Privacy Policy

Who we are

Limn is a marketing and CRM platform operated by Acadia Marketing LLC ("Limn", "we", "us"), One City Center, Portland, ME 04101. This policy describes what we collect, why, and the choices you have. It applies to launchwithlimn.com and the Limn application.

Information we collect

• Account information — your name, email address, and password (stored hashed) when you create an account.
• Customer data you enter — contacts, companies, messages, appointments, and other CRM records your organization stores in Limn. Your organization owns this data; we process it only to provide the service.
• Connected account tokens — when you connect Facebook, Instagram, LinkedIn, or Google Business accounts, we store the access tokens needed to publish on your behalf. Tokens are encrypted at rest and never shared.
• Usage and log data — standard server logs (IP address, browser, pages requested) used for security and reliability.
• Billing information — payments are handled by our payment processors; we never store full card numbers.

How we use information

• To provide, maintain, and improve the Limn service.
• To send messages (email, SMS, social posts) that you or your organization explicitly compose and schedule.
• To power the AI features you invoke — drafting replies, summarizing, and generating content (see below).
• To secure accounts, prevent abuse, and comply with legal obligations.

We do not sell your personal information, and we do not use your customer data for advertising.

Facebook and Instagram data

When you connect a Facebook Page or Instagram business account, we store the Page or account name, its Facebook ID, its category and profile picture, the list of permissions Facebook granted, and an access token. Tokens are encrypted before they are stored and are used only to do the things you asked for: publish the posts you schedule, show your connection status, read your comments, and read your Page statistics.

We also store what the people who contact your Page send you, because that is what an inbox is:

• Messages — the text of Facebook and Instagram direct messages sent to your Page, and the sender's Facebook or Instagram identifier. That identifier is issued by Facebook, is specific to your Page, and is not an email address or phone number.
• Comments — the text of comments on your posts, the commenter's public display name, and the same kind of Facebook-issued identifier.
• Statistics — counts we fetch from Facebook and Instagram, such as reach, views and follower numbers. These are totals about your Page. They are never about a named person.

How long we keep it. Messages, comments and statistics stay for as long as your organization has an account with us, because they are your record of your customers. When you disconnect a Page or Instagram account, we delete the comments and the statistics we fetched for it and retire its token immediately; the messages stay, because they are conversations with your customers rather than data about the connection. Deleting your organization deletes all of it.

Asking us to delete your data. If you have messaged or commented on a business that uses Limn and you want that removed, remove the Limn app from your Facebook account (Settings → Apps and Websites → Limn → Remove) and choose to delete your information, or email support@launchwithlimn.com. Either way we delete the direct messages you sent, remove your name and identifier from your comments, and delete the contact record we created for you unless that business also has your email address or phone number — in which case we keep their record of you as a customer and remove the Facebook and Instagram identifiers from it. Requests made through Facebook get a confirmation code, and entering it on this page shows exactly what was removed.

If you are the business: you can disconnect at any time from Settings, or by removing the Limn app in your Facebook settings. Removing the app revokes the token at Meta, so our access ends immediately and we mark the connection as revoked.

Google user data

Limn connects to Google only where you ask it to. Each connection belongs to one business in your account, and the permission you grant is used only for that business.

• Google sign-in — signing in with Google gives us your name, your email address and your profile picture. We use them to identify your Limn account and to show who you are to your own teammates.
• Google Calendar — we read the names of your calendars and the times you are busy, and we create, update and cancel the appointments booked through Limn. Your busy times decide which slots a customer can book, so the booking pages never offer a time you are already committed to. If you switch on bringing your Google events into Limn, we also store the title and the time of those events, and match an invited email address to a contact you already have.
• Google Analytics — we read the list of websites the connected account can see, and the visitor counts, traffic sources and page figures for the one website you choose. We use them to show that business how many people visit its website beside how many of them became customers. These are totals about a website. They are never about a named person, and we write nothing back to Google.
• Google Search Console — we read the list of sites the connected account can see, and the search clicks, impressions, average position and top searches for the one site you choose. We use them in that business's performance reports. These are totals about a website and the words people searched, never about a named person, and we write nothing back to Google.
• YouTube — we read the list of channels the connected account manages and the videos already on them, and we upload the videos you publish from Limn. We use them to publish your video to your own channel and to tell you when it has finished processing.
• Google Business Profile — we read the business profiles the connected account manages, their details, and the reviews people leave on them. We use them to publish the posts you write, to send the review replies you write, and to put your booking link on your profile.
• Google Ads — for an agency that connects its own Google account, we read campaign, keyword, Quality Score and lead records for the client accounts under that manager account, and we apply campaign changes the agency approves in Limn (pause, enable, names, and later budgets when switched on). Writes happen only when someone applies a change. We also still read Google Guaranteed lead records for client reports.
• Firebase Cloud Messaging — when you turn notifications on from an Android phone, Limn sends that phone the alerts you asked for. This does not read your Google account.

How we store it. The permission Google issues is encrypted before it is stored, and it is stored against the one business you connected it to. Nothing else in Limn can read it, and no other business can use it. What we read from Google is stored against that same business and used only for the feature named above.

Who can see it. We never sell information received from Google. The only companies it reaches are the service providers that host and run Limn, each of which may process it only on our instructions. We never use it for advertising and we never use it to train an AI model. No person here reads it, except with your agreement — when you ask us for help with a problem — or where reading it is needed to keep accounts secure or to meet the law.

When we delete it. Disconnecting a Google account deletes the stored permission straight away, and our access to that account ends with it. Deleting the business, or your organization, deletes what we read from it. You can also remove Limn from the permissions page of your own Google account, which ends our access the same way.

Limn's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI features

Limn includes AI features — drafting a reply, summarizing a conversation, generating post or email copy, and similar. When you or one of your organization's automations runs one of these, the text needed for that specific request (for example the message being replied to, or the contact details you are merging) is sent to our AI provider, Anthropic, and the generated result is returned to you. Requests are made only to produce output you asked for.

We do not use your data to train AI models, and our AI provider does not train on data submitted through its API. Organizations that prefer to use their own AI provider account can supply their own API key in Settings, in which case requests are billed to and governed by that account instead.

Data retention and deletion

Records you delete in the application are removed from your workspace immediately and stop being processed. Some deletions are recorded as soft deletes, meaning the underlying row is retained but inaccessible, so that related history and audit records stay intact; we retain those for as long as your organization has an account with us. Organization owners can export their full dataset at any time from Settings, and can request complete and permanent deletion of an organization's data by emailing support@launchwithlimn.com.

Any user can delete their own account from inside the application, in Settings under My profile, or by email. The steps, the grace period and what is kept are on the account deletion page.

Sharing

We share data only with the service providers required to run Limn — hosting, database, email and SMS delivery, telephony, file storage, AI generation, and payment processing — each bound to process it only on our instructions. We do not sell personal information or share it with advertisers. We may disclose information if required by law.

Mobile numbers and text messaging. We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Mobile numbers and text-message opt-in information are used only to send the messages you or your organization have agreed to receive (account notifications, verification codes, appointment reminders, invoices and document links, and customer-care replies) and are disclosed only to the carriers and messaging providers needed to deliver them. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help.

Security

All traffic is encrypted in transit (TLS). Social tokens are encrypted at rest, passwords are hashed, and tenant data is isolated with database row-level security.

Contact

Questions about this policy or your data: support@launchwithlimn.com.