Privacy Policy

1. Introduction

En Garde Media, Inc. ("En Garde," "we," "our," "us") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website, applications, and services (the "Services").

By using En Garde, you agree to this Privacy Policy.

3. How We Use Your Information

• Provide and improve our Services, including AI-powered marketing intelligence and automation
• Authenticate accounts and enable integrations with platforms you choose to connect
• Analyze engagement, performance, and trends across your connected accounts
• Enrich customer profiles with demographic, professional, affluence, influence, and cultural affinity data for audience intelligence
• Generate cultural relevance scores for creative assets, landing pages, and ad placements using AI analysis combined with performance data
• Power AI agents to generate marketing recommendations, content, and campaign strategies
• Identify high-value customers based on configurable rules and data signals
• Track attribution across marketing channels and predict campaign performance
• Collect and analyze behavioral signals from publisher websites (for publishers who install our tracking technology) to improve audience targeting
• Enable access to our multicultural publisher network for programmatic ad activation
• Process payments securely via trusted providers (Stripe)
• Send service updates, security alerts, support messages, and marketing communications (which you can opt out of)
• Personalize your experience and provide relevant recommendations
• Train and improve our machine learning models for cultural affinity prediction, purchase propensity, and audience targeting
• Detect, prevent, and address fraud, abuse, or illegal activity
• Comply with applicable laws and regulations

AI and Human Control: Our AI agents generate suggestions and recommendations, but humans maintain control. No autonomous campaign execution occurs without your explicit approval.

4. How We Share Your Information

We do not sell personal information. We may share information only in these circumstances:

• With service providers: For hosting, analytics, payment processing, email delivery, SMS/messaging services, and customer support under confidentiality agreements
• With data enrichment providers: We share hashed email addresses and basic identifiers with third-party data providers to enrich customer profiles with demographic, professional, and social data. These providers operate under strict data processing agreements.
• With AI providers: We share marketing data and content with third-party AI services to power our AI agents and generate insights. We anonymize PII before sending to AI providers where possible.
• With publisher partners: Behavioral signals collected via our tracking technology are aggregated and shared with our publisher partnership network to enable programmatic advertising. Individual user-level data is not shared; only aggregated audience cohorts are made available.
• Within our publisher network: Platform users who activate campaigns through our publisher network gain access to advertising inventory across our network of multicultural publishers. Campaign performance data is shared with publishers to optimize ad delivery and calculate revenue sharing.
• With third-party platforms you connect: Only to provide Services you request (e.g., posting content, running ads), consistent with their policies
• For legal compliance: When required by law, regulation, court order, or to protect our rights and safety
• In business transactions: In the event of a merger, acquisition, or asset sale, user data may be transferred (you will be notified)

All third-party service providers are bound by confidentiality agreements and are prohibited from using your data for purposes other than providing services to En Garde.

5. Your Rights

Depending on your location, you may have the following rights:

• GDPR (EU/UK): Access, correction, deletion, restriction, portability, objection
• CCPA/CPRA (California residents): Right to know, delete, correct, and opt out of sharing personal data
• Other regions: Rights as provided under local data protection laws

To exercise your rights, contact us at privacy@engardehq.com. We will respond within legally required timelines.

6. Data Retention

We retain personal information for as long as necessary to provide our Services and comply with legal obligations:

• Account data: Retained while your account is active, and for up to 90 days after account deletion (for recovery purposes)
• Enrichment cache: Up to 60 days for customer enrichment data; shorter-term caching for AI agent context
• Tracking consent: 13-month expiration for consent records
• Session data: Session windows for behavioral pattern analysis (typically 30 minutes)
• Campaign and analytics data: Retained for the duration of active campaigns and up to 3 years for historical reporting and model training
• Audit logs: AI agent data access logs retained for 1 year (PII anonymized)
• Financial records: Retained for 7 years to comply with tax and accounting regulations

You may request deletion of your data at any time by contacting privacy@engardehq.com. We will comply with deletion requests within 30 days, subject to legal retention requirements.

7. Data Security

We implement industry-standard security measures to protect your data:

• HTTPS/TLS encryption for all data transmission
• SHA-256 hashing for email addresses and sensitive identifiers (no plaintext PII storage in pixel tracking)
• CSRF token protection and Content Security Policy (CSP) headers
• Rate limiting per route and per user to prevent abuse
• Input sanitization and XSS prevention
• SQL injection pattern detection
• Bot and scanner detection (sqlmap, nikto, burpsuite)
• PII anonymization in application logs
• Multi-tenant database isolation with row-level security (RLS) policies
• Regular security audits and vulnerability assessments

Despite our safeguards, no system is 100% secure. If you become aware of any security vulnerability, please report it to security@engardehq.com immediately.

8. For Publishers Using Our Tracking Technology

If you are a publisher who has installed our tracking technology on your website:

• Revenue sharing: Publishers participating in our network may receive revenue based on behavioral signals collected and data licensing. Specific revenue terms are outlined in publisher agreements.
• Data collected: Our tracking technology collects privacy-first behavioral signals (page categories, scroll depth, time on page, video engagement, device type, referrer). No PII is collected.
• Consent management: Publishers are responsible for obtaining user consent before our tracking technology collects data. Our technology includes built-in consent management with a 13-month expiration period.
• Data usage: Behavioral signals are used to build aggregated audience cohorts for targeting purposes. Individual user data is never sold or shared; only aggregated insights are made available to platform users.
• Publisher control: Publishers retain full control over their participation and can opt out of the network at any time by removing our tracking technology from their website.

For publisher-specific questions, please contact publishers@engardehq.com.

9. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@engardehq.com, and we will delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by email (if you have provided one) or by posting a prominent notice on our website. Your continued use of the Services after such notice constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically. The "Last updated" date at the top of this page indicates when the policy was last revised.