Privacy Policy | Limitless

Limitless Privacy Policy

Last updated September 14, 2026

This Privacy Policy explains how Limitless collects, uses, stores, protects, shares, retains, and deletes information through limitless.tech, the Limitless Ads Manager, related applications and advertising-platform integrations, and our managed advertising and consulting services (collectively, the "Services"). It applies across the advertising channels we support and includes additional disclosures about our use of Google Ads data and Google API Services.

1 Scope and Our Role

This Policy applies to information we process when you visit our websites, create or use a Limitless account, communicate with us, purchase or receive Services, or authorize Limitless to connect to an advertising platform such as Google Ads.

For website visitor, business contact, and account administration information, Limitless generally determines why and how the information is processed. When we process advertising account data on behalf of a customer, Limitless generally acts as the customer's service provider or processor, and the customer's agreement and instructions also govern our processing. If there is a conflict concerning customer-controlled advertising data, the applicable customer agreement controls to the extent permitted by law.

2 Information We Collect

Information you provide

Business and contact information, such as name, company, job title, email address, telephone number, and mailing address.
Account information, authentication details, user roles, communication preferences, and support requests.
Commercial and transaction information, such as Services purchased, contract details, invoices, payment status, and related correspondence. Payment card information may be handled directly by a payment provider rather than stored by Limitless.
Information and content you submit through the Services, including campaign instructions, product information, budgets, reports, and files.

Information collected through the Services

Device and usage information, such as IP address, browser type, operating system, pages or features viewed, timestamps, referring URLs, and diagnostic events.
Cookies and similar technologies used to operate the website, remember settings, measure performance, prevent abuse, and understand use of the Services.
Advertising platform data that a customer authorizes us to access, including account identifiers, campaign structures, creatives, budgets, settings, and performance reports.

Information from customers and third parties

Customers may provide information about their personnel, clients, brands, products, or advertising accounts. Advertising platforms and service providers may provide information when a customer connects an account or uses an integration. Customers are responsible for having the rights and permissions necessary to provide this information to Limitless.

3 Advertising Platform Integrations

At a customer's direction, Limitless may connect to advertising and commerce platforms such as Amazon Ads and Amazon Marketing Cloud, Walmart Connect, Target and Roundel, Meta Ads, TikTok Ads, Google Ads, LinkedIn Ads, Shopify, and other channels supported by the Services. Each connection is limited to the accounts and permissions authorized by the customer and is also subject to the applicable platform's terms and policies.

Advertising platform data we access

Depending on the platform and the features the customer enables, Limitless may access advertiser, business, seller, merchant, brand, and account identifiers; campaigns, portfolios, flights, line items, ad groups, ads, and creatives; product, catalog, and audience configuration; budgets, bids, pacing, targeting, placements, and settings; attribution, conversion, sales, and advertising performance reports; and status, error, and diagnostic information. We also process the OAuth tokens, API credentials, account identifiers, and connection metadata needed to operate authorized integrations.

How we use advertising platform data

Connect and authenticate the accounts selected by the customer.
Display, organize, combine, analyze, and report advertising and commerce performance within the Limitless Services.
Create, update, manage, and optimize campaigns, creatives, products, audiences, settings, bids, and budgets as requested or authorized by the customer.
Perform pacing, measurement, attribution, troubleshooting, quality assurance, and other customer-facing advertising management functions.
Maintain and secure integrations, diagnose errors, prevent fraud or abuse, and provide customer support.

Platform data restrictions

Limitless uses advertising platform data only to provide, secure, support, and improve the Services requested by the customer. We do not sell or rent platform data, provide it to data brokers or information resellers, or use one customer's platform data to operate unrelated advertising for another customer. We disclose platform data only to the customer and its authorized users, to service providers necessary to operate the Services under appropriate confidentiality and security obligations, when required by law, or as otherwise directed or expressly consented to by the customer.

Human access is limited to authorized Limitless personnel and contractors who need access to provide support, operate or secure the Services, investigate abuse or technical issues, comply with law, or carry out the customer's instructions. Access is controlled and monitored.

4 Google Ads and Google API Services

This section supplements the advertising-platform disclosures above when a customer authorizes Limitless to connect to Google Ads through Google's OAuth 2.0 authorization process and the Google Ads API. It is included to make Limitless's handling of Google user data explicit.

Google data we access

With the customer's authorization, Limitless accesses Google Ads account information, account and customer identifiers, campaigns, ad groups, ads and creatives, budgets, bidding and campaign settings, and advertising performance reports. We also receive and securely store OAuth access and refresh tokens needed to maintain the authorized connection. The Google Ads integration does not access Gmail, Google Drive, Google Sheets, Google Calendar, or other Google Workspace content.

