Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains what information Lure Digital Marketing (“Lure”, “we”, “us”) collects, how we use it and who we share it with. It covers our website luremkt.com, our contact form, our free marketing audit, the calls you book with us, and LURE Hub (app.luremkt.com), the platform we use to run client work, connect the marketing accounts our clients authorize and prepare their reports.

1. Who we are

Lure Digital Marketing is a digital marketing agency based in Billerica, Massachusetts, USA. You can reach us at sales@luremkt.com or (617) 863-6967, Monday to Friday, 9am to 5pm ET.

2. Information we collect

2.1 What you tell us

• Contact form. Your name, business name, phone, email, the city or area you serve, the service you are interested in, your monthly budget, how customers find you today, when you want to start, and what is not working right now.
• Free marketing audit. Your first and last name, business name, industry, years in business, how customers find you, your monthly revenue range, whether you have a website and its address, the social networks you use, your handle and how often you post, the ads you run and your monthly ad spend, your marketing budget, when you want to start, your email and your mobile phone number.
• Booking a call. You book on Calendly’s website. Calendly collects what you enter there, such as your name, email and the time you choose, and shares it with us so we can hold the call.
• Calls and email. What you tell us when we talk or write to each other.

2.2 What we look up about your business

Before the call, we review your business’s public presence: your website, your Google Business Profile, your reviews and your social media accounts. We only look at what anyone can see publicly.

2.3 What is collected automatically

• Visit data. When you visit the site, our hosting provider and Google Analytics receive your IP address, your browser and device type, the pages you view, the site that sent you and your approximate location.
• The page you sent a form from. For the free audit this includes any campaign tags in the link, such as utm_source or gclid.
• Spam protection. When you send a form, we use your IP address to limit repeated submissions. We keep it only as a one-way code made with a secret key, never as the address itself.
• Cookies and similar technologies, described in section 6.

2.4 Clients

• Business and contact details, proposals, contracts and the notes we keep about the engagement.
• Billing is processed by Stripe. We never see or store full card numbers.
• Contracts are signed electronically through Docusign.

2.5 Data from accounts you connect to LURE Hub

To deliver the services you hire us for, you may give LURE access to your marketing accounts, either by approving a partner/manager request or by signing in with the platform and authorizing LURE Hub. Depending on the services you hire, we receive:

• Meta (Facebook Pages, Instagram professional accounts, ad accounts): the IDs and names of the assets you share with LURE’s business portfolio, the status of the access request, advertising results (spend, reach, impressions, clicks, leads and other campaign results) and Page and Instagram insights.
• Google Ads: the account ID and name, the status of the link to LURE’s manager account, and campaign results (cost, clicks, impressions, conversions and cost per conversion).
• Google Business Profile: the business profile and location details, reviews and ratings, performance metrics (such as views, calls and website clicks), and the review replies LURE posts on your behalf with your approval.
• Google Search Console: search performance for your website (impressions, clicks, average position and search queries).
• The person who authorizes the connection: name and email address, and the access tokens issued by the platform. Tokens are stored encrypted and are used only by LURE Hub’s servers.

We only request the access the services in your contract need. We do not request or store your passwords.

3. How we use information

• To answer you when you contact us.
• To prepare your free audit and the call, using your answers and your business’s public presence.
• To schedule and hold the call, and to send you a proposal.
• To provide the services in your contract: managing your campaigns, profiles and content, and preparing the monthly report that shows what your marketing produced.
• To check that each connection is still working and to tell you when an access expires or needs to be renewed.
• To send contracts, invoices and reports, and to answer your requests.
• To understand how our website is used and to measure which of our ads bring inquiries.
• To keep our systems secure, stop spam and fraud, and meet legal and accounting obligations.

We do not sell personal information. We do not use data received from the Google or Meta accounts you connect to LURE Hub to serve advertising, to build profiles of individuals, or to train generalized AI or machine-learning models. Report summaries may be drafted with the help of an AI service provider that processes the numbers on our instructions, only to prepare your own report, and every summary is reviewed by LURE before it is sent.

