ActiveCampaign

The reviewed policy does not provide a clear product-wide no-AI-training promise for marketing and behavioral data.

ActiveCampaign is built to understand customer interactions and customize communications based on interests.

ActiveCampaign documents privacy rights and platform data handling for clients and prospective clients.

Google-linked data is said to be processed under Google's limited-use requirements when customers connect those features.

Customers still choose what campaign, site, and integration data they send into the platform.

Marketing data may still be shared with affiliates, vendors, service providers, analytics partners, and legal recipients.

Site tracking, chatbot use, and third-party integrations can widen the disclosure surface beyond email sends alone.

ActiveCampaign documents disclosure, transfer, retention, and jurisdiction-specific privacy rights.

Customers choose whether to connect outside email, ecommerce, or other integration partners.

Google-connected data transfer is described as limited to user-facing features, legal compliance, or corporate events.

The platform is designed to measure customer interactions with messages and content for marketing automation.

ActiveCampaign uses cookies, web beacons, session replay, Google Analytics, and interest-based advertising technologies.

Customers can manage contact lists, opt-outs, and marketing preferences.

The policy includes links to cookie controls and interest-based advertising opt-out programs.

ActiveCampaign describes cookies, web beacons, and session replay instead of hiding the mechanics.

Marketing contact retention still depends on customer configuration, compliance, and suppression requirements.

Integrations, synced inbox data, and legal obligations can preserve records longer than a user expects.

ActiveCampaign includes a dedicated retaining-your-information section.

Connected Google data can be deleted through the account or by contacting privacy@activecampaign.com.

Customers can manage contacts, suppression, and deletion workflows within their own account setup.

Recipient privacy still depends heavily on how the customer configures consent, tracking, and automation.

Some privacy outcomes still rely on support or account-owner action rather than self-serve end-user controls.

Customers can manage contacts, automations, suppression lists, exports, and deletion workflows.

The policy points users to cookie controls and external ad-choice programs.

Google-connected data can be disconnected and deleted through the account or by contacting privacy support.

Recipient opt-outs and preference handling are built into the platform model.