Privacy Policy

Last updated: October 15, 2025

EurekaLM ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we access, how we use it, and how you can control it when using the EurekaLM GPT or web platform.

By using EurekaLM, you consent to the practices described in this policy.

1 Overview

EurekaLM is an AI-powered marketing analyst that connects to your advertising and CRM data sources (like Meta Ads, Google Ads, and HubSpot) to provide real-time insights and summaries.

We only access data necessary to generate insights. We do not use your data to train AI models or for any purpose other than serving your requests.

2 Data We Access

When you connect a data source, we may access:

Ad metrics: spend, clicks, impressions, CTR, CPC, CPM
Campaign metadata: campaign IDs, campaign names, and account identifiers
Authentication information: limited OAuth tokens required to connect your ad accounts securely

We do not access personal user data, customer PII, or ad creative content.

3 How We Use Your Data

We use this data only to:

Generate summaries and analytics in response to your requests
Provide aggregated insights about your marketing performance
Troubleshoot and improve reliability (via temporary debugging logs)

We do not use this data for model training, profiling, or any unrelated purpose.

4 Data Storage and Retention

EurekaLM follows a no persistent raw data policy. We store only what's required for short-term operations:

Data Type	Retention	Purpose
Aggregated counts and metrics	Until insight generation completes	Reporting
Ephemeral request IDs and logs	7 days max	Debugging only
OAuth tokens (encrypted)	Until user revokes access	Authentication

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

5 Data Sharing

We do not sell, rent, or share data with third parties. The only exception is:

Hosting provider: Google Cloud Platform (GCP), used for infrastructure and secure processing.

No other third-party vendors or analytics systems receive your data.

6 Revoking Access

You can revoke access to your connected accounts at any time:

Google Ads: Google Account Permissions
Meta Ads: Meta Business Integrations

After revocation, EurekaLM immediately loses access to your accounts and any associated tokens are invalidated.

7 Your Rights

You may:

Request to view, delete, or correct any data associated with your account
Withdraw consent at any time
Contact us for assistance at support@eurekalm.com

We will respond to all data-related requests within 30 days.

8 Data Security

We use modern security controls to protect your data:

Encrypted communications and storage
Role-based access control (RBAC)
Internal auditing and limited personnel access
OAuth 2.0 authorization for all integrations

9 Children's Privacy

EurekaLM is not intended for use by anyone under the age of 18. We do not knowingly collect or process any data from minors.

10 Updates to This Policy

We may occasionally update this Privacy Policy to reflect product improvements or regulatory changes. If we make material updates, we will notify users via the ChatGPT Store page or in-app notification. The updated policy will take effect immediately upon posting.