4. Google API Services: Limited Use

LURE Hub’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, data received from Google APIs (Google Business Profile, Google Search Console and Google Ads) is used only to provide and improve the features you see in LURE Hub and in your reports; it is not transferred to others except as necessary to provide those features, to comply with the law, or as part of a merger or acquisition; and LURE staff do not read it except with your permission, for security purposes, to comply with the law, or when it is aggregated and anonymized for internal operations.

5. Data from Meta

LURE uses data received through Meta’s platform only to provide the services you hired, in accordance with the Meta Platform Terms and Developer Policies. You can remove LURE’s access at any time (see section 9).

6. Cookies, analytics and advertising measurement

Our site uses these tools:

• Google Analytics. Sets the _ga cookies to count visits and show us how the site is used. When you send us a form, our server also tells Google Analytics that a new inquiry came in, without your contact details.
• Google Fonts. On the free audit page your browser downloads a typeface from Google, which receives your IP address.
• Site settings. Your browser remembers that you already saw our loading screen in this visit, and on the free audit, whether you chose the light or dark display. These stay in your browser and are not sent to us.

Google may collect information about your activity on our site over time and across other websites and apps, and use it under its own privacy policy: the Google Privacy Policy.

How to turn this off:

• Block or delete cookies in your browser settings. The site still works without them.
• Install the Google Analytics opt-out add-on.
• Turn off ad personalization in Google My Ad Center.

7. Do Not Track

Some browsers can send a “Do Not Track” signal. Our site does not respond to it: it works the same way whether the signal is on or off. You can still block cookies as described above.

8. How we share information

We share information only with service providers that process it for us, as needed to run our website and services:

• Vercel, which hosts this website and LURE Hub;
• Supabase, the database and file storage behind LURE Hub, where the inquiries you send us are kept;
• Resend, which delivers the email that tells us about your inquiry, and Google Workspace, our email;
• Calendly (scheduling), Stripe (payments) and Docusign (electronic signatures);
• Google (Analytics, Fonts, and the Google Ads, Business Profile and Search Console connections in LURE Hub) and Meta (the Meta connections in LURE Hub);
• an AI service provider used to draft report summaries.

We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of all or part of our business, in which case this policy continues to apply.

9. Your choices and data deletion

You can ask to see, correct or delete the personal information we hold about you by emailing sales@luremkt.com. If we send you marketing emails, you can unsubscribe at any time with the link in the email or by writing to the same address.

You can disconnect LURE from your accounts at any time:

• Meta: in Meta Business Settings, go to Users > Partners, select LURE and remove its access to your assets. If you authorized the LURE Hub app with your Facebook account, you can also remove it in Settings & privacy > Settings > Apps and websites.
• Google: remove LURE Hub at myaccount.google.com/permissions, remove LURE as a manager of your Business Profile or as a user of your Search Console property, and unlink LURE’s manager account in Google Ads (Admin > Access and security > Managers).

To ask us to delete your data, email sales@luremkt.com with the subject “Data deletion request” and the business name or account involved. We confirm the request, delete the data within 30 days and reply when it is done. We may keep records we are legally required to keep (such as invoices), and we tell you which ones.

10. How long we keep information

• Data received from connected accounts is kept only as long as needed to deliver the services and as allowed by each platform’s terms (for example, content from Google Business Profile is cached for no more than 30 days). When you disconnect an account or the engagement ends, LURE Hub revokes the access and deletes the tokens and the stored account data within 30 days, except for reports already delivered to you.
• Contracts, invoices and the reports delivered to you are kept for up to 7 years to meet legal and accounting obligations.
• Messages from our contact form and free audit are kept as long as we need them to respond to you and follow up, and deleted when we no longer do, unless they become part of a client engagement.

11. Security

We take reasonable measures to protect information: encryption in transit (HTTPS) and at rest, access limited by role inside LURE Hub, logs of access to sensitive records, and the security controls of our infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and will notify you as the law requires if a breach affects it.

12. Children

Our website and services are for businesses and are not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has sent us information, email us and we will delete it.

13. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change is material, we tell clients before it applies.

14. Contact

Lure Digital Marketing
Billerica, Massachusetts, USA
Email: sales@luremkt.com
Phone: (617) 863-6967
Monday to Friday, 9am to 5pm ET