Privacy Policy
Last updated: May 19, 2026
my99agency takes your privacy seriously. This policy explains in plain language what data we collect, why we collect it, who we share it with, and what you can do to control it. It applies to my99agency.com and all connected services.
1. What we collect
- Account data: name, email, company name, phone (when provided).
- Usage data: pages visited, portal actions, briefs you create.
- Technical data: IP address, browser type, OS, language.
- Payment data: processed directly by PayPal — we only store the subscription ID, never the card number.
- Content you submit: files, briefs and messages exchanged with our team.
2. Why we collect it
- To deliver the service you signed up for.
- To charge the monthly fee and issue invoices.
- To improve the product (aggregate usage analysis).
- To communicate about the service (notices, updates).
- To comply with legal obligations (tax, accounting, regulatory).
3. Legal basis
We process data based on contract performance, consent (for optional cookies and marketing), legitimate interest (security, fraud prevention), and legal obligations. We honor GDPR (EU/EEA visitors) and CCPA/CPRA (California residents) in addition to other applicable laws.
4. Who we share with
- PayPal — to process payments.
- Internal production system — where our team works on your request. Self-hosted on my99agency's own server, no third parties involved.
- Authorities — only when required by valid legal process.
We do not sell your data to third parties. Ever.
5. Retention
Account and production data: as long as you're a client + 5 years after cancellation (tax requirement). Access logs: 6 months. Consent records: indefinitely (legal proof).
6. Your rights
- Access the data we have about you.
- Correct incomplete or outdated data.
- Request deletion or anonymization.
- Portability to another provider.
- Withdraw consent at any time.
- For California residents: opt out of "sale" (we don't sell — but you can still exercise the right).
To exercise any right, email privacy@my99agency.com. We respond within 30 days.
7. Security
Passwords stored with PBKDF2-SHA256 (120k rounds). HTTPS traffic. Database access restricted to authorized engineering. Full audit log of sensitive actions.
8. Cookies
See our Cookie Policy for category details and how to control your preferences.
9. Children
Our service is intended for businesses. We don't knowingly collect data from minors under 18. If we identify data from a minor, we delete it immediately.
10. Changes
Significant changes will be communicated 30 days in advance via email and an in-site banner.
11. Contact
Data Protection Officer: privacy@my99agency.com