Legal

Privacy Policy

Effective date: July 28, 2026
Last updated: July 28, 2026

Liftwork Inc. ("Liftwork," "we," "us") provides marketing services to small businesses. This policy explains what information we collect, how we use it, who we share it with, and how to get it deleted.

We do not sell personal information.

1. Who this policy covers

This policy covers three different groups, and different sections apply to each:

Visitors — anyone who uses liftwork.com. See sections 2, 10, 11, 12, 13.

Clients — businesses that engage Liftwork to run their marketing, and the people who act for them. See all sections.

A client's customers — people whose information reaches us through a client's connected accounts and customer records. For this information Liftwork acts on the client's instructions as a service provider (a "processor" under some laws); the client decides what is collected and why. See section 7.

2. Information we collect from website visitors

When you contact us. If you submit the contact form on liftwork.com, we collect the name, email address, company, and message you enter, along with your IP address, browser user-agent string, and the time of submission. We use this only to respond to you and to keep a record of the enquiry.

Analytics and advertising. We use Google Analytics, with Google's advertising features enabled, to understand how visitors find and use liftwork.com and to market Liftwork to people who have visited it. These technologies set cookies and collect information including pages viewed, time on page, approximate location derived from a truncated IP address, device and browser type, the referring site, and advertising identifiers associated with your browser or Google account.

Because these advertising features are enabled, Google may use this information to show you Liftwork advertising elsewhere and to build advertising audiences. Under California law this counts as "sharing" personal information for cross-context behavioral advertising. We do not receive payment for it, and we do not sell your information.

Your choices. You can opt out of this at any time:

Use the Your Privacy Choices link in our website footer.
Turn on a browser opt-out signal such as the Global Privacy Control. We treat it as a valid opt-out request and honor it automatically.
Adjust Google's ad settings or install Google's Analytics opt-out add-on.
Block or clear cookies in your browser.

Opting out does not affect your use of the site.

3. Information we collect from clients

Business information — business name, addresses, hours, service areas, contact details, categories, photos, and similar operating facts.
Account and contact information — names, email addresses, phone numbers, and roles of the people who act for the client.
Billing information — payments are processed by Stripe. We receive transaction records and limited card metadata from Stripe; we do not receive or store full card numbers. Stripe processes payment information under its own privacy policy.
Communications — messages, approvals, corrections, and instructions the client sends us, and the record of what we proposed and what was approved.
Strategic information — positioning, target customer, competitor set, brand voice preferences, and the permissions the client has granted or withheld.

4. Information we access through connected accounts

With a client's authorization, Liftwork connects to the marketing accounts the client already owns. We access these accounts only to perform the marketing services the client has engaged us for. The client grants access, and the client can withdraw it at any time (section 12).

Depending on which channels a client asks us to run, connected accounts may include: advertising accounts, business listing profiles, social media pages and accounts, review platforms, website hosting and content systems, and email or messaging tools.

Two connections carry additional commitments, set out in the next two sections.

5. Google user data

Liftwork uses Google APIs — including the Google Ads API and the Google Business Profile API — to manage marketing on behalf of clients who authorize it. We request only the permissions needed for the services a client has asked for. The specific permissions are shown to the client on Google's consent screen at the moment they connect their account, and the client can review or withdraw them at any time.

What we access. With the client's authorization, we access campaign structures, keywords, ad creative and assets, budgets, bids, targeting settings, conversion and performance metrics, billing and account settings visible through the API, business listing content including reviews and questions where the client has asked us to manage listings, and website analytics for properties the client asks us to manage.

How we use it. We use Google user data solely to deliver the marketing services the client has engaged us for: building, launching, adjusting, and reporting on that client's own campaigns and listings, and producing the reports and recommendations we show that client.

How we store it. Google user data is stored in our production systems and is segregated per client (section 8). We retain it only as described in section 11.

How we share it. We do not sell Google user data and we do not transfer it to third-party advertising platforms, data brokers, or information resellers. We share it only with the client it belongs to, with service providers who process it on our behalf under contract (section 10), and where legally required.

Limited Use. Liftwork's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No model training. We do not retain or use data obtained through Google APIs to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models, and we do not transfer it to any third party for that purpose. See section 9.

Withdrawing access. A client can revoke Liftwork's access to their Google account at any time at myaccount.google.com/permissions.

6. Meta platform data

Liftwork uses Meta's APIs — including the Marketing API, the Pages and Instagram APIs, and other Meta advertising services — to manage marketing on behalf of clients who authorize it. We request only the permissions needed for the services a client has asked for, and the client can review or withdraw them at any time.

What we access. With the client's authorization, we access ad accounts, campaigns, ad sets and creative, audiences, budgets and performance metrics, Facebook Page and Instagram account content, comments and messages where the client has asked us to manage them, and lead form submissions where the client runs lead ads.

How we use it. We use Meta platform data solely to run and report on that client's own marketing.

