MMM Pilot™

Privacy Policy

Last Updated: 2026-03-01

1. Introduction

Can Go Digital L.P. (hereinafter “Company”, “we”, “MMM Pilot”), located at 2 Charokopou st., Kallithea 17671, Greece, VAT ID 802840569, and General Commercial Registry (GEMI) No. 183745503000, is committed to protecting the privacy and data of MMM Pilot™ users.

This Privacy Policy describes how we collect, use, and safeguard your data when you use our B2B SaaS Marketing Mix Modeling service.

2. GDPR Roles

Under the General Data Protection Regulation (GDPR):

  • We act as Data Controllers for your account information (e.g., registration email, billing details).
  • We act as Data Processors for the business data (Project Data) you upload to the platform for analysis.

3. Data We Collect

A. Account & Usage Data

  • Identity: Name, email address, company name, role.
  • Financial Data: Transaction history and receipts. Note: We do not store full credit card numbers on our servers. Payment processing is handled exclusively by our Merchant of Record.
  • Usage Data: Information on how you interact with the platform (logs, clicks, session duration), IP address, and browser type.

B. Project Data

To execute Marketing Mix Models (MMM), you provide business data either by uploading files (CSVs) or by connecting data sources via our integrations (e.g., Google Analytics 4, Google Ads). This data typically contains:

  • Historical marketing spend data.
  • Performance metrics (Impressions, Clicks).
  • Business outcomes (Revenue, Conversions).

Commitment: We process this data solely for the purpose of generating analyses for your specific account.

4. Purpose of Processing & AI Usage

We use your data to:

  • Provide the Service: Execute MMM algorithms and visualize results.
  • Manage Payments: Process charges and issue invoices via our Merchant of Record.
  • Improve the Service: Analyze errors and optimize user experience (via Google Analytics).
  • Artificial Intelligence (AI) Features: The platform uses AI to automatically select, interpret, and optimize models.

Key AI commitments:

  • Transparency: Your Project Data is sent to the AI model for real-time processing.
  • No Training: Can Go Digital L.P. does not use your proprietary data to train public AI models.

5. Data Sharing & Sub-processors

To provide our service, we partner with trusted third-party providers.

A. Merchant of Record (Payments)

Lemon Squeezy (Lemon Squeezy, LLC) acts as our Merchant of Record.

  • When you make a purchase, your payment data is processed directly by Lemon Squeezy.
  • They are responsible for tax collection (VAT/Sales Tax) and compliance.
  • We only retain transaction metadata (e.g., plan type, date) and do not have access to your full payment credentials.

B. Infrastructure & Service Providers

These partners are essential for the operation of MMM Pilot (e.g., cloud hosting, database, compute infrastructure).

C. Analytics & Marketing Partners

We use these tools to understand platform usage and market our services (e.g., Google Analytics).

6. International Data Transfers

Some of our partners (e.g., Google, Lemon Squeezy, our cloud database provider, Lovable) may process data in the United States. These transfers are legally covered by the EU-US Data Privacy Framework (to which the aforementioned providers are certified) and/or Standard Contractual Clauses (SCCs) that guarantee the security of your data.

7. Data Security

We implement appropriate technical and organisational measures to protect Google user data against unauthorised access, loss, or disclosure. Specifically:

  • Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
  • Encryption at rest: Data stored in our databases is encrypted at rest by our cloud infrastructure provider.
  • Access controls: Access to personal data is restricted to authorised personnel and systems on a need-to-know basis.
  • Third-party security: Our sub-processors (see Section 5) are contractually required to maintain equivalent security standards.

8. Data Retention & Deletion

Retention

  • Account & Usage Data is retained for as long as your account is active, and for up to 12 months after account closure, unless a longer retention period is required by law.
  • Project Data (uploaded CSVs and derived analysis results) is retained for as long as you maintain the corresponding project in the platform. When you delete a project, the associated data is permanently deleted from our systems within 30 days.
  • Google User Data obtained via OAuth (e.g., your Google Analytics and Google Ads account information used to connect your data sources) is retained only for as long as the OAuth connection remains active. Revoking access via your Google Account Permissions page will result in the deletion of this data within 30 days.

Deletion

You may request the deletion of your personal data at any time by:

  1. Deleting your account directly within the MMM Pilot platform, or
  2. Sending a deletion request to privacy@mmmpilot.com.

Upon receiving a verified deletion request, we will permanently delete your personal data within 30 days, except where retention is required by applicable law.

9. Your Rights

You have the right to access, rectify, erase (“right to be forgotten”), restrict processing, and request portability of your data.

You can exercise your rights by sending an email to:
privacy@mmmpilot.com