Privacy Policy

1. Information We Collect

Information You Provide

• Account information: name, email address, phone number, agency name, and password when you create an account.
• Billing information: payment details are processed securely by Stripe. We do not store your full credit card number on our servers.
• Client data: information you upload about your clients, including business details, contact information, reports, files, and credentials stored in the vault.
• Intake form submissions: data submitted through intake and onboarding forms, including business information, branding assets, and preferences.
• Communications: emails, messages, and support requests you send to us.

Information Collected Automatically

• Usage data: pages visited, features used, and actions taken within the platform.
• Device information: browser type, operating system, IP address, and device identifiers.
• Analytics: we use Google Analytics 4 to understand how our marketing site is used. This data is aggregated and does not personally identify you within the platform dashboard.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the IDM Hub platform
• Process payments and manage your subscription
• Send transactional emails (account setup, reports, content approvals, etc.)
• Provide customer support
• Monitor platform performance and security
• Comply with legal obligations

We do not sell your personal information or your clients’ data to third parties. We do not use your data for advertising purposes.

3. Data Storage & Security

Your data is stored on secure servers hosted by Vercel and Supabase (PostgreSQL), both of which employ industry-standard encryption and security practices. Files are stored in encrypted cloud storage. Credentials stored in the credential vault are encrypted at rest.

We implement reasonable technical and organizational measures to protect your data, including HTTPS encryption for all data in transit, secure password hashing (bcrypt), rate limiting, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

4. Data Sharing & Disclosure

We may share your information only in the following circumstances:

• Service providers: We use third-party services to operate the platform (Stripe for payments, Resend for email delivery, Supabase for database hosting, Vercel for application hosting, Google for analytics). These providers process data on our behalf and are bound by their own privacy policies.
• White-label portal: If you use the white-label feature, your clients will see your agency’s branding, not ours. We do not independently contact your clients.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or government request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data. Upon account deletion, we will remove your data within 30 days, except where retention is required by law.
• Export: Request an export of your data in a portable format.
• Opt-out: Unsubscribe from marketing communications at any time (transactional emails related to your account cannot be opted out of).

To exercise any of these rights, contact us at daniel@innovativedigitalmedia.com.

6. Cookies

We use essential cookies to maintain your login session and platform preferences. We use Google Analytics on our marketing site, which may set cookies for analytics purposes. We do not use advertising cookies or third-party tracking cookies within the platform dashboard.

7. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow for reactivation, after which it is scheduled for deletion. Billing records may be retained longer as required by applicable tax and accounting laws. Anonymized, aggregated data may be retained indefinitely for analytics purposes.

8. Children's Privacy

IDM Hub is a business-to-business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

9. International Users

IDM Hub is operated from the United States. If you access the platform from outside the United States, you consent to the transfer and processing of your data in the United States in accordance with this Privacy Policy. We process data in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated” date. Your continued use of the platform after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: