Gorilla Works Marketing

Privacy Policy

Last updated: October 13, 2026

1. Who We Are

Gorilla Works Marketing ("Gorilla Works," "we," "us," "our") is a direct mail marketing company based in Washington State. We provide direct mail campaign planning, design, and fulfillment, along with a client Platform ("Platform") that lets clients track campaign performance, including data from third-party analytics tools they choose to connect.

This policy covers gorillaworksmarketing.com, the Platform, and related services (together, the "Services").

2. Information We Collect

Directly from you:

  • Name, business name, email, phone, mailing address
  • Billing and payment information (see Section 5 — Payments)
  • Account credentials (see Section 6 — Passwords & Account Security)
  • Campaign details: industry, mail volume, target zip codes, mailing lists you provide
  • Creative content and design files you upload for campaign production (see Section 7 — Uploaded Designs)
  • Communications with us (support requests, emails, call notes)

Automatically:

  • Google Analytics traffic measurements on public marketing pages independently of the banner choice. With your permission: Microsoft Clarity session recordings and RID mailing-to-visit association (see Section 16).
  • Platform usage data (logins, features used, timestamps, error logs)

From integrations you connect: see Sections 8, 9, and 10. For the planned optional LinkedIn publishing integration, including content and scheduling instructions you supply, see Section 10A.

3. How We Use Information

To provide and operate the Services and your reports; process orders and billing; produce and fulfill mail campaigns; communicate with you about your account or campaigns; improve the Services; detect fraud or abuse; comply with legal obligations. We do not exchange your personal information or connected analytics data for money. Some disclosures to analytics providers may be subject to broader legal definitions of sale or sharing; you can opt out through Your Privacy Choices, and we honor Global Privacy Control as described below.

If LinkedIn publishing becomes available, its data would be used only to connect the selected account or Page, carry out your authorized publication instructions, and support that connection and publication. The broader improvement and analysis purposes above do not authorize unrelated use of LinkedIn API data (see Section 10A).

4. AI and Automated Analysis

The Platform uses artificial intelligence (AI) and statistical modeling — including causal inference and machine learning techniques — to analyze your campaign performance data and generate insights. This section explains how those models work, what data they process, and your rights with respect to them.

What the models do:

  • Causal attribution — estimating the incremental lift (additional responses or conversions attributable) to a direct mail campaign by comparing outcome trends before and after each mail drop.
  • Multi-channel attribution — combining your connected GA4, Google Ads, and Meta data to estimate each channel's contribution to observed changes in site traffic, leads, or conversions.
  • Performance trend analysis — identifying patterns and anomalies in campaign and traffic data to surface insights in your reporting dashboard.

What data these models use:

Only data you have already connected and authorized — your direct mail campaign dates and volumes, and any third-party analytics data you have linked (Google Analytics, Google Ads, Meta). No data from other clients is used in your models, and your data is never used to train models for other clients.

Outputs are informational only:

All AI and model outputs — attribution estimates, lift figures, trend alerts, and recommendations — are provided for informational purposes and to support your own business judgment. No legally significant or financially binding decisions are made automatically on your behalf based solely on model output. Every output requires your own review and any action is taken by you.

This advisory analysis is separate from the planned scheduled publishing described in Section 10A: an explicitly authorized schedule or automation configuration could instruct us to publish without another approval at each scheduled time. Connecting LinkedIn or receiving an AI recommendation would not itself authorize a post. LinkedIn API data would not be used in these analysis models or to train AI models.

GDPR Article 22 (EU/UK users):

We do not make decisions that produce legal effects or similarly significant effects on you based solely on automated processing. All model outputs are advisory; any consequential action requires human review and deliberate choice by you or by us acting on your explicit instruction.

How to opt out:

You can stop AI analysis of your data at any time by disconnecting the relevant integrations from your dashboard (which removes the data those models rely on) or by closing your account. Disconnecting an integration immediately halts further data collection for that source; previously computed results may remain in your dashboard history until you request deletion.

Deletion requests:

To request deletion of AI-derived reports or model outputs, email hello@gorillaworksmarketing.com. We process requests in accordance with applicable law.

5. Payments and Checkout

Payment processing is handled by a third-party payment processor (e.g., Stripe). We do not store full credit card numbers, CVV codes, or other full payment card data on our own servers. Your card details go directly to our processor's PCI-DSS-compliant systems.

We retain limited billing metadata needed to manage your account: transaction history, invoice amounts, last four digits of your card, card type, and billing address.

