Privacy Policy

Who we are

Limn is a marketing and CRM platform operated by Acadia Marketing LLC("Limn", "we", "us"), One City Center, Portland, ME 04101. This policy describes what we collect, why, and the choices you have. It applies to launchwithlimn.com and the Limn application.

Information we collect

• Account information — your name, email address, and password (stored hashed) when you create an account.
• Customer data you enter — contacts, companies, messages, appointments, and other CRM records your organization stores in Limn. Your organization owns this data; we process it only to provide the service.
• Connected account tokens — when you connect Facebook, Instagram, LinkedIn, or Google Business accounts, we store the access tokens needed to publish on your behalf. Tokens are encrypted at rest and never shared.
• Usage and log data — standard server logs (IP address, browser, pages requested) used for security and reliability.
• Billing information — payments are handled by our payment processors; we never store full card numbers.

How we use information

• To provide, maintain, and improve the Limn service.
• To send messages (email, SMS, social posts) that you or your organization explicitly compose and schedule.
• To power the AI features you invoke — drafting replies, summarizing, and generating content (see below).
• To secure accounts, prevent abuse, and comply with legal obligations.

We do not sell your personal information, and we do not use your customer data for advertising.

Facebook and Instagram data

When you connect a Facebook Page or Instagram business account, we store the Page or account name, its Facebook ID, its category and profile picture, the list of permissions Facebook granted, and an access token. Tokens are encrypted before they are stored and are used only to do the things you asked for: publish the posts you schedule, show your connection status, read your comments, and read your Page statistics.

We also store what the people who contact your Page send you, because that is what an inbox is:

• Messages— the text of Facebook and Instagram direct messages sent to your Page, and the sender's Facebook or Instagram identifier. That identifier is issued by Facebook, is specific to your Page, and is not an email address or phone number.
• Comments— the text of comments on your posts, the commenter's public display name, and the same kind of Facebook-issued identifier.
• Statistics — counts we fetch from Facebook and Instagram, such as reach, views and follower numbers. These are totals about your Page. They are never about a named person.

How long we keep it. Messages, comments and statistics stay for as long as your organization has an account with us, because they are your record of your customers. When you disconnect a Page or Instagram account, we delete the comments and the statistics we fetched for it and retire its token immediately; the messages stay, because they are conversations with your customers rather than data about the connection. Deleting your organization deletes all of it.

Asking us to delete your data.If you have messaged or commented on a business that uses Limn and you want that removed, remove the Limn app from your Facebook account (Settings → Apps and Websites → Limn → Remove) and choose to delete your information, or email john@acadiamarketingmaine.com. Either way we delete the direct messages you sent, remove your name and identifier from your comments, and delete the contact record we created for you unless that business also has your email address or phone number — in which case we keep their record of you as a customer and remove the Facebook and Instagram identifiers from it. Requests made through Facebook get a confirmation code, and entering it on this page shows exactly what was removed.

If you are the business: you can disconnect at any time from Settings, or by removing the Limn app in your Facebook settings. Removing the app revokes the token at Meta, so our access ends immediately and we mark the connection as revoked.

AI features

Limn includes AI features — drafting a reply, summarizing a conversation, generating post or email copy, and similar. When you or one of your organization's automations runs one of these, the text needed for that specific request (for example the message being replied to, or the contact details you are merging) is sent to our AI provider, Anthropic, and the generated result is returned to you. Requests are made only to produce output you asked for.

We do not use your data to train AI models, and our AI provider does not train on data submitted through its API. Organizations that prefer to use their own AI provider account can supply their own API key in Settings, in which case requests are billed to and governed by that account instead.

Data retention and deletion

Records you delete in the application are removed from your workspace immediately and stop being processed. Some deletions are recorded as soft deletes, meaning the underlying row is retained but inaccessible, so that related history and audit records stay intact; we retain those for as long as your organization has an account with us. Organization owners can export their full dataset at any time from Settings, and can request complete and permanent deletion of an organization's data by emailing john@acadiamarketingmaine.com.

Sharing

We share data only with the service providers required to run Limn — hosting, database, email and SMS delivery, telephony, file storage, AI generation, and payment processing — each bound to process it only on our instructions. We do not sell personal information or share it with advertisers. We may disclose information if required by law.

Security

All traffic is encrypted in transit (TLS). Social tokens are encrypted at rest, passwords are hashed, and tenant data is isolated with database row-level security.

Contact

Questions about this policy or your data: john@acadiamarketingmaine.com.