UTM Fox LLC ("UTMFOX," "we," "us," or "our") respects your privacy and is committed to being transparent about how information is collected, used, stored, and disclosed.
This Privacy Policy explains the privacy practices applicable to UTMFOX.com, app.utmfox.com, and the software, applications, integrations, APIs, analytics features, attribution tools, redirect tools, and other services provided by UTMFOX, collectively referred to as the "Service."
By accessing or using the Service, you acknowledge the practices described in this Privacy Policy.
This Privacy Policy should be read together with the UTMFOX Terms of Service.
UTMFOX is a business-to-business software platform that helps businesses and teams create, standardize, manage, govern, analyze, and deploy UTM-tagged URLs, campaign links, vanity URLs, and redirects.
For information UTMFOX collects directly for its own business purposes, such as account information, website analytics, billing information, and support communications, UTMFOX generally determines how and why that information is processed.
When UTMFOX processes information through the Service on behalf of a Customer, UTMFOX may act as a service provider or processor and process that information according to the Customer's instructions, applicable agreements, and applicable law.
The information we collect depends on how you interact with UTMFOX, the features you use, and the integrations you enable.
When you create or use a UTMFOX account, we may collect:
When you subscribe to a paid UTMFOX plan, we or our payment processing providers may collect information necessary to process payment, such as:
UTMFOX does not intend to directly store full payment card numbers when payments are processed by a third-party payment processor.
When you use the Service, we may process information associated with the campaigns, URLs, and UTMs you create, including:
This information is generally business or campaign information rather than information intentionally collected about individual consumers.
If a Customer chooses to connect a Google Analytics 4 property to UTMFOX, the Customer may authorize UTMFOX through Google's OAuth authorization process to access reporting information from that Customer's Google Analytics property.
UTMFOX uses this access only to provide customer-facing analytics and attribution functionality described in this Privacy Policy, including the UTMFOX Attribution Drift Dashboard.
Additional details regarding this integration are provided in Section 9, "Customer-Authorized Google Analytics 4 OAuth Access."
When you connect a Cloudflare account or authorize UTMFOX to interact with Cloudflare, we may receive or process information necessary to provide the integration.
This may include:
UTMFOX may receive credentials, authorization tokens, API tokens, or similar authentication information necessary to maintain an integration.
We use such credentials to provide the requested integration and do not consider authentication credentials to be Customer campaign content.
When you access the Service, we may automatically collect technical information such as:
We may collect information about how users interact with UTMFOX, including:
If you contact us, we may collect:
Please avoid sending sensitive personal information through support requests unless it is necessary for us to assist you.
UTMFOX is not designed as a customer relationship management system, consumer database, or system for storing large quantities of personally identifiable consumer information.
However, personal information may occasionally appear incidentally in:
Customers should avoid placing sensitive personal information, passwords, financial information, health information, government identification numbers, or other highly sensitive information into UTM parameters or URLs.
Customers are responsible for ensuring that their use of UTMFOX complies with applicable privacy laws and their own privacy obligations.
We may use information collected through UTMFOX to:
We may use information to:
We may use information to:
Customer-authorized Google Analytics data obtained through Google OAuth is subject to the additional restrictions described in Section 9 and is not treated as general UTMFOX product-usage data.
We may use information to:
We may use information to:
We may use information to:
We may use account information to send:
Where required by law, marketing communications will include an appropriate method to unsubscribe.
We may process information when reasonably necessary to:
UTMFOX may develop or use artificial intelligence, machine learning, automated systems, or similar technologies to provide or improve Service functionality.
Information used for these purposes may include:
Where reasonably practical, UTMFOX may aggregate or de-identify information before using it to develop or improve automated systems.
UTMFOX does not use passwords, payment card information, Cloudflare API secrets, private authentication tokens, OAuth credentials, or similar credentials to train artificial intelligence models.
Google Analytics data obtained from a Customer through Google OAuth authorization is not used to train generalized artificial intelligence or machine-learning models.
