SAGE Marketing Privacy Policy

Effective 2026-05-11 · Operated by SIMCO LLC, Minnesota

🔒

The pledge: SAGE Marketing is the app name for SAGE's independent-shop marketing service. We don't sell your shop's data, your customer list, or your campaign results — not to advertisers, not to third-party "analytics partners," not to anyone. Every byte we collect stays in a closed loop inside your dashboard, used only to make SAGE better for your shop. That's the whole deal.

Everything below is how we make that pledge operational.

1. What we collect

Shop-provided data — only what you or your connected systems send us

Account info: shop name, owner email, shop address, vertical, timezone.
POS + storefront data (when you connect via OAuth): product catalog, order history, customer records, inventory levels. SAGE pulls only the scopes we need; you see the exact scopes before you authorize.
Customer-list uploads (CSV): names, emails, phone numbers, SMS consent state, consent proof, and purchase history. You control the list; you can delete any record at any time.
Campaign outputs: draft emails and social posts, approval decisions, send results.

Automatic data — routine web-app telemetry

IP address, browser, device type for the dashboard session (security + rate-limiting; 30-day rolling delete).
Anonymized platform-level event counts — e.g. "5,812 digest items approved across all shops this month." No individual shop or customer is identifiable. Opt out in dashboard settings (shareAnonymizedMetrics); the opt-out is a silent no-op — we never collect the event.

What we don't collect

Customer purchase history is never shared across shops. Shop A can't see Shop B's customers or data, period.
We don't track users across the open web. No Facebook Pixel, no Google Analytics 4, no third-party ad tech on any SAGE page.

2. How we use what we collect

Run the product. Generate your daily digest, draft campaigns, send transactional and bulk email, respond to dashboard requests.
Improve the product for you. Fine-tune your shop's "voice" based on campaigns you approve vs. reject. Scoped to your shop.
Improve the product for everyone (opt-in). Anonymized, aggregated metrics. Never individual data. Opt out any time.

We don't use your data to train third-party AI models. SAGE's AI calls (Gemini, Cloudflare Workers AI, Groq, Claude) are routed through the providers' no-training endpoints where available; customer/shop data is never submitted as model-training fodder.

3. Who we share with

AI providers (Gemini, Cloudflare, Groq, Anthropic) for text completions — payload contains only the prompt and the specific context for that call. Governed by each provider's no-training / zero-retention terms where offered.
Email providers (Resend, AWS SES) to deliver messages you approve.
Twilio or another SMS provider for SMS opt-in flows and owner-approved texts that you initiate.
Stripe for billing. They see billing-email + payment details, not your shop data.
Lawful requests — subpoenas, etc. We'll tell you unless legally barred.

We do not share with: advertisers, data brokers, "analytics partners," e-commerce aggregators, AI-training consortia, or anyone else not on the list above. If that list ever changes, this policy changes with it — materially and with 30 days' notice to all shops.

4. Where data lives

US-region Railway + Cloudflare infrastructure.
Daily encrypted backups; 30-day retention, then permanent delete.
Each shop's data is isolated at the filesystem level; cross-shop queries are rejected at the router.

5. Your controls

Export. Download everything in one ZIP: Dashboard → Settings → Export my data.
Delete. Dashboard → Settings → Close shop → "Delete all data." 7-day soft-delete window, then permanent erasure across app + backups.
Opt out of aggregates. Dashboard → Settings → toggle "Share anonymized usage metrics." Off means we never log the event.
SMS consent. Text messages require express opt-in, are stored with consent proof, and can be stopped by replying STOP or using the opt-out link in a SAGE text. See SMS consent and opt-out.
Disconnect integrations (Shopify, Square, Clover, Lightspeed, Mailchimp, etc.) at any time. Revoking there revokes here.

6. Google Business Profile API data

When you connect Google Business Profile, SAGE uses Google OAuth and only works with profiles you own, manage, or are authorized to manage. SAGE uses that access to show profile readiness, draft owner-approved posts, draft owner-approved profile improvements, and prepare owner-approved review replies where Google permits those features.

SAGE does not collect Google account passwords, session cookies, or credentials.
SAGE does not use GoogleLocation or Business Profile data for lead generation, prospecting, scraping, or data resale.
SAGE does not post, edit, reply, upload, or otherwise change a public Business Profile without your specific approval for that action.
Business Profile API content is stored only as needed to run the connected-shop workflow and improve dashboard performance. API-derived diagnostic snapshots are deleted or refreshed within 30 calendar days.
You can disconnect Google from the dashboard or by emailing [email protected]. After a disconnect request, SAGE removes its Business Profile management access within 7 business days.

Google Business Profile is a Google service provided at no additional charge. SAGE may charge for the independent SAGE dashboard and marketing workflow, not for access to Google Business Profile itself. More details are available on the SAGE Google Business Profile API compliance page.

7. Contact

Questions, requests, or privacy concerns: [email protected]. GDPR / CCPA requests acknowledged within 48 hours, resolved within 30 days.

8. Changes

Material changes (new data types, new sharing partners, new purposes) require 30 days' prior notice via email + dashboard banner. Non-material changes (clarifications, typo fixes) are posted here with a changelog entry.

Changelog

2026-05-11 — Added Google Business Profile API handling, owner authorization, disconnect, and API content-retention language.
2026-04-21 — Initial version, coincident with SAGE v1 launch.