Specific commitments required by Meta's Platform Terms and Developer Policies:

We keep Meta data we hold for one advertiser separate from data we hold for any other advertiser (section 8).
We use Meta advertising data only to assess the performance and effectiveness of that advertiser's own campaigns, and otherwise only on an aggregate and anonymous basis.
We do not use Meta data to retarget people on or off Meta.
We do not use Meta data to build or augment user profiles.
We do not sell Meta platform data or transfer it to data brokers or ad networks.
Where a client runs lead ads, we use the contact information a person submits only to contact that person about the specific offer or enquiry it was submitted for, on the client's behalf.
We obtain the client's consent before publishing content or taking action on their behalf, and we honor opt-out and unsubscribe requests promptly.

No model training. We do not use Meta platform data to develop, improve, or train generalized artificial intelligence or machine learning models, and we do not transfer it to any third party for that purpose.

Withdrawing access. A client can remove Liftwork's access at any time in Facebook under Settings & Privacy → Settings → Business Integrations, or in Meta Business Manager under Business Settings → Partners.

7. A client's customers

To run email marketing and review requests, a client may provide us with their own customer records — typically names, email addresses, phone numbers, and a history of visits or purchases — or authorize us to access those records in the client's systems.

For this information:

The client decides what is collected and why. Liftwork processes it on the client's documented instructions.
We use it only to deliver the marketing the client has asked for, and we apply contact-frequency limits and consent checks before any message is sent.
We enforce applicable rules on commercial messaging and review solicitation — including platform policies and consumer protection law — in our systems rather than leaving them to case-by-case judgment.
We do not use one client's customer records to serve any other client (section 8).
We do not sell this information.

If you are a customer of a Liftwork client and want your information corrected or deleted, you can contact the business directly, or use our deletion request form at liftwork.com/data-deletion and we will route your request to that business and act on their instruction. See section 13.

8. We keep client data separate

Liftwork serves many businesses, including businesses that compete with each other. No automated system that produces work for one client uses another client's data as an input. Anything a client grants us or that is generated inside their account — connected-account data, customer records, strategy, brand voice, permission settings — stays within that client's account.

Two clarifications:

Public information is public. When we compare a client's performance against other businesses in their market, we use information anyone can see — public listings, public reviews, public websites and social profiles — whether or not that business is also a Liftwork client. We do not use a competitor's private account data for this, even if that competitor is our client.
Aggregate learning. Our team reviews performance across the business in aggregate and anonymized form to improve our own procedures and quality standards. This review does not move one client's identifiable data into another client's work, and it does not include data obtained through Google or Meta APIs beyond what those platforms' terms permit on an aggregate and anonymous basis.

9. Artificial intelligence and automated processing

Liftwork uses artificial intelligence to plan and produce marketing work. Client information — including business facts, strategy, brand voice, and performance data — is processed by AI models to draft copy, design creative, analyze markets, and prepare recommendations.

AI providers. We use AI services from Anthropic, OpenAI, and Google. We send data to these providers under commercial terms that prohibit them from using it to train their models and that limit how long they retain it.
No training on your data. We do not use client data, connected-account data, or data obtained through the Google or Meta APIs to train generalized AI or machine learning models, whether our own or anyone else's.
Human oversight. Work produced by our systems is subject to human and policy-based review before it is published, and clients control what is published on their behalf through the permissions they set.
No solely automated decisions with legal effect. We do not use automated processing to make decisions about individuals that produce legal or similarly significant effects.

10. How we share information

We share information with:

The client it belongs to.
Service providers who process information on our behalf under contract, limited to what they need to perform their function. These include cloud hosting and infrastructure, AI model providers, data and research providers, email and messaging delivery, payment processing, and customer support tooling.
Marketing platforms — where a client asks us to run marketing, we send content, targeting instructions, and budgets to the platforms that deliver it, using the client's own accounts.
Legal and safety — where required by law, subpoena, or legal process, or to protect the rights, property, or safety of Liftwork, our clients, or others.
Business transfers — if Liftwork is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction. Where Google user data is involved we will obtain prior consent as required by the Google API Services User Data Policy.

We do not sell personal information. We do share website analytics and advertising identifiers with Google for advertising purposes, as described in section 2 — which California law treats as "sharing" for cross-context behavioral advertising. You can opt out at any time using the Your Privacy Choices link in our footer, or by turning on a browser opt-out signal. This sharing involves website visitors only. We never share client data, connected-account data, or data obtained through the Google or Meta APIs for advertising purposes.

11. How long we keep information

Contact form submissions: 24 months from submission, unless you become a client.
Client account and service data: for the life of the engagement and 12 months afterward, then deleted or anonymized.
Connected-account data (including Google and Meta data): for the life of the engagement. When a client disconnects an account or ends their engagement, we delete the data obtained from it within 30 days, except where we must retain it by law.
Billing and tax records: as long as required by law, typically 7 years.
Backups: where deleted data persists in system backups, it is removed as those backups expire, within a further 90 days.
Data deletion request records: we keep a record of the request itself, and what we did in response, for 24 months, so we can show the request was honored.

