How we handle your information

Who we are

Marketing Plan Pros ("MPP", "we", "us") is a performance-based marketing partner for small and mid-sized businesses. We run our company and our client engagements from a single web application, the MPP portal, which our team signs into at app.marketingplanpros.com. Clients are invited into the same portal to follow their plan, tasks, website, and results.

This policy explains what information those systems collect, why, who can see it, and how to remove it. It applies to:

• marketingplanpros.com, our public website, including the blog and the free Website Grader;
• the MPP portal at app.marketingplanpros.com, used by our team and by invited clients;
• client edit links, the login-free links we send so a client can edit their own website;
• connected accounts: the Google and Microsoft accounts our team members, and in some cases clients, connect to the portal.

What we collect

Visitors to marketingplanpros.com

We collect only what you give us. If you apply for a partnership or send a message through a form on the site, we receive the details you enter (name, email, company, website, and your message). If you run the Website Grader, we receive the URL you submit and the email address you choose to attach to the report. We do not use third-party advertising or analytics trackers on the public site.

People who sign into the portal

You sign in with a Google account or with a one-time link sent to your email address. From that sign-in we store your name, email address, and profile picture, a role (team member, client contact, or viewer), and the sign-in times our authentication provider records. Clients are matched to their company by the email address their invitation was sent to.

Client and engagement records

To do our work we keep records about each client engagement: contact details, the marketing plan, tasks, proposals, success models and projections, website files, status reports, meeting notes, invoices, and a timeline of activity. Much of this comes from the business systems we use to run engagements, such as our CRM, our invoicing provider, and our website hosting provider. If you are a client, this is the same information you can see in your portal.

Client edit links

A client edit link is a signed token that grants edit access to exactly one website for a limited period (30 days by default). We do not store the token; we verify its signature when it is used. Edits made through the link are committed to that website's source repository in the client's name.

Google user data

Team members, and clients who choose to, can connect a Google account to the portal. We ask for the smallest set of permissions each feature needs. Here is every permission we request and exactly what it is used for:

Permission	What it does in the portal
See your email address userinfo.email	Identifies which account was connected, so you can see it listed and disconnect it, and so meetings are booked on the right calendar.
Read your Gmail messages gmail.readonly	Builds the client activity timeline. Every 15 minutes we look for messages exchanged with a known client contact and record metadata only: who, when, the subject line, and a link that opens the message in your own Gmail. We never store message bodies, snippets, or attachments, and messages that do not involve a client are skipped entirely, not stored.
See your calendars calendar.readonly	Files meetings with client contacts on that client's timeline (title, time, attendees, and the event link), and reads free/busy time so the team scheduler can find a slot that works for everyone. Free/busy is read at the moment someone searches and is not stored.
Create and edit calendar events calendar.events	Books the meetings you schedule in the portal on your own calendar, with a Google Meet link and invitations to the people you chose. We only create events you ask for.
See, edit, create and delete your Google Drive files drive	Creates a folder for each client inside our shared Clients folder when a deal closes, opens the Docs and Sheets you link to a client, and powers the folder picker and the spreadsheet importer. We only touch the files and folders you open or that are created for a client; we do not scan or index your Drive.

You can also connect additional Google accounts for scheduling only. Those extra accounts are asked for calendar access alone, and we use them solely to read free/busy time.

Our commitments for Google data

MPP's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We only use Google user data to provide and improve the portal features described above, which you see and interact with.
• We do not sell Google user data, and we do not use it for advertising, for building marketing profiles, or for any purpose unrelated to those features.
• We do not transfer Google user data to anyone except the service providers listed below who operate the portal on our behalf, when required by law, or as part of a merger or acquisition with notice to you.
• Humans at MPP do not read your Google data except where you have given consent to a specific action, where it is necessary for security purposes such as investigating abuse, to comply with the law, or where the data has been aggregated and anonymized for internal operations.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models. Where the portal uses an AI provider to summarize client activity, it processes metadata already on the timeline under terms that prohibit the provider from training on it.

How Google credentials are stored

When you connect an account we store a refresh token so the sync can run whether or not you are signed in. That token is encrypted at rest with AES-256-GCM using a key that lives only on our server; it is never sent to the browser and is not readable through the portal's database. Access tokens are short-lived and are not stored.

Microsoft account data

Team members can connect one or more Microsoft accounts (Outlook.com or Microsoft 365) for scheduling. We request Calendars.Read and User.Read only. We use them to read your email address, so the account is listed under your name, and your free/busy time, so the scheduler can propose times that avoid your existing commitments. We do not read event details other than their start and end times, do not create events on Microsoft calendars, and do not read mail. The refresh token is encrypted and stored exactly as described for Google above.

How we use information

• To run client engagements: plan, track, schedule, report, and deliver the work we are hired to do.
• To show each client their own engagement in the portal.
• To keep a shared, metadata-only timeline so our team knows the last time a client was contacted.
• To draft summaries, follow-up suggestions, and weekly status reports with AI assistance, which a team member reviews before anything is sent to a client.
• To secure the portal, including verifying sign-ins and investigating misuse.
• To respond when you contact us.

Who we share it with

We do not sell personal information. We share it only with the providers that run the portal for us, each bound by its own terms to use the data only to provide its service:

• Google Cloud / Firebase: authentication and the portal database.
• Netlify: hosting for the portal, this website, and the client websites we build.
• Anthropic: the AI provider behind the portal's assistants and digests.
• GitHub: source control for the websites we build and edit.
• Our CRM, invoicing, email, and meeting-notes providers, for the engagement records described above.

Within the portal, our team members can see client engagement records and the shared activity timeline. Clients can see only their own engagement. We may also disclose information when the law requires it or to protect the rights and safety of our clients, our team, or the public.

Retention and deletion

• Connected accounts. Disconnecting a Google or Microsoft account in the portal deletes its stored token immediately and, for Google, revokes the grant with Google. Nothing further is read from that account.
• Timeline entries that were filed from a connected account remain on the client's timeline as metadata (who, when, subject). Ask us and we will remove them.
• Engagement records are kept for the life of the engagement and for as long as we need them for our records, accounting, and legal obligations.
• Website Grader reports and form submissions are kept until you ask us to delete them.

Your choices

• You can revoke the portal's access to your Google account at any time at myaccount.google.com/permissions, and to your Microsoft account at account.live.com/consent/Manage. Revoking there has the same effect as disconnecting in the portal.
• You can ask us to show you, correct, export, or delete the personal information we hold about you. Email us at the address below and we will respond within 30 days.
• Clients can stop using the portal at any time; ending an engagement does not require deleting your account, but you can ask us to.

Security

The portal is served only over HTTPS. Sign-in is handled by Firebase Authentication. Database rules restrict every record to the people who should see it, and stored credentials are encrypted as described above. Our team signs in with Google accounts protected by two-step verification.

Children

Our services are for businesses and are not directed at children under 16. We do not knowingly collect information from them.

Changes to this policy

If we change how we use your information, we will update this page and the effective date at the top, and we will tell portal users directly when the change is material.

Contact

Questions, requests, or concerns about privacy: email logan@marketingplanpros.com, or write to Marketing Plan Pros, attention Privacy.

See also our Terms of Service.