR)

If you are in the European Economic Area, the UK, or Switzerland, we process your data on one of these legal bases:

Basis	When it applies
Contract	Processing needed to provide the service you signed up for, such as running your account and billing your subscription.
Consent	Where you explicitly grant it, such as connecting a third-party account or opting into marketing email.
Legitimate interest	Security monitoring, fraud prevention, and product improvement, balanced against your rights.
Legal obligation	Retaining billing records or responding to a lawful request from an authority.

5.Data retention

We keep account and product data for as long as your account is active. If you close your account, we delete your personal data within 90 days, except where we are required to keep billing records for tax and accounting purposes, which we retain for the period required by applicable law. Job application data for roles you did not get is deleted within 12 months of the role closing, unless you ask us to remove it sooner.

6.Who we share data with

We share data only with the following categories of service providers, each bound by a data processing agreement, and never for their own marketing purposes:

• Payment processing: Stripe.
• Infrastructure and hosting: our cloud server provider.
• Integration partners: Google, LinkedIn, X, WordPress, Webflow, and Slack, only for the specific integration you connect.
• Legal and safety: where required to comply with a lawful request, or to protect the rights, property, or safety of CMO Owls, our users, or the public.

If CMO Owls is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

7.Cookies

We use a minimal set of cookies, described in full in our Cookie Policy. In short: we use a strictly necessary session cookie to keep you signed in, and nothing else on our marketing site today. If that changes, we will update the Cookie Policy and ask for consent where required.

8.Security

We use industry-standard measures, including encryption in transit (HTTPS everywhere) and access controls limiting who can reach production data, to protect your information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

9.International data transfers

CMO Owls operates under Finnish and EU law. Where your data is processed by a service provider outside the EEA, we rely on that provider's Standard Contractual Clauses or an equivalent safeguard recognized under GDPR.

10.Your rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to:

Right	What it means
Access	Request a copy of the personal data we hold about you.
Rectification	Correct inaccurate or incomplete data.
Erasure	Request deletion of your personal data, subject to legal retention requirements.
Restriction	Limit how we process your data in certain circumstances.
Portability	Receive your data in a structured, machine-readable format.
Objection	Object to processing based on legitimate interest, including for marketing.
Complaint	Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details below. We respond to verified requests within 30 days.

11.U.S. state privacy rights

If you are a resident of California or another U.S. state with a comprehensive privacy law, you have similar rights to access, correct, and delete your personal data, and to opt out of the sale or sharing of personal data. We do not sell personal data.

12.Children's privacy

CMO Owls is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

13.Links to other sites

Our product links to third-party services you choose to connect, and our site may link to external resources. We are not responsible for the privacy practices of sites we do not operate.

14.Changes to this policy

We may update this policy from time to time. If we make a material change, we will notify you by email or through a notice in the product before the change takes effect.

15.Contact us

Questions about this policy or your data can be sent to support@cmoowls.com.