Privacy Policy

1. Who We Are

IKON Marketing Suite LLC is a wholly-owned subsidiary of IKON Global Group, Inc. ("IKON," "we," "our," or "us"), a Wyoming-registered corporation. We operate the IKON Marketing Suite platform — an AI-powered marketing automation solution available at app.ikonmarketing.net and related services.

Data Controller: IKON Global Group, Inc.
Contact: contact@ikonmarketing.net
Address: Wyoming, USA

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Full name, business name, email address, phone number, and password (stored as a bcrypt hash)
• Business profile: Industry, business description, target audience, service areas, logo, brand colors, and marketing goals
• Billing information: Credit/debit card details and billing address (processed and stored by Stripe — IKON does not store raw card numbers)
• Social media credentials: OAuth tokens for Facebook, Instagram, LinkedIn, Google My Business, and other connected platforms. We store encrypted refresh tokens; we never store your social media passwords
• Advertising account data: Google Ads, Facebook Ads, and LinkedIn Ads account IDs and campaign data accessed through authorized API connections
• Communications: Support tickets, chat messages, and emails you send to us
• Employee and contact records: Names, roles, and contact information for team members you add to your account

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, buttons clicked, session duration, and interaction patterns within the platform
• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone
• Log data: Server logs including request timestamps, API calls made, and error events
• Performance data: Campaign performance metrics, post engagement rates, ad spend, lead conversion rates, and SEO ranking data pulled from connected platforms
• Cookies and similar technologies: See our Cookie Policy for full details

2.3 Information from Third Parties

• Social platforms: Follower counts, post metrics, audience demographics, and review data from platforms you authorize via OAuth
• Google services: Search Console data, Google My Business reviews, Google Ads performance, and Analytics data where authorized
• Payment processors: Stripe provides transaction status and basic card metadata (last 4 digits, expiration month/year, card type)

3. How We Use Your Information

We will not use your personal data for purposes incompatible with those listed above without your prior consent.

4. How We Share Your Information

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

4.1 Service Providers (Sub-processors)

We use trusted third-party providers to operate our platform. Each is bound by data processing agreements ensuring they protect your data:

4.2 Legal and Safety Disclosures

We may disclose information if required by law, court order, regulatory authority, or to protect the rights, property, or safety of IKON, our users, or the public. We will notify you of such requests where legally permitted.

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. See our full Data Retention Policy for detailed timelines. In summary:

• Active account data: Retained for the duration of your subscription
• Post-cancellation: Account data deleted within 90 days of cancellation
• Billing records: Retained for 7 years per US tax law requirements
• Security logs: Retained for 12 months
• Backup data: Up to 30 days after deletion

6. Data Security

We implement enterprise-grade security measures to protect your data:

• Encryption at rest: AES-256-GCM encryption for all sensitive stored data
• Encryption in transit: TLS 1.3 for all data transmitted between your browser and our servers
• Authentication: JWT-based session tokens, bcrypt password hashing, optional two-factor authentication via SMS
• Access controls: Role-based access control (RBAC) limiting data access to authorized personnel only
• Infrastructure security: Hosted on AWS with VPC isolation, security groups, and regular vulnerability scanning
• API security: HMAC-SHA256 signed webhooks, rate limiting on all endpoints, and IP monitoring
• Security audits: Regular internal security reviews and third-party penetration testing

While we use commercially reasonable means to protect your data, no system is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant regulatory authorities as required by applicable law.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

7.1 Rights Available to All Users

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time

7.2 Additional Rights Under GDPR (EU/EEA Users)

• Restriction of processing: Request that we limit how we use your data in certain circumstances
• Object to processing: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing
• Lodge a complaint: File a complaint with your local Data Protection Authority (DPA)

7.3 California Consumer Privacy Act (CCPA)

California residents have the right to: know what personal information is collected about them; know whether their personal information is sold or disclosed and to whom; opt out of the sale of personal information; access their personal information; and equal service and price, even if they exercise their privacy rights. IKON does not sell personal information.

7.4 Exercising Your Rights

To exercise any of these rights, contact us at contact@ikonmarketing.net. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing certain requests.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the platform and analyze usage. For full details, including how to control or disable cookies, see our Cookie Policy.

9. International Data Transfers

IKON is headquartered in the United States. If you access our services from outside the US, your data will be transferred to and processed in the United States. For EU/EEA transfers, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission. See our International Use Policy for details.

10. Children's Privacy

IKON is a business-to-business platform and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal data, contact us at contact@ikonmarketing.net and we will delete it promptly.

11. Third-Party Links and Integrations

The IKON platform integrates with third-party services and may contain links to external websites. This Privacy Policy applies only to IKON. We are not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policies of any third-party service you connect to through IKON.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email and/or a prominent notice on the platform at least 30 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

IKON Global Group, Inc.
Email: contact@ikonmarketing.net
Website: ikonmarketing.net
State of Incorporation: Wyoming, USA