Customer-authorized Google Analytics data is used only to provide or improve the customer-facing functionality for which the Customer granted access, including attribution reporting and the Attribution Drift Dashboard, and for other uses permitted by applicable Google API policies.
UTMFOX may use third-party artificial intelligence providers to provide particular Service features. Information received through Google OAuth will not be transferred to an artificial intelligence provider for unrelated model training, advertising, profiling, or other purposes inconsistent with the Customer's authorization.
UTMFOX will not intentionally make confidential Customer campaign data publicly available through artificial intelligence systems.
Except where additional restrictions apply to information obtained through third-party APIs such as Google APIs, we may create aggregated or de-identified information from information collected through the Service.
We may use eligible aggregated or de-identified information for:
Where information is maintained as de-identified information, UTMFOX will not intentionally attempt to re-identify it except where reasonably necessary to test de-identification methods, protect security, or as otherwise permitted by law.
Information obtained through Google APIs remains subject to applicable Google API policies even when aggregated, anonymized, or derived from the original information.
UTMFOX may use cookies, local storage, pixels, SDKs, and similar technologies.
These technologies may be used for:
Some cookies or similar technologies may be placed by third-party service providers such as analytics or infrastructure providers.
Where applicable law requires consent before certain cookies or technologies are used, UTMFOX may provide a consent or preference mechanism.
Users may also be able to control cookies through their browser settings, although disabling certain cookies may prevent portions of the Service from functioning properly.
UTMFOX may use analytics services, including Google Analytics 4, to understand how visitors and users interact with UTMFOX's own websites and application.
This use is separate from a Customer choosing to connect the Customer's own Google Analytics property to UTMFOX.
Analytics used by UTMFOX for its own website or application may provide information such as:
This information may be used to understand Service usage, diagnose problems, improve functionality, measure marketing performance, and operate UTMFOX.
UTMFOX offers an optional attribution integration that allows a Customer to connect the Customer's own Google Analytics 4 ("GA4") property to UTMFOX.
This integration is separate from analytics that UTMFOX may use on its own website or application.
UTMFOX does not access a Customer's GA4 property unless an authorized Customer user affirmatively chooses to connect Google Analytics and completes Google's OAuth authorization process.
The Customer controls whether to enable this integration.
For the attribution integration, UTMFOX requests read-only Google Analytics access using the OAuth scope:
https://www.googleapis.com/auth/analytics.readonly
This permission allows UTMFOX to read Google Analytics reporting data available to the authorized Customer account.
UTMFOX does not use this scope to edit the Customer's GA4 property, change analytics settings, modify events, delete analytics information, manage users, or make other changes to the Customer's Google Analytics account.
UTMFOX accesses the Customer's GA4 reporting data to provide customer-facing attribution functionality.
Specifically, UTMFOX uses GA4 reporting data to compare traffic recorded in Google Analytics against campaigns and UTM-tagged links issued or managed through UTMFOX.
This allows UTMFOX to provide features such as the Attribution Drift Dashboard, which is designed to help Customers identify issues including:
UTMFOX accesses GA4 information only for providing or improving these customer-facing analytics and attribution features and for related security or support purposes permitted by applicable policy and law.
UTMFOX requests only the Google Analytics reporting information reasonably necessary to provide the connected attribution features.
This may include aggregated reporting information associated with:
UTMFOX does not intentionally use this integration to retrieve or build profiles containing raw user-level browsing histories or personally identifiable profiles of individual website visitors.
UTMFOX stores only the information reasonably necessary to provide the attribution functionality and historical reporting associated with the Customer's UTMFOX account.
UTMFOX stores session and campaign-level aggregate information derived from the authorized GA4 property.
UTMFOX does not intentionally store raw user-level Google Analytics event streams for this feature.
UTMFOX may also securely store OAuth authorization information, including access or refresh tokens, as necessary to maintain the Customer-authorized connection to Google Analytics.