12. Your choices

Disconnect an account. Clients can revoke Liftwork's access to any connected platform at any time, using the platform links in sections 5 and 6 or by asking us.
Unsubscribe. Marketing emails we send on a client's behalf include an unsubscribe link, honored promptly.
Opt out of advertising. Use the Your Privacy Choices link in our footer, or turn on a browser opt-out signal such as Global Privacy Control. See section 2.
Update your information. Email privacy@liftwork.com to correct information we hold about you.
Access, portability, and objection. Depending on where you live, you may have the right to request a copy of your information, ask us to correct or delete it, object to or restrict certain processing, and appeal a refusal. We do not charge for these requests and we do not discriminate against you for making one. See section 16.

13. How to request deletion of your data

Anyone can ask Liftwork to delete the information we hold about them. There is no fee.

How to request. Use our data deletion request form at liftwork.com/data-deletion. The form asks for:

the email address, phone number, or account the data is associated with;
if you are a customer of a business that uses Liftwork, the name of that business;
if your request concerns a Facebook or Instagram account, the name of the Facebook Page or Instagram account involved.

If you cannot use the form, email privacy@liftwork.com with the subject line "Delete my data" and the same details.

What we delete. On a verified request we delete the personal information we hold about you, which may include: your name and contact details; the content of messages and enquiries you sent us; contact-form submissions including the IP address and browser information captured with them; your record in a client's customer list held in our systems; and data about you obtained through a connected Google or Meta account.

How long it takes. We confirm receipt within 5 business days and complete deletion within 30 days. Where deleted data persists in system backups, it is removed within a further 90 days as those backups expire.

Verification. We may ask you to confirm control of the email address or account in the request. This is to prevent someone else deleting your data.

When we cannot delete everything, and why. We will tell you if any of these apply:

We are not the decision-maker. Where we hold information as a service provider for one of our clients, we forward the request to that business and act on their instruction. We will tell you who they are so you can contact them directly.
The law requires us to keep it. Billing, tax, and certain transaction records must be retained for statutory periods.
We need it for a legal claim. Information relevant to an active or reasonably anticipated legal dispute may be preserved until it is resolved.
The platform holds its own copy. Deleting data from Liftwork does not delete it from Google, Meta, or any other platform. Those records are controlled by the platform and the account owner; use the platform's own tools to remove them.

Deleting data associated with Facebook or Instagram. If you used Facebook or Instagram to interact with a business we work with, you can remove Liftwork's access under Settings & Privacy → Settings → Apps and Websites in Facebook. To have the associated data deleted from our systems, submit the form above or email privacy@liftwork.com.

14. Security

We maintain organizational and technical measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction, and we limit staff access to what a person's role requires.

No system is perfectly secure. If a breach affects your information we will notify you and any regulator as required by law.

15. Children

Liftwork's services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact privacy@liftwork.com and we will delete it.

16. U.S. state privacy rights

Liftwork serves clients across the United States. Depending on your state of residence, you may have some or all of the rights below. We extend these rights to residents of every U.S. state, regardless of whether a particular state law applies to Liftwork.

Your rights:

Know and access — what personal information we collect, use, and disclose, and a copy of the information we hold about you.
Correct — inaccurate personal information.
Delete — personal information we hold about you (section 13).
Portability — a copy in a portable, machine-readable format where technically feasible.
Opt out of sharing for targeted advertising. We share website analytics and advertising identifiers with Google for advertising purposes (section 2). Use the Your Privacy Choices link in our footer, or turn on a browser opt-out signal. We do not sell personal information, and we do not profile people in ways that produce legal or similarly significant effects.
Limit use of sensitive personal information. We do not use or disclose sensitive personal information for purposes that trigger this right.
Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised a right.
Appeal — if we decline a request, you may appeal by replying to our response. We will respond to an appeal within 45 days with a written explanation. If we deny the appeal, you may contact your state Attorney General.

How to exercise a right. Use the form at liftwork.com/data-deletion for deletion requests, or email privacy@liftwork.com for any other request. We will verify your identity before acting, and we will respond within 45 days, extendable once by a further 45 days where reasonably necessary. You may use an authorized agent, and we may ask for proof of their authority.

Opt-out preference signals. We honor the Global Privacy Control (GPC) and similar browser opt-out signals as valid opt-out requests, automatically and without requiring you to do anything else.

California specifics. The categories of personal information we collect are described in sections 2, 3, 4, and 7; the purposes in sections 5 through 9; the categories of recipients in section 10; and retention periods in section 11. We collect identifiers, commercial information, internet activity information, and approximate geolocation, as described in those sections. We have not sold personal information in the preceding 12 months. We have shared internet activity information and advertising identifiers of website visitors with Google for cross-context behavioral advertising, as described in section 2. We have not disclosed sensitive personal information for purposes requiring a limitation right.

17. Where information is processed

Liftwork operates in the United States, and information is processed there.

18. Changes to this policy

We will post any change here and update the "last updated" date. If a change materially affects how we handle information already collected, we will notify affected clients directly at least 14 days before it takes effect.

19. Contact us

Email: privacy@liftwork.com

Mail: Liftwork Inc. 425 Page Mill Rd 2nd Floor, Suite 200 #17428130 Palo Alto, CA 94306

For data deletion requests, see section 13 or use liftwork.com/data-deletion.