Last updated: July 20, 2026
This Privacy Policy describes how Affect Group Inc. ("Affect Group", "we", "us", or "our"), the operator of the DataMind platform, collects, uses, processes, stores, discloses, and protects information when you use:
Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood it. If you do not agree with our practices, please do not use the Services. Capitalized terms not defined here have the meaning given in our Terms of Service, which also govern your use of the Services.
This Privacy Policy applies to:
Our role. For account, billing, and usage information, Affect Group acts as a data controller. For Platform Data that a Customer connects to the Services, the Customer is the controller (or is authorized by the account owner to act on their behalf), and Affect Group acts as a data processor — we process that data solely to provide the Services to the Customer, per the Customer's instructions.
This Privacy Policy does not apply to data collected directly by third-party platforms (such as Google, Meta, or TikTok), which is governed by their respective privacy policies.
When you create a DataMind account or communicate with us, we collect:
When you connect an advertising or analytics account, you authorize DataMind through the platform's official authorization flow (e.g., Google OAuth). With that explicit authorization, we may access and process:
We do not collect:
Platform Data is business and advertising performance data. Note that some platform reports (for example, search terms) may incidentally contain text typed by end users; we process such data only as part of the reports the platform provides and only to deliver the Services to you.
Scope of permissions vs. our actual use. Some advertising platforms grant only a single, combined permission level covering both reading and writing. The Google Ads API, for example, offers no read-only permission, so Google's consent screen states that the application may "see, edit, create, and delete" your Google Ads accounts and data, regardless of what the application actually does. DataMind uses this access exclusively to read data: we issue only read queries and never create, modify, pause, or delete anything in your advertising accounts. Every change to your accounts is made by you. Where a platform does offer a read-only permission, we request only that permission (for example, we use the read-only scope for Google Analytics). If you wish to enforce this limitation technically, you may authorize the connection using a platform user account that itself holds read-only access, since our access can never exceed the permissions of the user who authorized it.
To improve the relevance of audits and recommendations, you may provide business context — such as your business description, goals, target economics (e.g., target CPA or ROAS), budgets, geographies, and constraints (a "Brief"). We process this information solely to generate analyses and recommendations for you.
Paid subscriptions are processed by our payment processor, Stripe. Your full payment card details are collected and processed by Stripe directly and are never stored on our servers. We receive and store limited billing information: your subscription plan, billing status, invoices, transaction identifiers, and the last digits / brand of your card as provided by Stripe. Stripe's processing is governed by its own privacy policy.
We automatically collect:
We and our partners use cookies and similar technologies (such as pixels, tags, and local storage) for several purposes, which fall into three categories:
On our public marketing website, non-essential cookies (analytics and advertising) are set only where you consent through our cookie banner or where otherwise permitted by applicable law. You can withdraw or change your choice at any time (see Section 4A and our Cookie Policy). Inside the authenticated application, we use only strictly necessary and product-analytics technologies — not advertising cookies. Most browsers also let you block or delete cookies; if you block strictly necessary cookies, parts of the Services may not function.
Some data you enter (such as Brief drafts) may be stored locally in your browser (e.g., IndexedDB / local storage) to preserve your work between sessions. You can clear this at any time via your browser settings.
For the full list of cookies and how to manage them, see our Cookie Policy.
We use the information described above to:
We do not:
DataMind uses large language models (LLMs) to formulate analyses and recommendations. It is important that you understand how this works:
This Section describes how we advertise our own product and measure our marketing. It concerns visitors to our public marketing website (datamind.affectgroup.com) and is entirely separate from the advertising accounts you connect to the Services — we never use the data from your connected accounts for our own advertising (see Sections 3 and 5).
To promote DataMind and understand where our visitors come from, we and our advertising partners use cookies, pixels, and similar technologies on our marketing website:
What this data is used for. These technologies help us measure ad performance (conversion measurement), show relevant DataMind ads (remarketing / retargeting), and understand our audience in aggregate. They are used to advertise our own product — we do not sell your personal information, and we do not use these tools to profile you for anyone else's advertising.
Your choices. You control these technologies in several ways:
California and other U.S.-state residents: see Section 10.3 for how our use of these advertising technologies is treated as "sharing" (and how to opt out). For the full cookie inventory, see our Cookie Policy.
DataMind's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, we:
You can revoke DataMind's access to your Google data at any time by disconnecting the integration in the Services or via your Google Account security settings.