How we use Google Ads data

Limitless uses Google Ads data to connect authorized accounts; display, analyze, and report performance; create, update, manage, and optimize campaigns, creatives, settings, and budgets; maintain and secure the integration; troubleshoot errors; and provide customer support. These uses are limited to customer-facing functionality requested or authorized by the customer.

Google data use and disclosure restrictions

Limitless uses Google Ads data only to provide, secure, support, and improve the customer-facing Services requested by the customer. We do not sell or rent Google Ads data, provide it to data brokers or information resellers, use it to determine creditworthiness or for lending, or use it for advertising unrelated to the customer's authorized campaigns. We do not transfer Google Ads data except to the customer and its authorized users, to service providers necessary to operate the Services under appropriate confidentiality and security obligations, when required by law, or as otherwise directed or expressly consented to by the customer.

Limitless's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

5 How We Use Information

Provide, administer, personalize, maintain, and support the Services.
Authenticate users, manage accounts and permissions, and maintain customer integrations.
Plan, execute, measure, report on, and optimize advertising services according to customer instructions.
Process transactions, invoices, and contractual obligations.
Respond to questions, support requests, and business communications.
Monitor availability and performance, debug errors, improve features, and develop customer-facing capabilities.
Protect the Services, customers, users, and others from fraud, abuse, security threats, and unlawful activity.
Comply with law, enforce agreements, establish or defend legal claims, and fulfill other purposes disclosed when information is collected or with consent.

6 How We Share Information

We may disclose information in the following circumstances:

To the customer that controls the relevant account and to users the customer authorizes.
To cloud hosting, security, analytics, payment, communications, professional, and other service providers that process information for us under contractual obligations appropriate to their role.
To advertising platforms when needed to perform actions requested by a customer or operate an authorized integration.
To professional advisers, auditors, insurers, regulators, courts, law enforcement, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate wrongdoing, or establish or defend legal claims.
In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of some or all of our business or assets, subject to appropriate protections and applicable Google requirements.
For another purpose disclosed at collection or with the appropriate consent or direction.

We may use and disclose aggregated or de-identified information that cannot reasonably identify an individual or customer, subject to applicable law and contractual restrictions. We do not sell personal information for money.

7 Security and Data Protection

Limitless uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, acquisition, use, alteration, disclosure, loss, or destruction. These safeguards include:

Transport Layer Security (TLS) encryption for data transmitted between users, Limitless, advertising platforms, and our supported systems.
Storage of advertising platform data in Google Cloud Platform, where customer content is encrypted at rest by default using Google-managed encryption mechanisms, including encryption of backup data.
Role-based, least-privilege access controls and multi-factor authentication for administrative access.
Security logging, monitoring, and periodic access reviews.
Access restrictions for employees and contractors based on job responsibility and confidentiality obligations.
Procedures to investigate and respond to suspected security incidents.

No system can be guaranteed to be completely secure. We assess and update safeguards based on the sensitivity of the information, the Services involved, and reasonably available security practices.

8 Data Retention and Deletion

We retain information for the periods described below, unless a different period is required by law or an applicable customer agreement:

Business, account, billing, support, security, and contract records are retained for as long as reasonably necessary to provide the Services, administer the relationship, comply with law, resolve disputes, and enforce agreements.
Because historical advertising performance is a core reporting feature, advertising-platform account, campaign, creative, product, budget, configuration, and performance reporting data is retained while Services are active and after Services end unless the customer requests deletion, an applicable customer agreement specifies deletion, or applicable law requires deletion. This applies to Google Ads and the other advertising platforms connected by a customer.
When a customer disconnects an advertising platform, revokes authorization, terminates the relevant integration, or terminates the Services, Limitless disables the connection and removes active OAuth access and refresh tokens or equivalent active API credentials from production systems immediately or within 24 hours. A platform may also invalidate credentials independently.
When Limitless receives and verifies a valid deletion request, we delete or de-identify the requested advertising-platform data from active systems unless retention is required by law, necessary to establish or defend legal claims, or permitted under the applicable customer agreement. Residual copies may remain temporarily in encrypted backups and security logs until overwritten or deleted through normal retention cycles; they are isolated from ordinary use.

A customer or authorized user may request access, correction, export, or deletion of information by emailing support@limitless.tech. We may verify the requester's identity and authority before acting. For Google specifically, a user may also revoke Limitless's authorization through the Google Account permissions page at https://myaccount.google.com/permissions. Revoking a platform connection stops future API access but does not by itself delete historical reporting data already stored by Limitless; a deletion request must also be submitted to Limitless.

9 Your Choices and Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or a copy of personal information; to object to or restrict certain processing; or to withdraw consent. You may also opt out of marketing communications by using the unsubscribe mechanism in the message or contacting us. Withdrawing consent does not affect processing already completed lawfully.

