Waterloo Digital — Marketing Strategy, Automation & AI Agents

Waterloo Digital LLC Effective Date: May 1, 2026 Last Updated: May 1, 2026

1. Introduction

Waterloo Digital LLC (“we,” “our,” or “us”) is an AI and digital marketing agency that provides strategy, campaigns, content, creative, analytics, advertising management, and marketing automation services to our business clients. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services or interact with our website at https://waterloo.digital.

2. Information We Collect

2.1 Information from Client Advertising Platforms

When providing advertising management and marketing automation services, we access data from advertising platforms (including Meta, Google, LinkedIn, and TikTok) and marketing automation platforms (including Klaviyo and GoHighLevel) on behalf of our business clients. This data may include:

Campaign Performance Data: Impressions, clicks, conversions, costs, and other advertising metrics
Audience Data: Aggregated demographic and interest data provided by advertising platforms
Ad Account Information: Account IDs, campaign structures, and configuration settings

We access this data only with explicit authorization from our business clients and only for accounts they have granted us access to manage.

2.2 Information from the Waterloo Marketing App

The Waterloo Marketing app accesses limited information from Meta products (Facebook and Instagram) through authorized APIs, including:

Basic profile information (name, email, user ID) of authorized app users
Page and ad account data needed for campaign management and performance reporting
Advertising metrics (impressions, clicks, conversions, spend)
Audience insights provided by Meta advertising platforms

We do not collect personal information beyond what is necessary for providing advertising management services to our business clients.

2.3 Information from Our Website

When you visit our website, we may collect:

Contact Information: Name, email address, phone number, and company name when you submit forms
Usage Data: Pages visited, time spent, referring sources, and device information
Cookies: See Section 7 below

3. How We Use Information

We use information for the following purposes:

Service Delivery: Managing advertising campaigns, optimizing performance, and providing reports to clients
Automation: Implementing automated rules for budget adjustments, performance alerts, and campaign optimization
Communication: Responding to inquiries and providing updates to clients
Improvement: Analyzing aggregated data to improve our services

We do not sell, rent, or disclose user data to any external third parties. Data is shared only with the business clients who own the respective ad accounts.

We do not sell personal information. We may share information in the following circumstances:

With Clients: We share advertising performance data with the business clients who own those ad accounts
Service Providers: We use tools and platforms to deliver our services (e.g., reporting dashboards, automation tools)
Legal Requirements: When required by law, regulation, or legal process
Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data from Third-Party Platforms

5.1 Meta (Facebook/Instagram)

We access Meta advertising data through the Meta Marketing API via the Waterloo Marketing app. We:

Only access ad accounts where clients have explicitly granted us partner access
Use data for campaign management, optimization, and reporting
Do not use Meta data for purposes other than providing advertising services to our clients
Comply with Meta’s Platform Terms and Data Use Restrictions

5.2 Google Ads

We access Google Ads data through the Google Ads API under our Manager Account (MCC). Similar restrictions apply.

5.3 Other Platforms

We apply equivalent data protection practices to all advertising platforms we work with.

6. Data Retention

Advertising performance data: Retained for the duration of the client relationship plus 12 months for reporting and compliance purposes, then securely deleted.
App user profile data: Retained only while the user has active access. Deleted within 30 days of access revocation.
Internal testing data: Automatically purged every 90 days.
Website data: Contact form submissions retained for 24 months or until deletion is requested.

No personal data is retained longer than necessary for its stated purpose.

7. Cookies and Tracking

Our website uses cookies for:

Essential Functions: Site operation and security
Analytics: Understanding how visitors use our site (via Google Analytics or similar)
Advertising: Measuring the effectiveness of our own marketing

You can control cookies through your browser settings.

8. Data Security

We implement appropriate technical and organizational measures to protect information, including:

Encrypted storage of credentials and access tokens
Access controls limiting data access to authorized personnel
Regular security reviews of our systems and processes
Secure deletion of data when no longer needed

For individuals in the European Economic Area (EEA), United Kingdom, or Switzerland:

Legal Basis for Processing: We process personal data on the basis of legitimate interest (providing advertising management services to our business clients) and, where applicable, consent.

Data Controller and Processor: Waterloo Digital acts as a data processor when handling data on behalf of our business clients (the data controllers). When accessing data for our own internal operations, Waterloo Digital acts as the data controller.

Your Rights Under GDPR: You have the right to:

Access the personal data we hold about you
Request rectification of inaccurate data
Request erasure of your data (“right to be forgotten”)
Restrict or object to processing
Data portability
Lodge a complaint with a supervisory authority

Data Processing Agreements: We maintain Data Processing Agreements (DPAs) with our business clients that define the scope, purpose, and duration of data processing, as well as the rights and obligations of each party.

To exercise any of these rights, contact us at privacy@waterloo.digital.

10. Your Rights

Depending on your location, you may have rights to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information
Object to or restrict certain processing
Data portability

To exercise these rights, contact us at the information below.

11. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website with a new “Last Updated” date.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Waterloo Digital LLC 510 Austin Avenue Suite 1000 #25599 Waco, TX 76701

Email: privacy@waterloo.digital Website: https://waterloo.digital

User Data Deletion Policy

Effective Date: May 1, 2026

If you have used the Waterloo Marketing Meta app and would like to request deletion of your data, please follow the process below.

1. Data Deletion Process

To request deletion:

Send an email to privacy@waterloo.digital with the subject line “Meta App Data Deletion Request.”
Include your Meta User ID (if available) and the email associated with your Meta account.
We will confirm receipt and delete any data associated with your user ID within 7 business days.

2. Automatic Deletion

In addition to manual requests:

All data stored for internal testing or analytics is automatically purged every 90 days.
No personal data is shared outside our internal systems.

3. Confirmation

Once deletion is complete, we will send a confirmation email. If no data is found, we will confirm that as well.

4. Contact

For any data deletion requests or questions, contact: Email: privacy@waterloo.digital

Privacy Policy