Privacy Policy

TheCMO.AI ("TheCMO", "we") makes a free marketing tool that you add to an AI assistant you already use, such as Claude or ChatGPT, through a connector at mcp.thecmo.ai. It is operated by Fruitful Local. Privacy questions and requests go to cmo@thecmo.ai.

Account: when you sign in with Google we receive your Google account identifier, email address and name. We use them to create and secure your private TheCMO workspace. We do not receive your Google password.

Your business and your work: the business details you share (name, website, offer, customers), the marketing work TheCMO saves for you (briefs, plans, drafts, approvals, files you choose to store) and a running history of that work for each business.

Connected accounts: if you choose to connect an account such as Google Ads, Google Analytics, Google Search Console, Google Business Profile or Meta Ads, we store the access you grant (encrypted) and the account data we read, such as campaign settings and performance figures, so TheCMO can analyze it and check that changes went live as approved. You choose the exact account, and you can skip any connection.

Technical data: request logs, IP addresses, error reports and usage counts, used to run, secure and limit abuse of the service.

TheCMO works inside the AI assistant you choose. The conversation itself, and anything you type into it, is handled by that assistant's provider (for example Anthropic or OpenAI) under their own terms and privacy policy. TheCMO receives only what the assistant sends to TheCMO's tools, such as a business detail to save or a request to read a connected account.

Other tools you connect to your own assistant, such as image generation or SEO data services, are your accounts with those providers. TheCMO does not hold their keys or pay for their use.

We access Google data only for the scopes you approve, and use it only to provide the features you use in TheCMO: analysis, reporting, recommendations, and changes you approve.

We do not sell Google user data, use it for advertising, or use it to train AI models. We do not let humans read it except with your permission, for security, to comply with law, or as part of aggregated, anonymized internal operations.

TheCMO's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Some businesses we work with send the enquiry forms on their websites to TheCMO (api.thecmo.ai). When you submit one of those forms, we store what you entered and email it to that business so they can reply. We use it for nothing else.

We use information to provide and secure TheCMO, to do the work you ask for, and to tell you about your account. We do not sell personal information, and we do not use your data or your connected-account data to train AI models.

We share information only with providers that run the service for us (Google Cloud for hosting, Vercel for our website, Cloudflare for our domain, and our email provider), with people you invite to your workspace, when required by law, or as part of a business transfer.

We keep your data while your workspace is active. You can disconnect any connected account at any time, inside TheCMO or from that provider's own settings (for Google, your Google Account permissions page).

To delete your workspace and its data, email cmo@thecmo.ai from the address you sign in with. Copies in backups are removed as those backups expire.

Credentials for connected accounts are stored encrypted. No service can promise perfect security, but we limit who and what can reach your data.

TheCMO is for businesses and is not directed to anyone under 18.

If we change this policy we will update the date at the top. Questions, requests or complaints: cmo@thecmo.ai.