Legal

Privacy Policy

Effective as of: June 1st, 2026

1. Introduction

This Privacy Policy outlines the types of personal information that is received and collected by Newform, Inc. (“Newform,” “we,” or “us”) and how it is used. Newform offers an advertising management and business intelligence platform through which businesses (“Customers” or “you”) can manage advertising campaigns, access analytics, and use marketing tools across multiple platforms (collectively, the “Services”).

By using our Services, visiting our website at newform.com (the “Website”), or otherwise interacting with us, you agree to the collection and use of information in accordance with this policy.

2. Google API Disclosure

Limited Use Compliance Statement

Newform's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google APIs to develop, improve, or train generalized AI and/or machine learning models.

3. Data Collection

We collect information that your browser sends whenever you visit our Website or use our Services. This data may include your IP address, browser type, pages visited, time and date of visit, and other diagnostic data.

Information You Provide to Us

  • Create an account or register for our Services
  • Connect third-party advertising or social media accounts
  • Request a demo, contact sales, or submit forms on our Website
  • Subscribe to emails, newsletters, or attend events
  • Provide payment or billing information

This information may include: name, email address, company name, job title, phone number, billing details, and the content of your requests. When you submit a form, we may supplement it with business firmographic data (such as company size or industry) from third-party providers to help us route and respond to your request.

Facebook Platform Data

  • Your Facebook public profile information (name, profile picture)
  • Your Facebook email address
  • Facebook Pages you manage
  • Facebook advertising account information
  • Facebook ad performance metrics and analytics
  • Facebook Business Manager assets you have access to

Instagram Platform Data

  • Your Instagram Business or Creator account information
  • Instagram ad performance metrics and analytics
  • Instagram audience insights

Threads Platform Data

  • Your Threads account ID (threads_user_id)
  • Your Instagram Business account information (linked to Threads)

We do not access or collect your Threads posts, messages, or other content beyond the basic account information necessary for our service functionality.

TikTok Platform Data

  • Your TikTok advertising account information
  • TikTok ad performance metrics and analytics
  • TikTok audience and campaign data
  • TikTok Business Center assets you have access to

4. Google API Data Access

YouTube API Access

  • youtube.upload: Allows uploading and managing your YouTube videos
  • youtube.readonly: Allows viewing your YouTube channel information, videos, and analytics data

Google Drive API Access

  • drive.readonly: Viewing and downloading your Google Drive files
  • drive.file: Creating, reading, updating, and deleting files our app created or you opened

Google Sheets API Access

  • spreadsheets.currentonly: Access to the currently open spreadsheet

Google Profile & Apps Script

  • userinfo.email. Primary email address
  • userinfo.profile. Basic profile information
  • openid. Authentication and identification
  • script.container.ui. Custom UIs in Google Sheets
  • script.external_request. External API requests from our Sheets add-on

5. Google API Data Handling Practices

Google Workspace API Limited Use Requirements

The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Usage Limitations

  • We limit use of Google Workspace data to providing or improving our advertising management services
  • We do not transfer, sell, or use user data for serving ads, including retargeting
  • We do not use user data to determine credit-worthiness or for lending purposes
  • We do not create, train, or improve machine learning or AI models

Data Transfer Restrictions

  • We do not transfer user data to advertising platforms, data brokers, or information resellers
  • Data transfers are limited to providing or improving our service features with user consent
  • We may transfer data for security purposes or to comply with applicable laws

No AI/ML Training: We do not use Google user data to develop, improve, or train generalized AI and/or machine learning models.

6. YouTube API Integration

When you connect your YouTube account to Newform, we use Google's OAuth 2.0 to access your YouTube data. Your authentication tokens are stored securely and encrypted. You can revoke YouTube access at any time through your Google Account permissions. We do not use YouTube data to train AI or machine learning models.

7. Threads API Integration

When you connect your Threads account to Newform, we access only your account ID and link it with your Instagram Business account. We do not access, read, or collect your Threads posts, messages, or any other content. You can revoke Threads access at any time through your Meta account settings.

8. Data Processing Locations

We store and process data in the United States and the European Economic Area (EEA). When transferring data outside the EEA, we ensure appropriate safeguards through standard contractual clauses and adequacy decisions.

