Privacy Policy

Updated: October 27, 2026

Effective Date: October 27, 2026

This Privacy Policy explains how Embarc Creative Co. LLC, doing business as Embarc (“Embarc,” “we,” “us”), collects, uses, stores, shares and deletes information through our website at embarcwithus.com, our client portal, and our account connection app at connect.embarcwithus.com (together, the “Services”). For the rules that govern use of our website, see our Terms and Conditions.

1. Who we are

Embarc is a marketing agency based in Arkansas, United States. We manage social media, advertising, websites and reporting for our clients. Contact: support@embarcwithus.com, 501-291-1241.

2. Information we collect

Information you give us. When you book a call, fill out a form, subscribe to our emails or become a client, we collect details such as your name, email address, phone number, business name and the content of your message.

Client portal accounts. If you are a client, we store your portal login (name, email, role), the projects, files, approvals, comments and social media content you or we create in the portal, and invoice and billing records.

Website usage data. Our website uses cookies and similar tools from Google Analytics / Google Tag Manager, Microsoft Clarity and the Meta Pixel to understand how visitors use the site (pages viewed, device, browser, approximate location, referring site). You can block these with your browser settings.

Connected social and advertising accounts. With a client’s permission, an authorized person signs in to a platform through connect.embarcwithus.com and grants Embarc access to the client’s business accounts. Depending on the platform, we receive and store:

  • Access credentials: the access and refresh tokens the platform issues, the permissions (scopes) granted and their expiry. We never receive or store your platform password.
  • Account details: the account, Page, channel or organization ID, name and profile picture.
  • Content and performance data: posts and videos published on the account and their public metrics (for example views, likes, comments, shares, followers and reach), and advertising performance data where granted.
  • Comments and messages: comments on the account’s posts and, where granted, direct messages sent to the account, so we can respond on the client’s behalf.
  • Publishing records: the IDs, status and links of posts we publish for the client.

3. Google and YouTube data

When a client connects a YouTube channel, we request these Google permissions: upload videos (youtube.upload), manage the YouTube account (youtube, youtube.force-ssl) and view the YouTube account (youtube.readonly). We use them only to:

  • show which channel is connected (channel ID, title and avatar);
  • upload videos and Shorts the client has approved in our portal, with the title, description, tags and visibility the client chose;
  • edit or delete those videos when the client asks;
  • list comments on the channel’s videos so we can reply, hold for review or approve them on the client’s behalf;
  • report on the channel’s video performance to the client.

We also use Google Sign-In for Embarc staff, which shares your name, email address and profile picture with us.

Limited Use. Embarc’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to train artificial intelligence or machine learning models, and no person reads it except as needed to provide the Services the client asked for, for security, or to comply with the law.

Our use of YouTube is also subject to the YouTube Terms of Service and the Google Privacy Policy. You can remove Embarc’s access at any time at myaccount.google.com/permissions.

4. Meta, TikTok and LinkedIn data

For Facebook Pages, Instagram professional accounts, Meta ad accounts, TikTok accounts and LinkedIn Pages, we use the permissions granted to publish approved content, manage comments and messages, and report on performance, as described in section 2. These platforms’ own policies also apply: Meta Privacy Policy, TikTok Privacy Policy and LinkedIn Privacy Policy. TikTok creator settings are fetched each time a post is prepared and are not stored.

5. How we use information

  • To provide the marketing, social media, website and reporting services our clients hire us for.
  • To publish content and respond to comments and messages only as the client has approved.
  • To prepare performance reports for the client.
  • To communicate with you, send invoices and answer questions.
  • To keep our Services secure and working.

We do not sell personal information, and we do not use data from a client’s connected accounts for any other client or for our own advertising.

6. How we store and protect it

Platform access tokens are stored encrypted in Google Cloud Secret Manager and are used only by our connection app on Google Cloud. Reporting data is stored in Google Cloud (BigQuery). Our website and client portal are hosted by WP Engine. Access is limited to Embarc staff who need it, and all connections use HTTPS.

7. Who we share it with

We share information only with:

  • the client who owns the connected account and the people they authorize in our portal;
  • service providers that host or run our Services for us (Google Cloud, WP Engine, Intuit QuickBooks for invoicing, Mailchimp for email), under their own confidentiality and security terms;
  • the social platforms themselves, when we publish or reply on the client’s behalf;
  • authorities, when the law requires it.

8. How long we keep it and how to delete it

We keep connected-account tokens only while the account is connected. When a client disconnects an account in our connection app, or asks us to, we delete its tokens and, for Google, revoke our access with Google. You can also remove our access directly in the platform’s settings. Reporting history and portal records are kept for the length of the client relationship and then deleted within 90 days of a written request, unless we must keep them for legal, tax or accounting reasons.

To request access to, correction of or deletion of your data, email support@embarcwithus.com. We respond within 30 days.

9. Children

Our Services are for businesses and are not directed to children under 13. We do not knowingly collect information from children.

10. Changes

We will post any changes to this policy on this page and update the date at the top.

11. Contact

Embarc Creative Co. LLC (DBA Embarc), Little Rock, Arkansas, United States · support@embarcwithus.com · 501-291-1241