Privacy Policy
Last updated: August 31, 2026
Ace & Momo LLC ("Ace," "we," "our," or "us") operates the Ace artificial-intelligence operations and business-intelligence platform to provide its services (the "Services"), which helps independent and family-owned businesses manage operations, analyze their data, and communicate with their customers. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Services. It governs the Services as well as any use of our marketing website and any related demonstration. By creating an account or using the Services, you agree to this Privacy Policy.
Our two roles. For information about you and your business account, we act as a controller / business. For the business content you upload and process through use of our Services — which may include personal information about your own customers, staff, or contacts — we act as a processor / service provider acting on your behalf and on your instructions, and our handling of that content is also governed by our Data Processing Addendum.
1. Notice at Collection (Summary)
We collect the categories of personal information described in the table below for the business purposes described in Section 3. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We retain personal information as described in Section 7. You have the rights described in Section 9. This Section is a summary; the full details follow.
2. Categories of Personal Information We Collect
In the twelve months before the "Last updated" date, we collect the following categories of personal information. Categories marked as processed "as processor" are contained in the business content you choose to upload and are handled on your behalf.
| Category (state-law) | What this includes for Ace | Collected? | Sources |
|---|---|---|---|
| Identifiers | Name, business name, email address, account/user ID, and online identifiers such as IP address and functional authentication cookies. | Yes | Directly from you; automatically from your use of the Services |
| Customer records (Cal. Civ. Code §1798.80) | Billing and contact details; payment information (processed by our payment processor) | Yes | Directly from you; payment processor |
| Commercial information | Subscription/plan, and transaction and billing history | Yes | From your account activity |
| Internet or network activity | Usage, log, and device data and feature-interaction data | Yes | Automatically from your use of the Services |
| Audio, visual, or electronic information | Images and media you upload for posting; content you generate through the Services | Yes | Directly from you |
| Professional or employment information | Only where contained in business content you upload (e.g., staff or hiring information) | Yes, if you provide it | From you (processed as processor) |
| Other business content | Menus, invoices, financial statements, vendor and operational documents — which may contain personal information about your customers, staff, or contacts | Yes, as processor | Directly from you |
| Inferences | The Services generate content and analyses at your request; we do not build consumer profiles about you | No | n/a |
| Sensitive personal information | Not intended (see Section 5). You must not upload government IDs, financial-account credentials, or health data unless expressly supported | No (not intended) | n/a |
3. How We Use Your Information (Business & Commercial Purposes)
We use the categories above for these business purposes: to operate our platform and provide the Services; to generate content and analyses on your behalf using artificial intelligence; to publish content to the accounts you connect and authorize; to authenticate you and protect and secure your account; to process payments through our third-party processor; to provide customer and technical support; to communicate with you about the service; to detect and prevent fraud, abuse, and security incidents; to comply with legal obligations; and to maintain, debug, and improve the Services. We may use aggregated and de-identified information — which does not identify you or any individual and which we will maintain in de-identified form and not attempt to re-identify — for any of these purposes. We do not use personal information for cross-context behavioral advertising or to build advertising profiles.
4. Categories of Third Parties and Recipients
We disclose personal information for business purposes to the following categories of recipients: our service providers and sub-processors (listed in Section 6); the third-party platforms you connect and direct us to publish to or read from (for example, Meta and Google); professional advisors (such as lawyers, accountants, and auditors); a successor entity in connection with a merger, acquisition, or sale of assets; and governmental authorities or others where required by law or to protect rights, users, or the public. We have not sold personal information or shared it for cross-context behavioral advertising, and we do not do so.
5. Sensitive Personal Information
Our Services are not intended for the collection or processing sensitive personal information (such as government identification numbers, financial-account or payment-card credentials, precise geolocation, or biometric, genetic, or health data). You should not upload such information unless a feature expressly supports it. We do not use or disclose any sensitive personal information for purposes beyond those permitted under applicable law, and accordingly the right to limit the use of sensitive personal information does not materially apply; if that changes, we will update this Policy and provide any required "Limit the Use of My Sensitive Personal Information" mechanism.