Orders placed through the Platform's checkout are confirmed by email; you're responsible for reviewing order details (quantities, mailing lists, artwork) before final confirmation, since printed mail cannot be recalled once sent to production.

Refund and cancellation terms for campaign orders are set out in our Terms of Service, not this Privacy Policy.

6. Passwords and Account Security

Passwords are never stored in plain text — we store only a salted, one-way cryptographic hash, meaning even we cannot view your actual password.

You are responsible for keeping your login credentials confidential and for all activity under your account. Notify us immediately at hello@gorillaworksmarketing.com if you suspect unauthorized access.

We recommend a unique password not reused from other sites.

7. Uploaded Designs and Creative Content

Files, artwork, logos, images, and copy you upload for campaign production ("Your Content") are used solely to design, proof, and fulfill your direct mail campaigns and to display draft/proof versions to you within the Platform, or, if LinkedIn publishing becomes available, to prepare and publish the LinkedIn content you authorize under Section 10A.

We do not use Your Content for any other client's campaign, for our own marketing, or share it with third parties outside of our printing/fulfillment vendors necessary to produce your order, without your permission.

Your authorization to publish on LinkedIn would permit us to transmit the selected text, media, and links to LinkedIn; it would not permit cross-client reuse or use for our own marketing.

You retain ownership of Your Content. You represent that you have the necessary rights to upload it and to have us reproduce it for your campaign.

Independently uploaded files are retained for a reasonable period to support reprints and campaign history, and deleted or archived per our retention schedule (Section 12) or upon your request. LinkedIn API responses are subject instead to the applicable restrictions in Section 10A.

8. Google Analytics Integration (Read-Only)

The Platform offers an optional one-click integration to connect your GA4 property so we can report on your site traffic alongside your mail campaign performance.

  • What we request: read-only access via the analytics.readonly scope only.
  • What we never request: edit, admin, or user-management access. We cannot modify your GA4 property or account settings.
  • What we do with it: pull aggregate metrics (sessions, conversions, traffic sources) to show before/after trends around your mail drops, and feed our causal attribution models (see Section 4).
  • Who can see it: only your logged-in account (see Section 11).
  • How to remove it: disconnect anytime from your dashboard — this immediately revokes our access at Google and deletes our stored connection record.

Our use of information received via Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

9. Google Ads Integration

The Platform offers an optional integration to connect your Google Ads account so we can report on your paid search performance alongside your direct mail campaigns, and run causal attribution analysis across channels (see Section 4).

OAuth scope we request and why:

  • https://www.googleapis.com/auth/adwords — grants access to your Google Ads account data, including campaigns, ad groups, ads, keywords, budgets, account structure, and performance reports. This scope is required by the Google Ads API to retrieve any advertising data.

What data is accessible:

  • Campaign structure: campaigns, ad groups, ads, and keywords.
  • Budget and bidding settings associated with your campaigns.
  • Account structure (manager accounts, sub-accounts linked to your authorized account).
  • Performance reports: impressions, clicks, cost, conversions, and related metrics.

Access granted by the https://www.googleapis.com/auth/adwords scope includes the technical ability to see, create, edit, and delete Google Ads account data as authorized by you through the OAuth connection flow.

What we do with it:

  • Pull campaign performance metrics (impressions, clicks, cost, conversions) to display in your reporting dashboard alongside your direct mail campaigns.
  • Run causal attribution models comparing your Google Ads performance trends to your mail drop windows to estimate incremental lift (see Section 4).

What we never do:

  • Create, edit, delete, pause, or otherwise modify your campaigns, ad groups, ads, or keywords without your explicit direction.
  • Spend your ad budget or adjust your bids or targeting on your behalf.
  • Share your Google Ads data with any other client's account or use it for our own advertising.
  • Access Google Ads accounts beyond those you explicitly authorize during the OAuth flow.

Who can see it:

Only your logged-in account (see Section 11). Your Google Ads data is strictly isolated from every other client's account on every request.

How to remove it and request deletion:

Disconnect anytime from your dashboard — this immediately revokes our stored access token and removes our access at Google. To request deletion of any Google Ads data we have already stored, email hello@gorillaworksmarketing.com. We process requests in accordance with applicable law.

Our use of information received via Google APIs, including Google Ads API data, adheres to the Google API Services User Data Policy, including its Limited Use requirements. Use of the Google Ads API is also subject to the Google Ads API Terms of Service.

10. Meta (Facebook & Instagram) Integration

Data Deletion: To revoke Meta access and request removal of your data, visit gorillaworksmarketing.com/data-deletion for step-by-step instructions.

