Privacy Policy

Last updated: February 12, 2026

1. Introduction

Welcome to MonuMarketing (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. MonuMarketing is an AI-powered marketing automation platform that helps monument and memorial businesses manage their online presence. If you have any questions or concerns about this privacy notice or our practices with regards to your personal information, please contact us at nick@giffordmonument.com.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the website, express an interest in obtaining information about us or our products and services, when you participate in activities on the website, or otherwise when you contact us.

  • Personal Information Provided by You: Names, phone numbers, email addresses, and contact preferences.
  • Social Media Login Data: We may provide you with the option to register with us using your existing social media account details, like your Facebook, Google, or LinkedIn account.

3. Google User Data: Data Accessed

When you connect your Google account to MonuMarketing, we request access to the following specific types of Google user data through OAuth 2.0 authorization:

3.1 Google Account Information

We access your basic Google profile information including your name, email address, and profile picture. This data is used solely for account creation, authentication, and displaying your identity within the MonuMarketing dashboard.

3.2 Google Business Profile Data

With your explicit authorization, we access your Google Business Profile data including:

  • Business listing information (name, address, phone number, hours, description)
  • Customer reviews and review responses
  • Business posts (updates, offers, events)
  • Business photos and media
  • Questions and answers
  • Performance metrics (search impressions, direction requests, phone calls, website clicks)
  • Search keyword data (terms people used to find your business)

3.3 Google Analytics Data

With your explicit authorization, we access read-only Google Analytics 4 (GA4) data including:

  • Website traffic metrics (sessions, users, page views)
  • Traffic source and acquisition data
  • User behavior and engagement metrics
  • Conversion and goal data
  • GA4 property and account configuration (read-only)

3.4 Google Ads Data

With your explicit authorization, we access your Google Ads data including:

  • Campaign performance data (impressions, clicks, cost, conversions)
  • Ad group and keyword performance metrics
  • Conversion tracking data
  • Account-level spend and budget information

4. Google User Data: How We Use, Process, and Handle Your Data

We use the Google user data described above strictly for the following purposes:

4.1 Purpose of Data Use

  • Authentication: Google account information is used to verify your identity and log you into MonuMarketing.
  • Marketing Performance Dashboards: Google Analytics, Google Ads, and Google Business Profile data are displayed in your MonuMarketing dashboard to provide a unified view of your marketing performance.
  • AI-Powered Marketing Recommendations: Our AI agents analyze your Google Analytics traffic data, Google Ads campaign data, and Google Business Profile performance to generate actionable marketing recommendations and reports.
  • Review Management: Google Business Profile reviews are displayed in MonuMarketing so you can monitor and respond to customer reviews from within the platform.
  • Content Publishing: With your explicit permission, we create and publish posts to your Google Business Profile on your behalf.
  • Listing Management: With your explicit permission, we update your Google Business Profile listing details (description, hours) to keep your information accurate.

4.2 Data Processing and Storage

  • Google user data is accessed in real time via Google APIs and is not permanently stored in our databases unless necessary for caching or displaying within the platform.
  • OAuth refresh tokens are securely stored in our encrypted database (Supabase) to maintain your connection. These tokens can be revoked at any time by disconnecting Google from your MonuMarketing settings or by revoking access in your Google Account security settings.
  • We do not store raw Google Analytics session data or individual user-level Google Analytics data on our servers.
  • Google Ads spend and campaign data may be cached temporarily for dashboard display and AI analysis, but is refreshed from the Google Ads API on each request.

4.3 Data Sharing and Transfer

  • We do not sell, rent, or trade your Google user data to any third parties.
  • We do not share your Google user data with third parties for their own marketing or advertising purposes.
  • Google user data may be processed by our AI systems (OpenAI, Google Gemini) solely to generate marketing recommendations and reports for your account. This data is sent via API calls and is not used to train third-party AI models.
  • We use Vercel for hosting and Supabase for database services. These service providers may process data on our behalf under strict data processing agreements.

4.4 Data Retention and Deletion

  • OAuth tokens are retained as long as your account is active and the Google integration is connected.
  • When you disconnect Google from MonuMarketing or delete your account, we delete your stored OAuth tokens and any cached Google data.
  • You may also revoke MonuMarketing's access to your Google data at any time via your Google Account permissions page.

5. How We Use Your Information (General)

In addition to the Google-specific uses described above, we use information we collect or receive:

  • To facilitate account creation and logon process.
  • To post content on your behalf (with your explicit permission) to connected platforms like Facebook, Instagram, and Google Business Profile.
  • To send you marketing and promotional communications.
  • To manage user accounts.
  • To deliver and facilitate delivery of services to the user.
  • To respond to user inquiries and offer support.

6. Sharing Your Information

We may process or share your data that we hold based on the following legal basis:

  • Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
  • Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
  • Service Providers: We share data with service providers (Vercel, Supabase, OpenAI, Google) who assist in operating our platform, subject to data processing agreements.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data. OAuth tokens are stored in encrypted databases. API communications use HTTPS/TLS encryption. Access to user data within our systems is restricted to authorized personnel and automated systems necessary to provide our services.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate personal data.
  • Request deletion of your personal data and account.
  • Disconnect any third-party integration (Google, Facebook, etc.) at any time from your dashboard settings.
  • Revoke MonuMarketing's access to your Google data via your Google Account permissions page.

9. Contact Us

If you have questions or comments about this policy, you may email us at nick@giffordmonument.com or contact us at:

MonuMarketing
Gifford Monument Works
Ada, Oklahoma
nick@giffordmonument.com