E

Echo DigitalMarketing & digital operations

Privacy Policy

Echo Digital ("Echo Digital", "we", "us") is a marketing and digital-operations agency. This policy explains how we handle information in connection with our services and our internal platform, including the tools we use to manage advertising, listings, and social accounts on behalf of our clients.

Who this policy covers

Our platform and tools are used by Echo Digital staff to deliver services to our clients. We are not a consumer application: individuals do not sign up for accounts with us directly. The data we access belongs to our clients and their connected business accounts, and we act on their instructions as a service provider.

Information we access

To deliver marketing and account-management services, we access business data through the official APIs of the platforms our clients use, only where a client has authorised that access. This can include:

• Advertising accounts and performance data (for example, Meta and Google advertising accounts a client has granted us a role on) — campaign structure, spend, impressions, clicks, and results.
• Business profile and listing data (for example, Google Business Profile information, reviews, and insights).
• Business social accounts (for example, connected Facebook Pages and Instagram business accounts) for scheduling, publishing, and reporting.

We access this information using tokens the client authorises, and only to the extent needed to perform the agreed work.

How we use information

• To create, manage, optimise, and report on advertising campaigns.
• To manage business listings, reviews, and social content on a client's behalf.
• To produce performance reports for the client whose data it is.

We do not sell personal information, and we do not use client or platform data to build advertising profiles of our own.

How we share information

We share information only as needed to provide our services: with the platform APIs the data comes from (such as Meta and Google), with the client the data belongs to, and with service providers that host our tools (such as our cloud hosting provider) under confidentiality obligations. We may also disclose information where required by law.

Data retention & security

Access tokens and working data are stored only as long as needed to provide the service and are protected with access controls appropriate to their sensitivity. When a client ends their engagement or withdraws authorisation, we stop accessing their connected accounts and remove stored access credentials.

Platform compliance

Our use of information obtained through the Meta platform follows the Meta Platform Terms and Developer Policies, and our use of Google data follows Google's applicable API and platform policies. Access is limited to accounts our clients have explicitly authorised.

Your choices

Because the connected accounts belong to our clients, a client can revoke our access at any time through the relevant platform's business settings, which immediately ends our ability to access that account. If you believe your business's data has been accessed and you have questions, contact us using the details below.

Contact