Last Updated: 5/15/2026

This Privacy Policy explains how Creative Sponge, collects, uses, stores, discloses, and protects information when you visit our website, communicate with us, use our services, grant us access to social media or marketing accounts, or otherwise interact with us.

For purposes of this Privacy Policy, “Company,” “we,” “our,” or “us” means Creative Sponge. “Client,” “you,” or “your” means the person, business, organization, or authorized representative using our services.

​

1. Scope of This Policy

This Privacy Policy applies to our website, client communications, marketing services, client portal, social media management services, reporting services, advertising services, integrations, and other services we provide.

This Privacy Policy does not control the privacy practices of Facebook, Instagram, Google, Google Business Profile, YouTube, LinkedIn, TikTok, payment processors, CRM platforms, analytics tools, hosting providers, or other third-party services. Those third parties have their own privacy policies and terms.

​

2. Information We Collect

We may collect the following categories of information.

Business and Contact Information

This may include:

• Name.

• Business name.

• Job title.

• Email address.

• Phone number.

• Mailing address.

• Billing address.

• Business website.

• Social media handles.

• Business category, service areas, locations, and operating details.

 

Account and Access Information

When needed to provide services, we may collect or process:

• Platform account IDs.

• Page IDs.

• Business Manager IDs.

• Ad account IDs.

• Google Business Profile location data.

• OAuth tokens or authorization credentials.

• User permissions and account roles.

• API access information.

• Login-related information provided by you.

 

We prefer role-based access, OAuth, partner access, or approved platform authorization methods whenever possible.

Social Media and Platform Data

When you authorize us to manage or access accounts, we may collect or process data from platforms such as Facebook, Instagram, Google Business Profile, LinkedIn, YouTube, TikTok, and related tools.

This may include:

• Posts, captions, photos, videos, graphics, and other content.

• Comments, replies, reviews, messages, and engagement data.

• Page, profile, channel, listing, and business information.

• Audience insights and analytics.

• Ad campaign data.

• Lead form data, if included in your scope.

• Customer inquiries or message content, if community management is included.

• Review content and reviewer information visible through the platform.

• Performance metrics such as impressions, clicks, views, reach, engagement, conversions, and follower activity.

 

Client-Provided Data

You may provide us with:

• Brand guidelines.

• Logos, photos, videos, and design assets.

• Product or service information.

• Customer lists.

• Lead lists.

• Email lists.

• Phone numbers.

• Audience lists.

• CRM records.

• Testimonials.

• Reviews.

• Promotions and offers.

• Internal business documents.

• Reporting data.

 

You are responsible for ensuring that information you provide was collected lawfully and may be used for the services.

Payment and Billing Information

We may collect billing information, invoice records, payment status, transaction details, and related business information. Payment card or bank information may be processed by third-party payment processors, and we may not store full payment card details.

Website and Device Information

When you visit our website, we may collect:

• IP address.

• Browser type.

• Device type.

• Operating system.

• Pages visited.

• Referring pages.

• Time and date of visits.

• Form submissions.

• Cookie and tracking information.

• Analytics and usage data.

 

3. How We Use Information

We may use information to:

• Provide social media management services.

• Create, schedule, publish, edit, monitor, and report on content.

• Manage business profiles, pages, channels, listings, and accounts.

• Respond to reviews, messages, comments, and inquiries, if included in your scope.

• Create and manage advertising campaigns.

• Analyze performance and prepare reports.

• Provide consulting, strategy, and recommendations.

• Communicate with you about services, billing, approvals, and support.

• Process payments and manage invoices.

• Maintain security and prevent fraud.

• Improve our website, services, systems, and operations.

• Comply with legal, tax, accounting, contractual, platform, and regulatory obligations.

• Enforce our agreements and protect our rights.

• Send marketing communications where permitted by law.

 

4. Google API, YouTube API, and Google Business Profile Data

If you authorize us to access information through Google APIs, Google Business Profile APIs, YouTube APIs, or related Google services, we will use that information only to provide or improve the services you requested, such as managing business listings, creating or updating posts, responding to reviews, analyzing performance, managing YouTube content, or preparing reports.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google API data. We do not use Google API data for unrelated advertising, unrelated profiling, or unrelated purposes. We do not allow humans to access Google API data unless necessary to provide the services, comply with law, address security issues, or as otherwise permitted by applicable Google policies and your authorization.

You may revoke our access through your Google account, Google Business Profile settings, YouTube account settings, or by contacting us.

​

5. Meta, Facebook, and Instagram Data

If you authorize us to access Facebook, Instagram, Meta Business Suite, Meta Business Manager, Meta Ads, or related Meta tools, we may process data from those platforms to provide the services you requested.

This may include page information, content, comments, messages, ad data, insights, engagement metrics, media, account identifiers, business information, and related platform data.

We use Meta platform data only as needed to provide, maintain, improve, secure, and report on the services. You may request deletion of data we hold, subject to legal, contractual, accounting, security, and legitimate business retention needs.

​

6. LinkedIn Data

If you authorize us to access LinkedIn pages, profiles, ad accounts, analytics, messaging, or marketing tools, we may process LinkedIn data to provide the services you requested.

This may include page data, post data, ad performance data, analytics, campaign data, account identifiers, authorized user information, and related business or marketing data.

We use LinkedIn data only as needed to provide the services, follow your instructions, comply with LinkedIn’s applicable terms, and fulfill reporting or operational needs.