9. Third-Party Platforms

When you connect your Newform account with third-party platforms, their privacy policies also apply:

10. Data Usage

  • To provide, maintain, and improve our Services
  • To manage your advertising campaigns across connected platforms
  • To provide analytics, reporting, and performance insights
  • To notify you about changes to our Services
  • To provide customer support
  • To detect, prevent, and address technical issues and security threats
  • To develop anonymized statistics and insights about digital advertising trends
  • To verify your identity and establish your account
  • To send you updates, newsletters, and marketing communications (where you have opted in)
  • To comply with legal obligations

11. Data Sharing and Disclosure

We may disclose your personal data to:

  • Our staff, contractors, and service providers
  • Business partners, agents, and technology vendors
  • Payment processors and financial institutions
  • Professional advisers (legal, accounting, or compliance)
  • Government authorities where required by law
  • Prospective purchasers or acquirers in the event of a business sale or merger

We do not sell personal information for monetary consideration. However, our use of advertising and visitor-identification cookies (see Section 12) may constitute “sharing” or a “sale” under certain U.S. state privacy laws; see the California section below for how to opt out. When information is aggregated or de-identified, we may share it without restriction.

12. Cookies and Tracking Technologies

We and selected partners use cookies and similar technologies on our Website to operate the site, measure performance, and support our marketing. You can control non-essential cookies through the “Cookie preferences” link in our footer, and change your choice at any time.

How consent works by region

  • EEA, UK, and Switzerland: analytics and marketing technologies do not load until you give consent. You may accept, reject, or choose by category, and withdraw consent at any time.
  • United States and elsewhere: these technologies operate on an opt-out basis. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out, and you can opt out anytime via “Cookie preferences.”

Categories we use

Strictly Necessary & Performance (always active)

  • Vercel Web Analytics & Speed Insights — privacy-friendly, cookieless aggregate performance measurement. No cross-site tracking.

Analytics (consent / opt-out)

  • Google Analytics (GA4) — helps us understand, in aggregate, how visitors use the site.

Marketing & Visitor Identification (consent / opt-out)

  • Meta Pixel — measures the performance of our Facebook and Instagram advertising.
  • Clearbit (HubSpot) — identifies the company associated with a business visit.
  • RB2B — identifies business visitors (United States) to support our sales outreach.

Some of these technologies identify the company or individual associated with your visit (“visitor identification” or “de-anonymization”). Where consent is required, we use them only after you consent.

You can also limit interest-based advertising through the Network Advertising Initiative or Digital Advertising Alliance, and manage cookies through your browser settings.

13. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Right of access. Request a copy of personal data we hold about you
  • Right to rectification. Request correction of inaccurate or incomplete data
  • Right to erasure. Ask us to delete your personal data (“right to be forgotten”)
  • Right to restrict processing. Request we stop processing your data
  • Right to data portability. Request your data in a machine-readable format
  • Right to object. Object to processing for direct marketing or legitimate interests
  • Right to withdraw consent. Withdraw consent to processing at any time
  • Right to lodge a complaint. File a complaint with a data protection authority

To exercise these rights, contact us at alec@newform.ai. We will respond within 30 days.

California Residents (CCPA/CPRA) — Do Not Sell or Share

If you are a California resident, you have rights to know, delete, and correct your personal information, and to opt out of its “sale” or “sharing.” While we do not sell personal information for money, our use of advertising and visitor-identification cookies (e.g., Meta Pixel, Clearbit, RB2B) may be considered a “sale” or “sharing” under California law. To opt out, use the “Cookie preferences” link in our footer to reject Marketing cookies, and/or enable a Global Privacy Control signal in your browser, which we honor automatically. We do not knowingly sell or share the personal information of individuals under 16.

Revoking Platform Access

  • Google/YouTube: Through your Google Account permissions
  • Meta (Facebook/Instagram/Threads): Through your Meta account settings
  • TikTok: Through your TikTok account settings

14. Data Retention

Account Data

Retained while your account is active. Deleted or anonymized within 30 days of a deletion request, except where required by law.

Platform Tokens and Credentials

Authentication tokens are revoked and deleted when you disconnect a platform or delete your account.

Campaign and Analytics Data

Retained for the duration of your account and a reasonable period afterward. Aggregated and anonymized analytics may be retained indefinitely.

Legal and Compliance

We may retain certain data beyond standard periods where required by law or to resolve disputes.

15. Security

  • All data encrypted at rest and in transit (AES-256)
  • Authentication tokens and API keys encrypted and stored securely
  • Secure SSL/TLS connections for all data transfers
  • Authentication handled via OAuth 2.0 with supported platforms
  • Access to your data strictly limited to authorized personnel
  • Regular security reviews and infrastructure monitoring

While we implement robust security measures, no method of transmission over the Internet is 100% secure.

16. Children

The Services are not intended for use by minors under the age of 16. We do not knowingly collect personal information from individuals under 16. If we become aware of such collection, we will delete that information promptly.

17. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. Changes will be effective immediately after being posted on this page. Your continued use of the Services constitutes acknowledgment of and consent to the modified policy.

18. Contact Us

If you have any questions or wish to exercise your data protection rights, please contact us:

Email: alec@newform.ai

Newform, Inc.
9939 Nethy Bridge Ct
Bristow, VA 20136

Last updated: June 2026