The Platform offers an optional integration to connect your Meta Business account (Facebook Pages, Instagram Business accounts, and/or Meta Ads) so we can report on your social and ad performance alongside your direct mail campaigns, and run causal attribution analysis across channels (see Section 4).

Permissions we request and why:

  • public_profile — identifies your account during the OAuth sign-in flow.
  • pages_show_list — lists the Facebook Pages you manage so you can choose which to connect.
  • pages_read_engagement — reads Page-level insights (impressions, reach, engaged users, follower growth) and post-level engagement (reactions, comments, shares, clicks) for your connected Page.
  • ads_read — reads ad account information to identify which accounts are linked to your Business.
  • ads_management — required by Meta's API to access full ad account data alongside ads_read; we use it in read mode only for reporting purposes.
  • business_management — accesses Business Manager to identify the Pages and ad accounts associated with your business.
  • leads_retrieval — reads lead submissions from Facebook Lead Generation forms linked to your Page, so lead volume can be tracked alongside mail drop timing.
  • pages_manage_ads — required by Meta to read ad performance data at the Page level; we do not create or modify ads.
  • instagram_basic — reads your Instagram Business account profile and media list.
  • instagram_manage_insights — reads Instagram post-level and account-level metrics (impressions, reach, likes, comments, saves, video views) for your connected account.
  • instagram_content_publish — included in the requested permission set; this scope is not currently exercised to publish content on your behalf.

What we do with the data:

  • Sync Facebook Page posts and their performance metrics (impressions, reach, clicks, engagement) from the past 90 days into your reporting dashboard.
  • Sync Instagram media and their performance metrics (impressions, reach, likes, comments, saves, video views) from the past 90 days.
  • Sync daily Page and Instagram account-level metrics (impressions, reach, follower changes, profile views).
  • Read lead form submission counts to track lead volume relative to your direct mail timeline.
  • Run causal attribution models that compare your social engagement trends to your mail drop windows to estimate incremental lift (see Section 4).

What we never do:

  • Create, edit, delete, or boost posts, ads, or campaigns on your behalf.
  • Spend your ad budget or modify your targeting.
  • Share your Meta data with any other client's account or use it for our own advertising.
  • Retain lead form respondents' personal details beyond what is needed to report aggregate lead counts.

Who can see it:

Only your logged-in account (see Section 11). Your Meta data is strictly isolated from every other client's account on every request.

How to remove it and request deletion:

Disconnect anytime from your dashboard — this immediately revokes our stored access token. To request deletion of any Meta-sourced data we have already stored (posts, insights, lead counts), follow the step-by-step instructions at gorillaworksmarketing.com/data-deletion.

Our use of Meta Platform data complies with the Meta Platform Terms and Meta's Developer Policies, including requirements around data access, storage, and user rights.

10A. LinkedIn Integration and Automated Publishing (Planned)

This optional integration is planned and is not currently available. The disclosures below apply only if it becomes available and you choose to authorize it. They do not mean LinkedIn has approved our app or that connection, scheduling, publishing, or deletion controls already exist.

Authorization and minimum permissions:

You would authorize access through LinkedIn's OAuth authorization flow, not by giving us your LinkedIn password. We would never request your LinkedIn password. Before connection, we would explain the data requested, its use, collection timing, and your choices. You would select your member profile or a company Page you are authorized to manage; only permissions necessary for that selected publishing function would be requested.

  • w_member_social is the permission for posting on behalf of the authenticated member, through an available LinkedIn product such as Share on LinkedIn.
  • w_organization_social is the permission for posting on behalf of a company Page. Page posting would depend on LinkedIn granting the required product access and your having an appropriate Page role for that operation, such as administrator or content admin. Member posting permission alone does not authorize Page posting.
  • Identity or email permissions would be requested only if needed for an available, explained connection function and supported by our approved product access. This policy is not a claim that we currently request those scopes.

Data needed and when it would be collected:

  • At connection or an authorized reconnection: the selected member and/or Page identifiers and authorized basic profile data needed to identify the publishing destination, with consent where required to store that data. Member profile data would not be refreshed on an automatic schedule.
  • Access tokens, their expiry and permission information, and refresh tokens only if LinkedIn supports and permits them for the product made available to us.
  • Text, media, links, destination, audience choices supported by LinkedIn, scheduling instructions, and automation configuration that you supply or explicitly authorize.
  • When carrying out authorized publication: publication IDs, upload identifiers, status, timestamps, and error metadata necessary to confirm or troubleshoot that operation, to the extent available and permitted.