​

7. TikTok Data

If you authorize us to access TikTok, TikTok Business, TikTok Ads, TikTok content tools, or related services, we may process TikTok-related account, content, advertising, engagement, performance, analytics, and business data to provide the services you requested.

We use TikTok data only as needed to manage content, advertising, reporting, analytics, and related services authorized by you.

​

8. Customer, Follower, Reviewer, and End-User Data

While providing services, we may view or process information about your customers, prospects, followers, reviewers, commenters, subscribers, or other end users who interact with your accounts.

This may include names, usernames, profile photos, public comments, messages, reviews, ratings, inquiries, engagement activity, or lead form information.

We process this information only as necessary to provide services to you. You are responsible for your own privacy notices, consents, customer communications, platform compliance, and legal obligations related to your customers, followers, prospects, and users.

​

9. How We Share Information

We may share information with:

• Employees, contractors, and team members who need it to provide services.

• Hosting providers, cloud services, analytics providers, project management tools, CRM systems, communication tools, email providers, automation tools, scheduling tools, reporting tools, payment processors, and other service providers.

• Social media platforms, advertising platforms, APIs, and integrations you authorize us to use.

• Professional advisors, including attorneys, accountants, auditors, and insurers.

• Government authorities, regulators, courts, or law enforcement when required or permitted by law.

• Successors or buyers in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

• Other parties with your direction, authorization, or consent.

 

We do not sell your personal information in the ordinary sense of exchanging it for money.

​

10. Targeted Advertising and Audience Data

If you ask us to help with paid advertising, retargeting, audience matching, customer lists, lead forms, pixels, conversion APIs, or analytics tools, we may process personal information for advertising or marketing purposes on your behalf.

You are responsible for ensuring that any customer list, audience list, lead list, email list, phone number list, website pixel, tracking tool, consent banner, or similar data source complies with applicable law and platform policies.

Unless otherwise stated in writing, we act as a service provider or processor for client-provided audience data and use it only to provide the services requested by you.

​

11. Cookies and Website Tracking

Our website may use cookies, pixels, analytics tools, embedded content, forms, and similar technologies to operate the website, understand usage, improve performance, remember preferences, measure traffic, and support marketing.

You can adjust cookie settings through your browser. Some website features may not function properly without cookies.

If we use advertising pixels, retargeting tools, or analytics tools on our own website, those tools may collect information according to their own terms and privacy policies.

​

12. Data Retention

We retain information for as long as reasonably necessary to provide services, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, maintain security, support accounting and tax requirements, and operate our business.

Retention periods may vary depending on the type of data, the service, platform requirements, legal obligations, client instructions, and business needs.

When information is no longer reasonably needed, we may delete, de-identify, archive, or securely retain it as permitted by law.

​

13. Data Deletion Requests

You may request deletion of personal information we hold by contacting us at natalie@creativesponge.agency.

Please include:

• Your name.

• Business name.

• Email address.

• The platform or account involved.

• A clear description of the data you want deleted.

 

We may need to verify your identity or authority before processing a request. We may retain certain information when required or permitted for legal, tax, accounting, security, fraud prevention, dispute resolution, platform compliance, or legitimate business purposes.

You may also revoke our access directly through applicable platform settings, such as Google account permissions, Meta Business settings, LinkedIn permissions, TikTok permissions, or similar account access controls.

​

14. Texas Privacy Rights

Depending on whether the Texas Data Privacy and Security Act applies to our business and your relationship with us, Texas residents may have certain rights regarding personal data, including the right to:

• Confirm whether personal data is being processed.

• Access personal data.

• Correct inaccuracies.

• Delete personal data.

• Obtain a portable copy of personal data.

• Opt out of certain processing, such as targeted advertising, sale of personal data, or certain profiling activities.

 

To exercise privacy rights, contact us at natalie@creativesponge.agency.

We may verify your identity before fulfilling a request. We will not discriminate against you for exercising applicable privacy rights.

​

15. Privacy Rights for Other States

Residents of certain U.S. states may have additional privacy rights depending on applicable law. These may include rights to access, delete, correct, opt out, or limit certain uses of personal information.

To submit a privacy request, contact us at natalie@creativesponge.agency.

​

16. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, disclosure, alteration, or destruction.

However, no method of transmission, storage, platform access, API connection, cloud system, email communication, or internet-based service is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining secure account access, strong passwords, two-factor authentication, permission management, and timely removal of users who should no longer have access.

​

17. Children’s Privacy

Our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information to us, contact us at natalie@creativesponge.agency, and we will take appropriate steps to delete the information where required by law.

​

18. International Users

Our company is based in Texas, United States. If you access our website or services from outside the United States, you understand that your information may be processed in the United States or other locations where our service providers operate.

​

19. Third-Party Links and Platforms

Our website, reports, communications, or services may include links to third-party websites, tools, platforms, or services. We are not responsible for the privacy practices, terms, content, security, or policies of third parties.

Your use of third-party platforms is governed by their own terms and privacy policies.

​

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on our website with a new “Last Updated” date.

Your continued use of our website or services after updates means you acknowledge the revised Privacy Policy.

​

21. Contact

Questions, privacy requests, or data deletion requests may be sent to:

Creative Sponge


561 US Hwy 271 N, Suite C, Gilmer, TX 75644


natalie@creativesponge.agency


(903) 576-3660