Privacy Policy

Langton Digital Ltd is the controller of personal information used to administer accounts, provide support, secure and maintain the Service, and manage its customer relationships.

For personal information contained in customer data and processed only on a customer's instructions, the customer is normally the controller and we act as its processor. Requests about that information may need to be handled with the relevant customer.

We collect account and workspace information such as names, business email addresses, authentication details, organisation memberships, roles, permissions, preferences and support communications.

When a user connects a third-party platform, we may receive account identifiers and names, granted permissions, access tokens, advertising and campaign data, product or catalogue data, conversion and performance information, automation settings, action results and other information required by the selected features.

We also collect technical and security information such as IP addresses, browser and device information, session and audit records, error information and records of actions performed through the Service.

Information may be provided directly by users or customers, received from connected platforms under an authorised connection, supplied by another authorised user in the same workspace, or generated through use of the Service.

We use personal information to create and administer accounts, provide workspaces and reporting, connect authorised platforms, carry out configured actions and automations, provide support, maintain audit records, prevent misuse, secure the Service, comply with law and improve reliability.

Our lawful bases are performance of a contract where the individual is the contracting party; our legitimate interests in providing and securing a business service, supporting users and operating our business; compliance with legal obligations; and consent where we specifically request it.

We use connected-platform data only to provide, support and secure features selected or authorised by the customer. We do not sell customer or connected-platform data or use it to access unrelated products.

Authorised automations may use a connection in the background until the automation is disabled, the connection is disconnected, access is revoked or the service relationship ends.

When an optional AI-assisted feature is used, relevant instructions, content and workspace data may be sent to a third-party AI provider to generate the requested output. Customers should not submit unnecessary secrets or sensitive personal information.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We share information only as needed with providers that host, authenticate, store, secure, monitor or support the Service; with connected platforms and AI providers when carrying out authorised instructions; with professional advisers under confidentiality duties; and with regulators, courts or authorities where required by law.

We may disclose information in connection with a business reorganisation, financing, sale or acquisition, subject to appropriate confidentiality and data-protection safeguards. We do not sell personal information or customer data.

Some providers and connected platforms may process information outside the United Kingdom. Where required, we use lawful safeguards such as UK adequacy regulations, approved contractual clauses or another recognised transfer mechanism.

We retain personal information only for as long as reasonably necessary for the purposes in this Policy. This depends on the type of information, whether an account or connection remains active, legal and contractual requirements, and the need for security, dispute and audit records.

When information is no longer required, we delete or anonymise it. Limited copies may remain temporarily in protected backups or where retention is required by law or needed to establish or defend legal claims.

We use appropriate technical and organisational measures designed to protect information, including access controls, tenant permissions, row-level security, encrypted connections and server-side handling of connected-platform credentials. No online service can guarantee absolute security.

We use cookies and similar storage needed for authentication, security, session management and user preferences. We do not currently use them for third-party advertising. If that changes, we will update this Policy and provide any controls required by law.

Depending on the circumstances, you may have rights to access, correct, delete or restrict personal information, object to its use, receive portable information, or withdraw consent. These rights may be subject to legal conditions and exceptions.

You may also complain to the UK Information Commissioner's Office at ico.org.uk. Where we process information only for a customer, we may refer your request to that customer or assist it in responding.

We may update this Policy when the Service, connected platforms or legal obligations change. We will give reasonable notice of material changes and obtain consent where the law or an applicable platform policy requires it.