Last Updated: October 7, 2026
AgentZig ("AgentZig," "we," "our," or "us"), operated by Sukhani Digital LLC, provides a marketing and advertising automation platform that connects to advertising, social, and communication accounts you already own. This Privacy Policy explains what information we collect, how we use it, how we store and protect it, and how you can delete it.
This policy applies to agentzig.com and the AgentZig web application.
With your explicit authorization, AgentZig connects to the following third-party services. We only access an account after you complete that service's own authorization flow, and only for the integrations you choose to enable:
You may connect any subset of these. Declining or disconnecting one does not affect the others.
Your email address, name, and organization details used to create and administer your AgentZig account.
For each connected service, we receive and store an OAuth access token and, where the service issues one, a refresh token. These are credentials issued by the service, not your password — we never receive, request, or store your passwords for any connected service.
When you connect a Google Ads account using the https://www.googleapis.com/auth/adwords scope, we access the following through the Google Ads API:
If you also authorize the openid and userinfo.email scopes, we receive your Google account email address solely to label the connection in your dashboard.
We do not access Gmail message content, Google Drive files, contacts, calendar, or any other Google service beyond those described above.
From Meta, Amazon Ads, TikTok, and Pinterest we receive comparable advertising and account data: page and account identifiers, campaign and creative objects, and performance metrics. From Slack we receive the workspace and channel identifiers needed to deliver the notifications you configure. From Gmail or Outlook we receive the authorization needed to send the email messages you configure.
When a merchant installs the AutoCPG app on their Shopify store, we receive an access token for that store and read: products and variants; inventory levels and locations; and orders, including line items, prices, discounts, taxes, refunds and fulfillment status. We reduce each order to its number, date, status, totals and line items before storing it. We do not request or store the names, email addresses, phone numbers or addresses of the merchant's customers. If a merchant sets up a workflow that listens for Shopify order notifications, the notification is stored as Shopify sent it, and is deleted as described in Section 6.2.
Images, video, ad copy, captions, campaign configurations, automation rules, and approval decisions you create or make within AgentZig.
Log data about your use of the application, including timestamps, actions taken, API request records, and error diagnostics.
We use the information we collect solely to provide, maintain, secure, and improve the AgentZig service you have asked for.
Google Ads data accessed through the Google Ads API is used exclusively to:
Where AgentZig proposes an action, you retain control over whether it is applied. Actions taken automatically are taken only within the rules and limits you configure.
AgentZig's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
Automated processing within AgentZig — including models used to generate recommendations for your own account — operates on your data to deliver the features you have enabled and does not contribute your Google user data to any model used for other customers or for general model development.
Data from Meta, Amazon Ads, TikTok, Pinterest, Slack, Gmail, and Outlook is used on the same basis: to display it to you, to carry out the publishing, messaging, and campaign actions you configure, and for no other purpose. We do not use it for our own advertising and we do not sell it.
Shopify store data is used only to provide the merchant's own forecasts, inventory plans, financial records and reports, and to publish the products and stock levels the merchant creates in AutoCPG. We never sell it, use it for advertising, or share it with other customers.
We access each connected account only after you grant permission through that provider's standard OAuth consent screen. You may withdraw that permission at any time as described in Section 7.
We do not sell your data. We do not share it with data brokers. We share information only in these limited circumstances:
All OAuth access and refresh tokens are encrypted at rest before being written to our database. Data is encrypted in transit using TLS. Access to production systems is restricted to authorized personnel, requires multi-factor authentication, and is logged. We maintain tenant isolation so that one customer's connected account data is not accessible to another.
We retain your connected account data and advertising data for as long as your AgentZig account remains active and the relevant connection remains authorized.
When you disconnect a service, we revoke and delete the stored tokens for that service within 7 days, and delete the associated cached account and performance data within 30 days.
When you delete your AgentZig account, we delete all associated data — including all tokens, cached advertising data, created content, and configuration — within 30 days, except where retention is required by law. Backups containing deleted data are purged on a rolling cycle not exceeding 90 days.
Shopify. When a merchant uninstalls the AutoCPG app, Shopify revokes our access and we delete the store's access token immediately. Within 48 hours Shopify sends a shop deletion request, and we then delete all data we hold for that store. When Shopify forwards a customer's deletion request, we delete any stored record containing that customer's data; when it forwards a customer's data request, we tell the merchant what we hold within 30 days. Order notifications stored by a merchant's workflows are deleted after 90 days.
Log data used for security and diagnostics is retained for up to 12 months in de-identified form.
You may revoke AgentZig's access to your Google Ads account at any time at myaccount.google.com/permissions, by selecting AgentZig and choosing to remove access. You may also disconnect the account from within AgentZig, which revokes the token on our side.
Revoking access stops all further data collection from that service immediately.
You may request a copy of the personal data we hold about you, request correction of inaccurate data, or request deletion of your data. Contact us at the address in Section 11 with the subject line "Data Request." We respond within 30 days. To delete your entire AgentZig account and all associated data, email us with the subject line "Data Deletion Request," or use the account deletion option in your account settings.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the GDPR including access, rectification, erasure, restriction of processing, data portability, and objection. If you are a California resident, you have rights under the CCPA/CPRA including the right to know, delete, correct, and opt out of sale or sharing — noting that we do not sell or share personal information as those terms are defined. To exercise any of these rights, contact us as described in Section 11.
AgentZig is operated from the United States, and your data is processed and stored there. If you access the service from outside the United States, you consent to this transfer. Where required, we rely on appropriate safeguards for international transfers.
AgentZig is a business tool and is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have done so, we will delete it.
We may update this Privacy Policy from time to time. We will revise the "Last Updated" date above and, where changes are material, notify you by email or through the application before the changes take effect. Continued use of AgentZig after changes take effect constitutes acceptance.
Questions, requests, or complaints regarding this Privacy Policy or our data practices:
Agentzig
Support: admin@agentzig.com