If Limitless processes information solely on behalf of a customer, we may direct the request to that customer or assist the customer in responding. We will not discriminate against a person for exercising an applicable privacy right.

10 Cookies and Similar Technologies

We may use essential cookies needed for website and account functions, preference cookies, and analytics technologies that help us understand and improve the Services. Browser settings can block or delete cookies, but doing so may prevent portions of the Services from functioning properly. Where required, we provide additional choices or obtain consent before using non-essential technologies.

11 Children

The Services are intended for business users who are at least 18 years old. They are not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support@limitless.tech so we can investigate and take appropriate action.

12 International Processing

Limitless is based in the United States. Information may be processed in the United States and other locations where our customers or service providers operate. Where required, we use contractual or other lawful safeguards for cross-border transfers.

13 Changes to This Policy

We may update this Policy to reflect changes to the Services, our practices, legal requirements, or third-party platform requirements. We will post the updated Policy on this page and change the last-updated date. If a change materially affects how we use Google user data or other personal information, we will provide additional notice and obtain consent when required before applying the new use.

14 Related Terms

Use of the Services is also subject to our Terms of Use and, where applicable, our Terms of Sale and customer agreements. This Privacy Policy governs our privacy and data-handling practices; the related terms govern access to, purchase of, and use of the Services.

15 Contact Us

Questions, privacy requests, and advertising-platform data deletion requests, including Google data deletion requests, may be sent to:

Limitless
430 2nd Street
Excelsior, Minnesota 55331
United States
support@limitless.tech
+1 (612) 444-6224

Business and contact information, such as name, company, job title, email address, telephone number, and mailing address.

Account information, authentication details, user roles, communication preferences, and support requests.

Commercial and transaction information, such as Services purchased, contract details, invoices, payment status, and related correspondence. Payment card information may be handled directly by a payment provider rather than stored by Limitless.

Information and content you submit through the Services, including campaign instructions, product information, budgets, reports, and files.

Information collected through the Services

Device and usage information, such as IP address, browser type, operating system, pages or features viewed, timestamps, referring URLs, and diagnostic events.

Cookies and similar technologies used to operate the website, remember settings, measure performance, prevent abuse, and understand use of the Services.

Advertising platform data that a customer authorizes us to access, including account identifiers, campaign structures, creatives, budgets, settings, and performance reports.

Connect and authenticate the accounts selected by the customer.

Display, organize, combine, analyze, and report advertising and commerce performance within the Limitless Services.

Create, update, manage, and optimize campaigns, creatives, products, audiences, settings, bids, and budgets as requested or authorized by the customer.

Perform pacing, measurement, attribution, troubleshooting, quality assurance, and other customer-facing advertising management functions.

Maintain and secure integrations, diagnose errors, prevent fraud or abuse, and provide customer support.

Provide, administer, personalize, maintain, and support the Services.

Authenticate users, manage accounts and permissions, and maintain customer integrations.

Plan, execute, measure, report on, and optimize advertising services according to customer instructions.

Process transactions, invoices, and contractual obligations.

Respond to questions, support requests, and business communications.

Monitor availability and performance, debug errors, improve features, and develop customer-facing capabilities.

Protect the Services, customers, users, and others from fraud, abuse, security threats, and unlawful activity.

Comply with law, enforce agreements, establish or defend legal claims, and fulfill other purposes disclosed when information is collected or with consent.

6 How We Share Information We may disclose information in the following circumstances:

To the customer that controls the relevant account and to users the customer authorizes.

To cloud hosting, security, analytics, payment, communications, professional, and other service providers that process information for us under contractual obligations appropriate to their role.

To advertising platforms when needed to perform actions requested by a customer or operate an authorized integration.

To professional advisers, auditors, insurers, regulators, courts, law enforcement, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate wrongdoing, or establish or defend legal claims.

In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of some or all of our business or assets, subject to appropriate protections and applicable Google requirements.

For another purpose disclosed at collection or with the appropriate consent or direction.

Transport Layer Security (TLS) encryption for data transmitted between users, Limitless, advertising platforms, and our supported systems.

Storage of advertising platform data in Google Cloud Platform, where customer content is encrypted at rest by default using Google-managed encryption mechanisms, including encryption of backup data.

Role-based, least-privilege access controls and multi-factor authentication for administrative access.

Security logging, monitoring, and periodic access reviews.

Access restrictions for employees and contractors based on job responsibility and confidentiality obligations.

Procedures to investigate and respond to suspected security incidents.

Business, account, billing, support, security, and contract records are retained for as long as reasonably necessary to provide the Services, administer the relationship, comply with law, resolve disputes, and enforce agreements.

6 How We Share Information

We may disclose information in the following circumstances: