Privacy

Digital Marketing In A Box (DMIAB) helps users prepare business information and complete marketing work through ChatGPT and connected services.

 

Information DMIAB processes

 

DMIAB may process the name and verified email used to connect; account, workspace, role, business, client, and operator information; product access and subscription status; setup answers, approvals, continuation state, and support details; business information, source links, drafts, feedback, and marketing outputs; and the identifiers of Google Drive folders or files the user selects for DMIAB work. Payment providers process payment-card and bank information. DMIAB receives only the order, payment, subscription, or entitlement information needed to provide and control access.

 

How DMIAB uses information

 

DMIAB uses this information to create and maintain the User Information Kit; provide entitled marketing products; personalize work for the correct operator and business; save and resume work; enforce access, approvals, cancellation, and revocation; prevent cross-client mixing; secure and troubleshoot the service; and respond to support requests.

 

Google Drive

 

When a user connects Google Drive, DMIAB uses that connection only for the business folder, files, and actions needed for the workflow the user requested. An agency may keep a customer-owned DMIAB root with separately owned client subfolders. Each client folder is bound to its own business ID and folder ID; the agency root and other clients' folders are not shared merely because one client purchased a product. DMIAB creates or updates Kit and product documents in the selected business folder and verifies the result before reporting completion. Users should keep unrelated or personally private files outside that folder. The business folder stays private from the DMIAB provider during creation of the free Kit. After a verified purchase, DMIAB may guide the user to share the DMIAB parent folder with digitalmarketinginabox@gmail.com as Editor, to enable the creation and maintenance of purchased-product folders and customer-facing resources without repeated sharing. The user may decline; only paid setup that requires provider folder access pauses.

 

Artificial intelligence and service providers

 

DMIAB sends the minimum task content needed for generation to OpenAI's API with provider response storage disabled for the request. OpenAI may retain limited abuse-monitoring data under its applicable API data policy. DMIAB also uses Google Cloud for protected execution and storage, Auth0 for sign-in, Google Drive for user-authorized files, and third-party payment providers for purchases and subscriptions. These providers process information under their own terms and privacy commitments.

​

Optional Higgsfield connection

​

If you choose a Higgsfield video workflow, you connect your own Higgsfield account. DMIAB stores the connected account and workspace identifiers and encrypted access credentials on its protected backend. Access to the connection is limited to the authorized DMIAB account and operator. Connecting an account does not approve media generation or spending; production requires the applicable workflow approval.

​

When you disconnect Higgsfield through DMIAB, DMIAB removes the stored access and refresh credentials from its active connection store. Your completed saved work is preserved. Disconnecting DMIAB does not cancel your separate Higgsfield subscription or delete information held by Higgsfield. Higgsfield's own terms and privacy policy apply to its services.

​

Suggest My Facebook Comments

 

When an entitled user deliberately requests a comment suggestion, the Chrome extension captures only the Facebook view visible after the user clicks Suggest My Comment. If a long post does not fit in that view, the extension shows "Click to continue." That direct click reads only the one visible post whose beginning is positioned at the top of the screen, may expand that post's exact See more control, and automatically continues. “Copied” means the post text enters the current protected DMIAB suggestion request; the original post is not placed on the user's computer clipboard. The reader ignores comments, reactions, sidebars, and lower posts, is limited to 32,000 characters, and stops when the target is missing or ambiguous. The text continuation replaces the screenshot instead of resending it. DMIAB may process the selected post, active business and operator identifiers, generated versions, refinement directions, edits, and deliberate save, skip, or final-copy decisions. Only wording confirmed by clicking "Copy Final Comment" is treated as the Actual Comment for learning and KPI records; unposted suggestions and refinements do not train the user's voice profile. Raw screenshots remain in request memory and are not written to DMIAB's Firestore or Cloud Storage by the Suggester. Model requests use response storage disabled. The extension does not scroll, scan feeds, collect in the background, open the user's Activity Log, publish comments, send messages, or automate likes or other Facebook actions. Relationship and learning records remain separated by operator and business. The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Durable selected-post, suggestion, final-comment, and learning records follow the retention and deletion periods below.

​

Launch waitlist

​

If you ask to join the DMIAB launch waitlist, we use your email address, any optional name and business details you supply, your product interests, and evidence of your signup consent to notify you about launch availability. We keep the received signup message identifier and status to prevent duplicate entries. The active list is maintained in the Launch Waitlist tab of DMIAB Ecosystem.

​

Waitlist entries are retained until 90 days after DMIAB's declared public launch, or removed from the active waitlist earlier if you opt out or make a verified deletion request. No public launch date has been declared yet. Joining the waitlist does not start a subscription, grant plugin access, or automatically add you to an ongoing marketing list. To opt out or request removal, contact allie@digitalmarketinginabox.tech. These waitlist removal rules concern the active waitlist; they do not state that the original signup email or copies held by service providers are automatically erased.

 

Intellectual property and model behavior

 

DMIAB's private methods, internal prompts, scoring, routing rules, and owner operations remain on protected provider systems. Customer-facing responses contain only permitted guidance, status, and results. Generated output may contain mistakes and should be reviewed before publication or other consequential use.

 

Retention and security

 

Raw Suggester screenshots are deleted from request memory after the request succeeds or fails and are not written to DMIAB Firestore or Cloud Storage. Durable interaction records, including selected-post text, generated versions, final wording, learning records, business/operator partition, allowance receipts, and timing evidence, are retained while the product entitlement is active and for 30 days after it ends, then removed from active DMIAB systems within 30 additional days. A verified deletion request starts that 30-day removal period sooner. Pairing codes expire after 10 minutes; nonces and short rate-limit records after 1-2 minutes; daily-allowance records after 3 days; local pending-copy retry records after 24 hours; and browser installations no later than 30 days. Security and access logs are retained for 90 days. Closed support records are retained for 24 months. Transaction, tax, and payment-verification records are retained for 7 years or longer when applicable law requires it. Customer-owned Google Drive or Sheet records remain under the customer's control unless the customer requests an authorized DMIAB deletion. DMIAB may preserve a narrowly identified record beyond the normal period when required by law, a payment dispute, fraud prevention, or a documented legal hold, and deletes it when that exception ends. Access is limited by authenticated operator, assigned business, product entitlement, and role. Diagnostic records exclude passwords, access tokens, payment-card details, private methods, and unrelated client content. No system can guarantee absolute security.

 

Choices and requests

 

Users can disconnect connected services through ChatGPT or the relevant provider, stop using DMIAB, correct their business information, and request access to or deletion of DMIAB-held personal information. Send a request to allie@digitalmarketinginabox.tech. DMIAB verifies the requester's identity and authority for the business, then acknowledges and completes an applicable request within 30 days or explains any lawful extension or record that must be preserved. Disconnecting a service may prevent workflows that need it. Deleting customer-owned Google Drive files remains under the user's control unless the user expressly requests an authorized DMIAB action.

 

Contact

 

Want to get in touch? For privacy questions or requests, email Allie Grace Garnett at allie@digitalmarketinginabox.tech.

​

​

Last updated: October 5, 2026