Privacy Policy

1. Who We Are

IKON Marketing Suite LLC is a wholly-owned subsidiary of IKON Global Group, Inc. ("IKON," "we," "our," or "us"), a Wyoming-registered corporation. We operate the IKON Marketing Suite platform — an AI-powered marketing automation solution available at app.ikonmarketing.net and related services.

Data Controller: IKON Global Group, Inc.
Contact: support@ikonmarketing.net
Address: Wyoming, USA

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Full name, business name, email address, phone number, and password (stored as a bcrypt hash)
• Business profile: Industry, business description, target audience, service areas, logo, brand colors, and marketing goals
• Billing information: Credit/debit card details and billing address (processed and stored by Stripe — IKON does not store raw card numbers)
• Social media credentials: OAuth tokens for Facebook, Instagram, LinkedIn, Google My Business, Gmail, and other connected platforms. We store encrypted refresh tokens; we never store your social media or Google account passwords
• Advertising account data: Google Ads, Facebook Ads, and LinkedIn Ads account IDs and campaign data accessed through authorized API connections
• Communications: Support tickets, chat messages, and emails you send to us
• Employee and contact records: Names, roles, and contact information for team members you add to your account

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, buttons clicked, session duration, and interaction patterns within the platform
• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone
• Log data: Server logs including request timestamps, API calls made, and error events
• Performance data: Campaign performance metrics, post engagement rates, ad spend, lead conversion rates, and SEO ranking data pulled from connected platforms
• Cookies and similar technologies: See our Cookie Policy for full details

2.3 Information from Third Parties

• Social platforms: Follower counts, post metrics, audience demographics, and review data from platforms you authorize via OAuth
• Google services: Search Console data, Google My Business reviews, Google Ads performance, and Analytics data where authorized
• Payment processors: Stripe provides transaction status and basic card metadata (last 4 digits, expiration month/year, card type)

Section 2.5 below gives a full, platform-by-platform breakdown of exactly what we access from each connected account and why.

2.4 Google User Data

Where you connect a Google account (Google Ads, Google Business Profile, Google Analytics, YouTube, or Gmail), IKON accesses only the data needed for the features you enable — for example, reading campaign performance to build reports, applying ad changes you've approved, reading and responding to business reviews, or reading and sending email through a connected Gmail inbox for lead-response automation. IKON's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read Gmail data except as necessary for security purposes, to comply with applicable law, or with your explicit consent for support purposes.

2.5 Platform-by-Platform Data Access

We only access a platform's data after you explicitly connect that account from your IKON dashboard via OAuth, and only for the features tied to that specific connection. The table below summarizes exactly what we access from each platform, why, and the platform policy our use complies with.

None of this data is used to advertise to you on a platform other than the one it came from, sold to data brokers, or combined across platforms to build a profile of you beyond your own IKON account. You can disconnect any platform at any time from Account Settings → Connected Accounts, which immediately revokes our access token and stops further data collection from that platform — see 5. Data Retention for what happens to previously collected data.

3. How We Use Your Information

We will not use your personal data for purposes incompatible with those listed above without your prior consent.

4. How We Share Your Information

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

4.1 Service Providers (Sub-processors)

We use trusted third-party providers to operate our platform. Each is bound by data processing agreements ensuring they protect your data:

We enter into data processing agreements with sub-processors where required by applicable law, and we limit each sub-processor's access to the minimum data needed to perform its function.

4.2 Legal and Safety Disclosures

We may disclose information if required by law, court order, regulatory authority, or to protect the rights, property, or safety of IKON, our users, or the public. We will notify you of such requests where legally permitted.

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. See our full Data Retention Policy for detailed timelines. In summary:

• Active account data: Retained for the duration of your subscription
• Post-cancellation: Account data deleted within 90 days of cancellation
• Disconnected platform accounts: When you disconnect a connected platform (Google, Meta, LinkedIn, Snapchat, Pinterest, TikTok, or Microsoft) from Account Settings, we revoke and delete the associated access and refresh tokens immediately and stop collecting new data from that platform. Performance data already pulled into your reports before disconnection is retained per the schedules on this page unless you separately request deletion under Section 7
• Billing records: Retained for 7 years per US tax law requirements
• Security logs: Retained for 12 months
• Backup data: Up to 30 days after deletion

6. Data Security

We implement enterprise-grade security measures to protect your data:

• Encryption at rest: AES-256-GCM encryption for all sensitive stored data
• Encryption in transit: TLS 1.3 for all data transmitted between your browser and our servers
• Authentication: JWT-based session tokens, bcrypt password hashing, optional two-factor authentication via SMS
• Access controls: Role-based access control (RBAC) limiting data access to authorized personnel only
• Infrastructure security: Hosted on AWS with VPC isolation, security groups, and regular vulnerability scanning
• API security: HMAC-SHA256 signed webhooks, rate limiting on all endpoints, and IP monitoring
• Security audits: Regular internal security reviews and third-party penetration testing

While we use commercially reasonable means to protect your data, no system is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant regulatory authorities as required by applicable law.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

7.1 Rights Available to All Users

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time

7.2 Additional Rights Under GDPR (EU/EEA Users)

• Restriction of processing: Request that we limit how we use your data in certain circumstances
• Object to processing: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing
• Lodge a complaint: File a complaint with your local Data Protection Authority (DPA)

7.3 California Consumer Privacy Act (CCPA/CPRA)

California residents have the right to: know what personal information is collected about them; know whether their personal information is sold or shared and to whom; opt out of the sale or sharing of personal information; limit use of sensitive personal information; correct inaccurate personal information; access and port their personal information; and equal service and price, even if they exercise their privacy rights. IKON does not sell or share personal information for cross-context behavioral advertising. California residents may submit a "Do Not Sell or Share My Personal Information" request using the contact details in Section 7.5.

7.4 Other US State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and port their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects. We honor these requests for all US residents regardless of state of residence, using the process in Section 7.5.

7.5 Exercising Your Rights

To exercise any of these rights, contact us at support@ikonmarketing.net. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing certain requests.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the platform and analyze usage. For full details, including how to control or disable cookies, see our Cookie Policy.

9. International Data Transfers

IKON is headquartered in the United States. If you access our services from outside the US, your data will be transferred to and processed in the United States. For EU/EEA transfers, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission. See our International Use Policy for details.

10. Children's Privacy

IKON is a business-to-business platform and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal data, contact us at support@ikonmarketing.net and we will delete it promptly.

11. Third-Party Links and Integrations

The IKON platform integrates with third-party services and may contain links to external websites. This Privacy Policy applies only to IKON. We are not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policies of any third-party service you connect to through IKON.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email and/or a prominent notice on the platform at least 30 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

IKON Global Group, Inc.
Email: support@ikonmarketing.net
Website: ikonmarketing.net
State of Incorporation: Wyoming, USA