Effective August 11, 2026

Privacy Policy

Legacy Marketing & Consulting ("LMC," "we," "us," or "our") respects the privacy of visitors, clients, and authorized users of our internal advertising tools. This policy explains what information we collect, why we use it, and the choices available to you.

Information we collect

We may collect information you provide directly, such as your name, email address, phone number, business information, service interests, consent choice, and the content of messages you send us. For billing, we may retain a Stripe customer identifier, selected plan, subscription and invoice status, billing email, and payment-related timestamps. Complete card or bank account numbers are collected and handled by Stripe and are not stored in LMC's database. When a client authorizes access to an advertising or analytics account, our internal tools may process account identifiers, campaign settings, budgets, performance metrics, conversion information, and related diagnostic data.

How we use information

• Provide authorized advertising management, reporting, websites, billing, and support.
• Create and maintain recurring service subscriptions, issue payment confirmations, and respond to billing questions.
• Monitor performance, diagnose delivery issues, and prepare approved account changes.
• Maintain security, audit activity, prevent misuse, and comply with applicable policies and law.
• Respond to inquiries and communicate about our services.

Google user data

Access to Google user data is limited to accounts that an authorized account owner explicitly connects to Legacy Marketing & Consulting through the applicable Google authorization or account-access process. Depending on the services requested and access granted, the LMC platform may process:

• Google Ads customer and account identifiers, descriptive account information, campaign identifiers, currency and timezone, and reporting metrics such as spend, impressions, and clicks.
• Google Analytics property identifiers and reporting metrics such as sessions, engaged sessions, organic-search sessions, and configured key events.
• Google Search Console property identifiers and search-performance metrics such as clicks and impressions.
• Google Business Profile account and location identifiers, location information, and available profile-performance metrics. LMC's Business Profile connection is read-only and does not edit profile content.

We use Google data only to verify the correct client resource, provide the requested reporting and diagnostics, prepare client-scoped performance reports, and support the advertising, analytics, search, or business-profile services the client requested. Reporting connections do not create or change campaigns, budgets, billing, ownership, or Google account settings.

Google identifiers and permitted reporting data are stored only in access-controlled LMC systems for as long as reasonably needed to provide the authorized services, maintain security and audit records, troubleshoot reporting, and meet applicable legal obligations. OAuth credentials and other provider secrets are kept in protected server-side secret storage and are not exposed in the client portal or public reports. Access is limited to authorized personnel and the correctly associated client account.

We do not sell Google user data, use it for unrelated behavioral advertising, combine it into advertising profiles unrelated to the requested services, expose it publicly, or use it to train generalized artificial-intelligence or machine-learning models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Clients may revoke access through the applicable Google Account permissions, Google Ads access settings, Analytics property access, Search Console user settings, or Business Profile access controls. To request deletion of Google-derived information retained by LMC, email legacymarketingc@gmail.com. We will delete eligible information from active systems, subject to legal, security, billing, and audit-retention requirements.

Sharing and retention

We may use service providers that help us operate secure infrastructure and contracted services, including Stripe for billing and payment processing and Cloudflare for application hosting and storage. Advertising work may also involve Google and Meta when authorized by the client. These providers process information under their own terms and privacy commitments. We may disclose information when required by law or to protect rights and safety. We retain information only as long as reasonably needed for authorized services, billing records, troubleshooting, compliance, and legitimate business records.

Security

We use access controls, protected credential storage, least-privilege practices, validation, and operational logging designed to protect information. No method of storage or transmission is completely secure, but we work to reduce risk and respond promptly to suspected credential exposure.

Your choices

You may request access, correction, or deletion of personal information, subject to applicable legal and operational retention requirements. Clients may revoke Google Ads account access or OAuth authorization through their Google account and Google Ads access settings.

Contact us

Questions or privacy requests may be sent to legacymarketingc@gmail.com.