6. Service Providers and Sub-Processors
We use trusted third-party service providers to offer our Services. They process information only as needed to perform services for us and are bound by confidentiality and data-protection obligations. A current list is available on request at the contact address below.
| Provider | Function |
|---|---|
| Anthropic and other AI providers | AI content generation and analysis |
| Supabase | Database storage and authentication |
| Railway | Backend hosting |
| Vercel | Frontend hosting |
| Cloudinary | Image processing and hosting |
| Meta (Facebook / Instagram) | Publishing to connected accounts, at your direction |
| QuickBooks | Financial Data |
| Calendar and Drive integrations, at your direction | |
| Postmark | Email parsing for the inquiry-forwarding feature, at your direction |
| Stripe | Payment Processing |
A core feature of the Services is publishing content on your behalf to Connected Accounts you authorize — currently Facebook and Instagram (Meta) — through each platform's own authorization (OAuth) flow. We access only the permissions you explicitly grant and use them solely to publish the content you request. Separately, if you choose to share a Google Calendar or a Google Drive folder with Ace's dedicated service account (the same way you'd share it with an employee), we read the calendar events or files you've shared to power the related feature (for example, calendar-aware post recommendations or your knowledge-base folder) — we do not publish, edit, or otherwise write to your Calendar or Drive. If you choose to forward event-inquiry emails to an address we provide, we read those messages to power the inquiry-reply feature; we do not connect to or access your email account directly. We do not currently connect to or use Google Business Profile in any way. We do not sell, share, or use social-media, business-listing, or email data for advertising. Our use and transfer of information received through Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and our use of Meta platform data complies with Meta's Platform Terms and Developer Policies. When we publish to a connected platform at your direction, that platform independently processes the content under its own privacy policy and terms. You may disconnect an integration or revoke Calendar/Drive sharing at any time.
7. Data Retention
We keep personal information only for as long as necessary for the purposes described in this Policy, then delete or de-identify it, subject to legal retention obligations. The following criteria and periods apply:
| Data type | Retention period or criteria |
|---|---|
| Account information | For the life of your account and 24 months after closure, then deleted, subject to legal holds |
| Billing and payment records | As required by tax and accounting law, typically 7 years |
| Business content you upload (processed as processor) | While your account is active; deleted or returned on request or within a reasonable period after account closure, per the Data Processing Addendum |
| Generated content | While your account is active, unless you delete it sooner |
| Images uploaded for posting | Temporarily; deleted after the posting purpose is fulfilled |
| Integration / connected-account data | Until you disconnect the integration or close your account |
| Usage and log data | 24 months for security and improvement, then aggregated or deleted |
| Backups | Daily backups are retained for 7 days and then overwritten. Backups are performed by Supabase |
8. Data Storage and Security
Your data is stored in our cloud database, and account credentials and your data are encrypted both in transit and at rest using industry-standard encryption. We maintain administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
9. Your Privacy Rights
Depending on where you live, you may have the right to: confirm whether we process your personal information and access it; obtain a portable copy; correct inaccuracies; delete it; and, where applicable, opt out of targeted advertising, sale, or certain profiling (none of which we conduct). You also have the right to appeal a denial of a request.
How to submit a request. Submit a request via our Legal Inquiry page. We will verify your identity using information associated with your account before responding, and we will respond within the time required by applicable law (generally 45 days, extendable as permitted). An authorized agent may submit a request on your behalf with proof of authorization and verification of your identity. We will not discriminate against you for exercising your rights.
If your personal information appears in business content that another Ace customer uploaded, we act as that customer's processor/service provider and will refer your request to that customer, who is the controller/business responsible for responding.
10. Automated Decision-Making and Profiling
The Services use artificial intelligence to generate content and analyses in response to the information and prompts you submit. You direct and review this activity, and it is not used to make decisions that produce legal or similarly significant effects about you. We do not engage in automated decision-making or profiling of the kind that would trigger opt-out or access rights under applicable state law. You remain responsible for reviewing AI-generated output before relying on, distributing, or publishing it; such output may be inaccurate or incomplete.
11. Your Responsibilities for Uploaded Content
You are responsible for the information you upload and for ensuring you have the rights and permissions necessary to provide it, including any notices to or consents from the individuals whose information it contains. We may remove content or suspend access if we believe content violates our terms, our acceptable use policy, or applicable law.
12. Children's Privacy
The Services are intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy with a revised "Last updated" date and, where appropriate, provide additional notice.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
Ace & Momo LLC
Pflugerville, Texas
our Legal Inquiry page