Legal

Privacy Policy

Effective as of: February 16th, 2026

1. Introduction

This Privacy Policy outlines the types of personal information that is received and collected by Newform, Inc. (“Newform,” “we,” or “us”) and how it is used. Newform offers an advertising management and business intelligence platform through which businesses (“Customers” or “you”) can manage advertising campaigns, access analytics, and use marketing tools across multiple platforms (collectively, the “Services”).

By using our Services, visiting our website at newform.com (the “Website”), or otherwise interacting with us, you agree to the collection and use of information in accordance with this policy.

2. Google API Disclosure

Limited Use Compliance Statement

Newform's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google APIs to develop, improve, or train generalized AI and/or machine learning models.

3. Data Collection

We collect information that your browser sends whenever you visit our Website or use our Services. This data may include your IP address, browser type, pages visited, time and date of visit, and other diagnostic data.

Information You Provide to Us

  • Create an account or register for our Services
  • Connect third-party advertising or social media accounts
  • Request a demo, contact sales, or submit forms on our Website
  • Subscribe to emails, newsletters, or attend events
  • Provide payment or billing information

This information may include: name, email address, company name, job title, phone number, billing details, and the content of your requests.

Facebook Platform Data

  • Your Facebook public profile information (name, profile picture)
  • Your Facebook email address
  • Facebook Pages you manage
  • Facebook advertising account information
  • Facebook ad performance metrics and analytics
  • Facebook Business Manager assets you have access to

Instagram Platform Data

  • Your Instagram Business or Creator account information
  • Instagram ad performance metrics and analytics
  • Instagram audience insights

Threads Platform Data

  • Your Threads account ID (threads_user_id)
  • Your Instagram Business account information (linked to Threads)

We do not access or collect your Threads posts, messages, or other content beyond the basic account information necessary for our service functionality.

TikTok Platform Data

  • Your TikTok advertising account information
  • TikTok ad performance metrics and analytics
  • TikTok audience and campaign data
  • TikTok Business Center assets you have access to

4. Google API Data Access

YouTube API Access

  • youtube.upload: Allows uploading and managing your YouTube videos
  • youtube.readonly: Allows viewing your YouTube channel information, videos, and analytics data

Google Drive API Access

  • drive.readonly: Viewing and downloading your Google Drive files
  • drive.file: Creating, reading, updating, and deleting files our app created or you opened

Google Sheets API Access

  • spreadsheets.currentonly: Access to the currently open spreadsheet

Google Profile & Apps Script

  • userinfo.email. Primary email address
  • userinfo.profile. Basic profile information
  • openid. Authentication and identification
  • script.container.ui. Custom UIs in Google Sheets
  • script.external_request. External API requests from our Sheets add-on

5. Google API Data Handling Practices

Google Workspace API Limited Use Requirements

The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Usage Limitations

  • We limit use of Google Workspace data to providing or improving our advertising management services
  • We do not transfer, sell, or use user data for serving ads, including retargeting
  • We do not use user data to determine credit-worthiness or for lending purposes
  • We do not create, train, or improve machine learning or AI models

Data Transfer Restrictions

  • We do not transfer user data to advertising platforms, data brokers, or information resellers
  • Data transfers are limited to providing or improving our service features with user consent
  • We may transfer data for security purposes or to comply with applicable laws

No AI/ML Training: We do not use Google user data to develop, improve, or train generalized AI and/or machine learning models.

6. YouTube API Integration

When you connect your YouTube account to Newform, we use Google's OAuth 2.0 to access your YouTube data. Your authentication tokens are stored securely and encrypted. You can revoke YouTube access at any time through your Google Account permissions. We do not use YouTube data to train AI or machine learning models.

7. Threads API Integration

When you connect your Threads account to Newform, we access only your account ID and link it with your Instagram Business account. We do not access, read, or collect your Threads posts, messages, or any other content. You can revoke Threads access at any time through your Meta account settings.

8. Data Processing Locations

We store and process data in the United States and the European Economic Area (EEA). When transferring data outside the EEA, we ensure appropriate safeguards through standard contractual clauses and adequacy decisions.

9. Third-Party Platforms

When you connect your Newform account with third-party platforms, their privacy policies also apply:

10. Data Usage

  • To provide, maintain, and improve our Services
  • To manage your advertising campaigns across connected platforms
  • To provide analytics, reporting, and performance insights
  • To notify you about changes to our Services
  • To provide customer support
  • To detect, prevent, and address technical issues and security threats
  • To develop anonymized statistics and insights about digital advertising trends
  • To verify your identity and establish your account
  • To send you updates, newsletters, and marketing communications (where you have opted in)
  • To comply with legal obligations

11. Data Sharing and Disclosure

We may disclose your personal data to:

  • Our staff, contractors, and service providers
  • Business partners, agents, and technology vendors
  • Payment processors and financial institutions
  • Professional advisers (legal, accounting, or compliance)
  • Government authorities where required by law
  • Prospective purchasers or acquirers in the event of a business sale or merger

We do not sell personal information. When information is aggregated or de-identified, we may share it without restriction.

12. Cookies and Tracking Technologies

Our Website and Services use cookies and similar tracking technologies to enhance user experience and analyze site performance. Your browser may allow you to restrict or disable cookies. You may visit the Network Advertising Initiative or Digital Advertising Alliance to opt out of tailored advertising.

13. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Right of access. Request a copy of personal data we hold about you
  • Right to rectification. Request correction of inaccurate or incomplete data
  • Right to erasure. Ask us to delete your personal data (“right to be forgotten”)
  • Right to restrict processing. Request we stop processing your data
  • Right to data portability. Request your data in a machine-readable format
  • Right to object. Object to processing for direct marketing or legitimate interests
  • Right to withdraw consent. Withdraw consent to processing at any time
  • Right to lodge a complaint. File a complaint with a data protection authority

To exercise these rights, contact us at alec@newform.com. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. We do not sell personal information.

Revoking Platform Access

  • Google/YouTube: Through your Google Account permissions
  • Meta (Facebook/Instagram/Threads): Through your Meta account settings
  • TikTok: Through your TikTok account settings

14. Data Retention

Account Data

Retained while your account is active. Deleted or anonymized within 30 days of a deletion request, except where required by law.

Platform Tokens and Credentials

Authentication tokens are revoked and deleted when you disconnect a platform or delete your account.

Campaign and Analytics Data

Retained for the duration of your account and a reasonable period afterward. Aggregated and anonymized analytics may be retained indefinitely.

Legal and Compliance

We may retain certain data beyond standard periods where required by law or to resolve disputes.

15. Security

  • All data encrypted at rest and in transit (AES-256)
  • Authentication tokens and API keys encrypted and stored securely
  • Secure SSL/TLS connections for all data transfers
  • Authentication handled via OAuth 2.0 with supported platforms
  • Access to your data strictly limited to authorized personnel
  • Regular security reviews and infrastructure monitoring

While we implement robust security measures, no method of transmission over the Internet is 100% secure.

16. Children

The Services are not intended for use by minors under the age of 16. We do not knowingly collect personal information from individuals under 16. If we become aware of such collection, we will delete that information promptly.

17. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. Changes will be effective immediately after being posted on this page. Your continued use of the Services constitutes acknowledgment of and consent to the modified policy.

18. Contact Us

If you have any questions or wish to exercise your data protection rights, please contact us:

Email: alec@newform.com

Newform, Inc.
9939 Nethy Bridge Ct
Bristow, VA 20136

Last updated: February 2026