The planned purpose does not include access to private messages, your connections list, advertising accounts, engagement analytics, or unrelated profiles. Posting permissions may technically cover other social actions, but we would use them only for the authorized publishing purpose described here.

Connection is not permission for arbitrary posting:

Publication would follow your explicit authorization of the content and schedule, or a clearly authorized automation configuration defining what may be published, to which profile or Page, and when. Scheduled automatic posting would carry out those instructions without a new approval at every scheduled time; it would not authorize unrelated posts or destinations. OAuth connection alone is not publication authorization.

Transmission and audience visibility:

To fulfill those instructions, we would send the authorized text, media, links, and necessary account/Page identifiers to LinkedIn using its API. Published content would be visible to the audience allowed by your authorized settings and LinkedIn's available features, potentially including the public. LinkedIn independently handles published content under its own terms and Privacy Policy; local deletion or revocation would not recall content already published, copied, or reshared.

Restricted use, access, and security:

We would not sell LinkedIn API data, reuse it across clients, use it for our own advertising, or use it to train AI models. Access would be limited to the client account's authorized users and authorized personnel or service providers who need it to operate or support the integration, subject to confidentiality and applicable LinkedIn restrictions. We would use safeguards appropriate to the data, including access restrictions and protected transmission, but do not claim an implemented LinkedIn-specific security system or guarantee absolute security. The broader sharing provisions in Section 13 would remain subject to LinkedIn's applicable restrictions.

Retention depends on the source and field:

Drafts, media, and instructions independently supplied by you are separate from data retrieved through LinkedIn's APIs. Your independently supplied content would follow Sections 7 and 12. LinkedIn API responses, including publication metadata, would be stored only where permitted and only as long as needed for the authorized purpose, within the applicable API terms and field-specific storage or caching limits. The shortest applicable limit or more protective requirement would prevail over general campaign-history retention. We would not extend API data retention by relabeling it as a report, archive, or backup.

LinkedIn's Marketing API storage limits would apply only if we receive data under that program, not automatically to self-serve member posting or independently supplied drafts. Where that program applies, member social activity data has a 48-hour limit; organization social activity and profile fields have different limits and conditions. Identifiers and authorized member profile data have different rules again. These are not a universal retention period or permission to retain every API field. Storage would require the permission and consent applicable to the actual product and data received.

Withdrawal and deletion:

Withdrawing authorization would stop future publication under that authorization, including scheduled or automated posts not yet sent. You can revoke access on LinkedIn through Settings & Privacy → Data privacy → Other applications → Permitted services, and contact hello@gorillaworksmarketing.com to withdraw publishing instructions or request deletion. We would handle deletion of LinkedIn API data and credentials under the applicable LinkedIn terms and law, including deletion on request or account closure; any legally required exception would not allow continued publishing. This is not a promise of a current dashboard disconnect or automated deletion tool. To remove an already published post, use LinkedIn's own post controls; we do not promise remote deletion. See the LinkedIn revocation and deletion instructions.

Official references: Share on LinkedIn, Posts API, Marketing API data storage requirements, and LinkedIn API Terms of Use. Product availability and applicable requirements must be confirmed before launch; this disclosure is not a legal compliance certification.

11. Multi-Client Data Isolation

Your account, campaign data, uploaded designs, and any connected integrations are strictly isolated from every other client's account. Other clients cannot see your integrations, designs, or data, and you cannot see theirs. Access is scoped to your authenticated session on every request — never determined by anything a user could alter or supply themselves.

12. Data Retention

Retained while your account is active plus a reasonable period for legal, accounting, or reprint purposes. For currently available integrations, disconnecting deletes access credentials immediately; aggregate reports and campaign history may remain unless you request deletion. Payment metadata is retained per applicable financial recordkeeping requirements. For the planned LinkedIn integration, Section 10A governs withdrawal, deletion, and API data retention instead; applicable LinkedIn limits override this general retention language.

13. How We Share Information

Only with: service providers bound by confidentiality (hosting, payment processing, printing/fulfillment, email); when required by law; in a business transfer (merger/acquisition), subject to confidentiality protections; or at your direction.

Authorized LinkedIn publishing would also send your selected content and necessary identifiers to LinkedIn as described in Section 10A. Published content is not restricted to your private Platform account. LinkedIn API data would remain subject to the restricted-purpose and access requirements in that section.

14. Security

Encrypted storage of third-party access tokens and hashed passwords; encrypted transmission (TLS); access controls limiting integration and design data to the connected account; immediate credential revocation on disconnect. No system is 100% secure; we'll notify you of a breach as required by law.

