Last updated: October 30, 2026
Who we are
[Legal entity name], [registered address], runs Remarketing.com and decides how the personal information described here is used.
Information we collect
- Your account. When you sign up: your name, email address, company (optional), when you accepted these terms and when you verified your email. We store your password only as a one-way hash, never the password itself.
- What you send us. If you use the contact form, your name, email address, company (optional), the topic and your message.
- What you enter in the workspace. Brand name, website, tone, approved copy and claims, prohibited phrases, disclosures, campaign briefs, imagery and the edits you make. This is business content, not information about your customers.
- Technical data. Each time you log in, we record the IP address and browser of that session, and contact messages are stored with the IP address and browser they were sent from, to keep the service secure and prevent abuse. To limit repeated attempts (such as wrong passwords), we keep short-lived counters keyed by a one-way hash of the IP address or email address. Our web server and hosting provider may also log your IP address, browser type, pages requested and the time.
- Cookies and browser storage. A cookie keeps you logged in, and your browser remembers a few workspace view choices, such as the open tab. Your work itself is saved to your account. See the cookie policy.
How we use information
- To create and secure your account: verifying your email, logging you in and helping you reset your password.
- To reply to your messages and requests.
- To provide the workspace: generating, checking, tracking and exporting your creative.
- To keep the service secure, prevent abuse and fix problems.
- To meet legal obligations.
Where the law requires a legal basis, we rely on our legitimate interests in running the service, on performing our agreement with you, on your consent where we ask for it, and on legal obligation.
AI processing
Drafts are currently generated by our own service from predefined templates, your brand rules and your brief. No AI provider receives your content. Before we connect one, we’ll update this policy to name it and describe what it receives. Please don’t enter personal information about individuals in the brand, brief or copy fields.
Audiences and personal traits
The service doesn’t infer personal traits about people. Audiences such as returning visitors, cart abandoners and contextual readers, and options such as adult age range, region and message direction, are chosen by you. Generated copy is written not to imply personal traits. Visitor signals, such as website, cart or CRM events, are used only where an advertiser connects them, and only permitted, consented first-party signals should be used. What is processed depends on the integration and is confirmed before activation.
International transfers
Our providers may process information in other countries. Where required, we use safeguards such as standard contractual clauses.
How long we keep it
Contact messages are kept for [period] after we resolve them. Server logs are kept for [period]. Workspace content is kept [describe]. We delete or anonymize information when we no longer need it.
- Account information is kept while your account is open. When you delete a campaign, its brief, copy and approval history are deleted at once. A replaced brand image is deleted.
- A login session ends after a day without use, or 30 days after you log in if you chose “Keep me logged in”. It ends at once when you log out or reset your password.
- Email verification links work for 24 hours and password reset links for 60 minutes. Each works once, and a newer link replaces the one before.
- Counters that limit repeated attempts expire within an hour.
- Workspace view choices kept in your browser end when you close the tab.
Security
We use reasonable technical and organizational measures to protect information, including encrypted connections, password hashing and limits on repeated login attempts. Uploaded images are stored privately and shown only through links that expire after 15 minutes. When you choose a password, we check it against passwords exposed in known data breaches: the checking service (Have I Been Pwned) receives only the first five characters of a one-way hash of it, never the password. No system is completely secure, so we can’t guarantee absolute security.
Your rights
Depending on where you live, including under laws such as the GDPR, the UK GDPR, US state privacy laws and India’s Digital Personal Data Protection Act, 2023, you may have the right to:
- ask what personal information we hold about you and get a copy;
- have inaccurate information corrected or information deleted;
- object to or restrict some uses, and withdraw consent you gave;
- receive your information in a portable format; and
- complain to your data protection authority.
To use these rights, including closing your account and deleting its information, email hello@remarketing.com or use the contact page and choose “General question”. We may need to confirm who you are first.
Children
The service is for businesses and isn’t directed to anyone under 18. We don’t knowingly collect information from children. If you think we have, contact us and we’ll delete it.
Changes to this policy
We’ll post updates here and change the date at the top. For significant changes we’ll give reasonable notice.
Contact
For privacy questions, email hello@remarketing.com or use the contact page.