We disclose information only in the following circumstances:
We do not sell your personal information for money. However, our use of advertising and analytics cookies on our marketing website (Section 4A) — such as Google Ads remarketing and the Meta Pixel — may be considered a "sale" or "sharing" of personal information for cross-context behavioral advertising under California and certain other U.S.-state laws, because personal information (such as online identifiers) is disclosed to advertising partners for targeted-advertising purposes. You can opt out of this as described in Sections 4A and 10.3. We do not knowingly sell or share the personal information of anyone we know to be under 16.
We implement appropriate technical and organizational safeguards designed to protect your information, including:
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.
We are a U.S. company, and our Services are hosted on cloud infrastructure located primarily in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. Where required by applicable law (including the GDPR and UK GDPR), we implement appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses.
You may access, correct, or update your account information in your account settings, and you may unsubscribe from marketing emails at any time via the link in each email. Transactional emails about your account and billing will still be sent while your account is active.
If you are located in the EEA, UK, or a jurisdiction with similar laws, you have the right to: (i) access the personal data we hold about you; (ii) correct inaccurate data; (iii) request deletion; (iv) receive a portable copy; (v) restrict or object to processing; and (vi) withdraw consent at any time where processing is based on consent, without affecting prior processing. Our legal bases for processing are: performance of a contract (providing the Services), consent (e.g., connecting an advertising integration, marketing emails), legitimate interests (security, fraud prevention, service improvement), and legal obligation. You may lodge a complaint with your local supervisory authority; we would appreciate the chance to address your concerns first at hello@affectgroup.com.
For Platform Data processed on behalf of a Customer, we act as a processor: if you contact us about data controlled by a Customer, we will refer your request to that Customer and support them in responding as required by law.
Residents of California and other U.S. states with comprehensive privacy laws have the right to: (i) know what categories of personal information we collect, the sources, purposes, and categories of recipients; (ii) access the specific pieces of personal information we hold; (iii) correct inaccurate information; (iv) delete personal information; (v) opt out of the "sale" or "sharing" of personal information and of targeted advertising; and (vi) not receive discriminatory treatment for exercising these rights. The categories of personal information we collect and our purposes are described in Sections 2 and 3; recipients are described in Section 6. We do not sell personal information for money and do not use or disclose sensitive personal information for purposes that require an opt-out.
"Sale" / "Sharing" and how to opt out. As explained in Section 4A, our use of advertising and analytics cookies on our marketing website (e.g., Google Ads remarketing, the Meta Pixel) may qualify as a "sale" or "sharing" of personal information for cross-context behavioral advertising / targeted advertising under these laws. You can opt out by: (i) selecting "Reject" (or managing your preferences) in the cookie banner on our marketing website; (ii) using a Global Privacy Control (GPC) signal, which we honor as a valid opt-out where required; or (iii) using the platform and industry controls in Section 4A. To exercise any other right, contact hello@affectgroup.com; we will verify your identity before responding, and you may use an authorized agent as permitted by law.
The Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at hello@affectgroup.com and we will promptly delete it.
The Services integrate with third-party platforms (Google LLC, Meta Platforms, Inc., TikTok / ByteDance Ltd., Stripe, Inc., and others) through their official APIs and in compliance with their developer policies, including the Google API Services User Data Policy, Meta Platform Terms and Developer Policies, and TikTok's developer terms. The Site and Services may also contain links to third-party websites. We do not control, and are not responsible for, the privacy practices of third parties; your use of their services is governed by their own policies.
Some browsers transmit "Do Not Track" (DNT) signals. Because there is no common industry standard for interpreting DNT, we do not respond to DNT signals. We do, however, honor the Global Privacy Control (GPC) signal as an opt-out of the "sale"/"sharing" of personal information where required by applicable law (see Sections 4A and 10.3). As described in Section 4A, our advertising partners may track visits to our marketing website over time and across other websites to serve and measure DataMind advertising; you can opt out as described in that Section.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and post the updated policy on the Site. For material changes, we will provide reasonable advance notice (e.g., by email or an in-product notice) and, where required by applicable law, obtain your consent. Your continued use of the Services after an updated policy takes effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, or wish to exercise any of your rights, contact us at:
Affect Group Inc. Email: hello@affectgroup.com Address: 1401 21st ST, STE R, Sacramento, CA 95811, USA