These descriptions concern existing Services and do not assert that LinkedIn token storage or disconnect controls have been implemented. The planned LinkedIn handling is described in Section 10A.

15. Your Rights and Choices

Access/correction, deletion, disconnecting currently available integrations anytime; for planned LinkedIn publishing, use the withdrawal procedure in Section 10A rather than an unavailable dashboard control. Where applicable, California residents have CCPA/CPRA rights including opting out of sale or sharing. Use Your Privacy Choices without creating an account or reading a policy first. EU/UK residents may have GDPR rights including access, rectification, erasure, restriction, portability, withdrawal of consent, and the right to complain to your data protection authority; no decisions with legal or similarly significant effects are made solely by automated means (see Section 4).

Data Deletion: For separately labeled Meta and planned LinkedIn revocation and deletion procedures, follow the steps at gorillaworksmarketing.com/data-deletion. For all other data deletion requests, email hello@gorillaworksmarketing.com. We process requests in accordance with applicable law. Note that billing records required by law are retained per Section 12.

To exercise any other rights, email hello@gorillaworksmarketing.com.

16. Cookies and Tracking

Google Analytics runs on public marketing pages before and after your banner decision. “Accept optional tracking” permits Clarity recording and RID association, except when blocked by a Global Privacy Control signal. “Reject optional tracking” keeps those two tools off; it does not stop Google Analytics. “Privacy choices” opens their independent controls directly, including rejection and “Save choices.” Closing a page, browsing, pressing Escape or clicking outside the controls does not give permission for Clarity or RID. The site remains usable without that permission.

  • Google Analytics 4: Google receives traffic and device measurements to help us understand use of public marketing pages. GA4 is independent of the banner choice; accepting or rejecting optional tracking does not stop it. Our page-view configuration omits URL query strings and referrers, disables Google signals and advertising personalization, and denies advertising storage and advertising user-data consent. Analytics cookies can persist for up to 180 days under this installation. Google's server-side retention depends on the property configuration; changing banner choices does not delete already collected data.
  • Microsoft Clarity: Microsoft receives page content and interaction data such as clicks, scrolling and pointer movement for session replay and usability analysis. Masking reduces exposure but is not a guarantee that all sensitive content is removed. Do not enter sensitive information into public pages unnecessarily. Advertising storage is denied by this installation. Microsoft documents recording availability up to 30 days; provider retention and other uses are governed by its policies and project settings.
  • Recipient association (RID): Our collector uses the opaque token in a mailed URL to associate consented public-page visits and UTC timestamps with that mail piece's intended recipient. It does not prove who opened the link, identify a camera scan, or establish personal interests. When Clarity is also permitted and metadata is available, we may associate the visit with its native session recording. RID works without Clarity. A first-party session marker supports continuity for up to 30 minutes of inactivity; received RID events are retained for 180 days unless deleted sooner.

Choices are stored on this browser for 180 days, with a version and expiry, not a visitor ID or RID token. Unavailable, invalid or expired preferences keep Clarity and RID off; GA4 remains independent of those preferences. A non-identifying privacy-failure cookie may preserve denial when browser storage fails. Authentication and essential service storage are separate. The bottom banner disappears after a saved decision. Use the footer's “Your Privacy Choices / Do Not Sell or Share” to withdraw or re-grant Clarity or RID. Withdrawal revokes RID immediately, stops optional tools and may reload the page while preserving public-page GA4; it does not clear your login. It is not retroactive deletion. Contact us to request deletion.

We honor browser Global Privacy Control for Clarity recording and RID association on this device everywhere, not just in the United States. It keeps these two tools off and cannot be overridden by “Accept optional tracking.” GA4 remains on public marketing pages with advertising features disabled. Removing the signal does not automatically restore Clarity or RID; make a new explicit choice. This US-focused interface also applies to overseas visitors; it is not a legal compliance certification.

Collector configuration and installation diagnostics, if loaded, are separate from RID visit history; diagnostics do not create mailing-to-visitor continuity. Scripts may be blocked or unavailable, and consent does not guarantee complete measurement or recording availability.

Provider information: Google Privacy Policy and Microsoft Privacy Statement.

17. Children's Privacy

Services are for businesses/individuals 18+. We don't knowingly collect data from children under 13 and will delete it if discovered.

18. International Users

Services are operated from the U.S.; data is processed here regardless of where you access from.

19. Changes to This Policy

We'll post updates here with a new "Last updated" date; material changes affecting integration, payment, AI processing, or design data handling will be communicated directly to Platform clients.

20. Contact Us

Gorilla Works Marketing
Email: hello@gorillaworksmarketing.com