Made in Graphic Ltd — Privacy Policy
Made in Graphic Ltd — Privacy Policy
This Privacy Policy describes how Made in Graphic Ltd collects, uses, and protects your personal data across all our products, including AmbientAI (YouTube automation), SmartReply (AI WhatsApp customer support), BlogAI (AI blog content delivery), and Review Radar (AI replies for Google Business Profile reviews).
To provide and improve our services, manage your account, process payments, send service notifications, and respond to support requests. We never sell your data to third parties.
AmbientAI uses Google OAuth 2.0 to connect your YouTube channel. We request only the scopes necessary to upload approved videos on your behalf. Your Google account credentials and YouTube data are used solely to deliver the AmbientAI service. We do not use your YouTube data for advertising or to train AI models. OAuth tokens are encrypted at rest and never shared with third parties.
AmbientAI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
SmartReply connects to your WhatsApp Business account to receive and respond to customer messages. Conversation data is processed to generate AI responses and is not used for any purpose beyond delivering the SmartReply service. Customer conversation data is not shared with third parties.
Review Radar uses Google OAuth 2.0 to connect to your Google Business Profile. We request only the scopes strictly necessary to read reviews on your Business Profile and to post replies that you have explicitly approved. Specifically, we use the https://www.googleapis.com/auth/business.manage scope.
Data we read from Google APIs (review text, reviewer display name, star rating, review timestamp and the location identifier of your Business Profile) is used solely to: (1) generate an AI-drafted reply, (2) deliver that draft to you for approval by email, and (3) post the approved reply back to your Google Business Profile. Drafts that are not approved are deleted after 30 days. Reviewer display names are never shared with third parties beyond what Google itself already publishes on your Business Profile.
We do not use Google user data for advertising, do not sell or transfer Google user data to third parties, do not use Google user data for personalised advertising, and do not use Google user data to develop, improve, or train generalised AI/ML models. Reviewer text is sent to our AI provider (OpenAI / Anthropic) only at the moment a reply draft is generated, in accordance with their data processing agreements, and is not retained beyond the operational need.
Review Radar's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. OAuth tokens are encrypted at rest. You can revoke Review Radar's access at any time from your Google Account permissions page.
BlogAI generates SEO-optimised blog articles based on topic configuration you provide and delivers them by email or, where you grant access, by direct publishing to your CMS. We process the topic prompts you submit, the generated article content, your delivery email and any CMS API credentials you provide. CMS credentials are encrypted at rest and used only to publish articles you approve. Your prompts and generated content are not used to train AI models.
When you opt in to receive marketing emails from Made in Graphic Ltd (for example, through our SmartReply ROI Calculator, BlogAI invite, or product newsletters), we collect:
Legal basis: Consent (GDPR Article 6(1)(a)). We use a double opt-in flow: you must click a confirmation link in your email before we send any further messages.
All marketing emails include a visible unsubscribe link in the footer and a one-click unsubscribe header (RFC 8058) that Gmail and Outlook use to show a native unsubscribe button. You can also email unsubscribe@madeingraphic.co.uk to opt out.
Marketing email delivery is processed by Resend.com and bot protection by Cloudflare Turnstile (both listed in Third-Party Processors below).
Unsubscribed records are retained on a suppression list for up to 3 years to honour your opt-out. For full deletion, contact info@madeingraphic.co.uk.
Each processor operates under their own data processing agreements and applicable data protection law.
Account data is retained while your account is active. Upon account deletion, personal data is removed within 30 days. For Review Radar specifically: review drafts that are not approved are deleted after 30 days; OAuth tokens are deleted immediately upon account cancellation or revocation; you can request earlier deletion at any time. Billing records may be retained for up to 7 years for legal compliance. Marketing email subscribers who unsubscribe are kept on a suppression list for up to 3 years, then deleted; full deletion on request at any time.
You have the right to access, correct, or delete your personal data, restrict or object to processing, and request data portability. To exercise your rights, contact us at info@madeingraphic.co.uk. For Google integrations (AmbientAI, Review Radar) you can also revoke access directly from your Google Account permissions page.
We use essential session cookies to keep you logged in. We use localStorage to remember your language preference. We do not use advertising cookies, tracking pixels, or analytics cookies.
All data is transmitted over HTTPS. Passwords are hashed. OAuth tokens are encrypted at rest. We follow industry-standard security practices to protect your data.
Made in Graphic Ltd · Company No: 13094248 · info@madeingraphic.co.uk · join.madeingraphic.co.uk