Privacy Policy

This Privacy Policy explains how MARVELOCE (also “MarVeloce”, “we”, “us”, “our”) handles personal information across our website, our paid-media services for clients, and our internal tools — including the Campaign Reporter application registered with Meta. We are a business based in Canada.

1. Scope

This policy applies to:

• Visitors to marveloce.com and any subdomains.
• People who contact us by email or book meetings through Calendly.
• Clients who engage MARVELOCE to plan, execute, or measure paid-media campaigns.
• Operators of the Campaign Reporter app (an internal Meta-integrated tool).

It does not apply to third-party services we rely on, which have their own privacy practices — see Section 6.

2. Information we collect

2.1 From website visitors

When you visit marveloce.com, our hosting provider and analytics tools automatically collect:

• IP address, browser type, device type, and operating system.
• Pages viewed, referring URL, time spent on site, and approximate location (country/region from IP).
• Pseudonymous identifiers placed by analytics and advertising tags (see Section 5).

We do not require website visitors to create accounts, and we do not collect names, email addresses, or contact details from visitors unless they choose to share that information through the methods in Section 2.2.

2.2 From people who contact us

If you book a meeting via the Calendly link or email us at chzhang@marveloce.ca, we receive whatever you choose to share — typically your name, email, company, meeting time, and any context you provide about your needs.

2.3 From clients

Clients who engage MARVELOCE for paid-media services give us access to their advertising platforms (such as Google Ads, LinkedIn Ads, and Meta Ads) and share business information needed to run campaigns — brand assets, targeting parameters, creative requirements, performance goals, and budgets.

The personal data of a client’s own customers (for example, audience lists or conversion data) remains the property and responsibility of the client. MARVELOCE acts as a service provider/processor and handles such data strictly under the terms of the contract signed with each client.

2.4 From operators of the Campaign Reporter app

When an authorized MARVELOCE administrator authenticates the Campaign Reporter app, the app accesses the following through the Meta Marketing API:

• Ad account metadata: account IDs, names, currency, time zone, and the owning business.
• Campaign, ad set, and ad data: names, status, schedules, budgets, and creative metadata.
• Aggregated performance metrics: impressions, clicks, spend, conversions, and similar insights provided by Meta.
• OAuth access tokens issued by Meta to the operator’s account.

The app does not access personal data of individuals who saw or interacted with ads, and does not access messaging content or contact lists.

3. How we use information

• Operate and maintain our website.
• Respond to inquiries and schedule meetings.
• Provide the paid-media services we are contracted to deliver — planning, execution, analytics, optimization, and reporting.
• Generate internal performance reports (the Campaign Reporter app).
• Improve our services through aggregate analysis (for example, understanding which content on our site is useful).
• Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use information to profile individuals beyond standard advertising-platform features that our clients have authorized.

4. AI tools we use

We use AI assistants — including Anthropic Claude, OpenAI, and Google Gemini — to help with creative drafting, analysis, and reporting. Our internal policy is strict:

• We do not input personally identifiable client-customer data (names, emails, phone numbers, or other PII) into AI tools.
• We input only campaign-level material such as briefs, copy drafts, aggregated metrics, and creative concepts.

These vendors process the information we send under their respective business terms. Their privacy policies apply to that processing:

• Anthropic: https://www.anthropic.com/legal/privacy
• OpenAI: https://openai.com/policies/privacy-policy
• Google (Gemini): https://policies.google.com/privacy

5. Cookies and tracking technologies

Our website may use the following tags and cookies for analytics and advertising measurement:

• Google Analytics 4 — site usage analytics.
• Google Tag Manager — tag deployment.
• Meta Pixel — measurement of ad effectiveness.
• LinkedIn Insight Tag — measurement of ad effectiveness.

These technologies set cookies and may share information (such as your IP address and pseudonymous identifiers) with the platforms above.

If you are visiting from the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, you can manage your preferences through our cookie consent banner when displayed. You can also block or delete cookies at any time through your browser settings; doing so may affect site functionality.

6. Third-party services and sub-processors

We rely on the following third-party services to operate. Each has its own privacy practices:

• Vercel — hosting for marveloce.com.
• Calendly — meeting scheduling.
• Google Fonts — typography (loads from Google’s servers, which receive your IP).
• Google Ads, LinkedIn Ads, Meta Ads, and other advertising platforms — used to manage client campaigns.
• Anthropic, OpenAI, Google (Gemini) — see Section 4.
• Google Workspace — email and productivity (we receive emails sent to chzhang@marveloce.ca through Google).

We do not sell personal information to any party.

7. Data retention

• Inquiry and meeting data: retained as long as needed to follow up, then deleted on request.
• Client business data: retained per the contract signed with each client; deleted at the end of the engagement on request.
• Campaign Reporter data (locally stored reports and tokens): retained as long as the operator finds them useful, deleted on request.
• Server and analytics logs: retained per the default retention windows of the respective providers (typically 14 months for Google Analytics 4 unless changed).

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of certain processing (such as advertising cookies).
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority — for example, the Office of the Privacy Commissioner of Canada (PIPEDA), your supervisory authority in the EU (GDPR), or the California Attorney General (CCPA).

To exercise any of these rights, or to revoke the Campaign Reporter app’s access to your Meta account, see the options below:

1. Revoke Meta access: visit https://www.facebook.com/settings?tab=business_tools — this immediately cuts off the Campaign Reporter app’s access.
2. Email us at chzhang@marveloce.ca with the subject line “Privacy Request”. We will respond within 30 days.

9. International data transfers

MARVELOCE is based in Canada. Some of our service providers (including Vercel, Google, OpenAI, Anthropic, Meta, and LinkedIn) process data in the United States and other jurisdictions. By using our website or services, you understand that your information may be transferred to and processed in those jurisdictions, which may have different data protection laws than your own.

10. Security

• HTTPS for all website traffic.
• Restricted file permissions and secure storage for credentials and tokens.
• Access to internal systems limited to authorized personnel.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Children’s privacy

Our services are not directed to, and we do not knowingly collect information from, children under 13 (or under 16 in jurisdictions where that is the applicable threshold). If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top will reflect the most recent revision. Material changes will be communicated through this page.

13. Contact

For questions, requests, or concerns about this policy or our data practices, contact:

MARVELOCE
Email: chzhang@marveloce.ca