OAuth tokens and credentials are treated as authentication information and are not used for analytics, advertising, artificial-intelligence training, or unrelated purposes.
Aggregated GA4 session and campaign information may be retained for the duration of the Customer's active UTMFOX account so that UTMFOX can provide historical attribution reporting and comparisons.
A Customer may request deletion of stored information associated with its account, subject to applicable legal, security, backup, and legitimate recordkeeping requirements.
If a Customer closes or deletes its UTMFOX account, GA4-derived information associated with that account will be deleted or de-identified in accordance with UTMFOX's general data-retention procedures described in this Privacy Policy.
Temporary backup copies may remain for a limited period as part of routine backup and disaster-recovery processes before being overwritten or deleted.
Connecting Google Analytics is optional.
A Customer may disconnect its Google Analytics integration at any time using the Disconnect control provided within the UTMFOX application.
After the Customer disconnects the integration:
Disconnecting Google Analytics does not delete or modify information stored within the Customer's Google Analytics property.
UTMFOX does not sell Customer-authorized Google Analytics data.
UTMFOX does not transfer Customer-authorized Google Analytics data to data brokers.
UTMFOX does not use Customer-authorized Google Analytics data for:
UTMFOX may permit service providers or infrastructure providers to process Google Analytics information only where reasonably necessary to operate, secure, maintain, or provide the authorized UTMFOX functionality and subject to appropriate contractual and security requirements.
Information may also be disclosed when required by applicable law or when reasonably necessary to investigate security incidents or abuse.
UTMFOX's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.
UTMFOX limits its use of Google Analytics information obtained through OAuth to the purposes disclosed in this Privacy Policy and the customer-facing functionality for which the Customer authorized access.
If UTMFOX materially changes how it accesses, uses, stores, or shares Customer-authorized Google Analytics information, UTMFOX will update this Privacy Policy and obtain additional authorization or consent where required before using the information for the new purpose.
UTMFOX may use Cloudflare for infrastructure, security, domain-related functionality, analytics, or other technical services.
Customers may also connect their own Cloudflare accounts to UTMFOX.
When a Customer connects Cloudflare, UTMFOX may communicate with Cloudflare APIs to create, retrieve, modify, or manage resources authorized by the Customer.
Information transmitted to or received from Cloudflare is subject to Cloudflare's applicable agreements and privacy practices.
UTMFOX does not control Cloudflare's independent processing of information.
Customers may disconnect a Cloudflare integration through functionality provided by UTMFOX where available or by modifying the applicable authorization within Cloudflare.
We may disclose information in the circumstances described below.
We may provide information to vendors that help us operate UTMFOX, such as providers of:
We provide these providers information only as reasonably necessary for their services.
Customer-authorized Google Analytics data is subject to the additional restrictions described in Section 9 and will not be provided to service providers for uses unrelated to providing, securing, or maintaining the authorized UTMFOX functionality.
If your account belongs to an Organization, account administrators may be able to access information associated with your account and use of the Service.
This may include:
When a Customer enables an integration, we may send information to or receive information from the connected service as necessary to perform the integration.
We may disclose information when we reasonably believe disclosure is required to:
If UTMFOX is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, information may be disclosed or transferred as part of that transaction, subject to applicable legal and contractual restrictions.
Any successor receiving personal information will be subject to applicable privacy obligations.
UTMFOX does not currently sell personal information for monetary consideration.
UTMFOX also does not currently operate a business model based on selling Customer personal information, campaign information, Customer-authorized Google Analytics information, or individual browsing profiles to data brokers.
If UTMFOX changes these practices in the future, we will update this Privacy Policy and provide any notices, consent mechanisms, or opt-out rights required by applicable law before engaging in the new practice.
UTMFOX does not currently use Customer Data collected through the UTMFOX application for cross-context or cross-site behavioral advertising.
UTMFOX does not use Google Analytics information obtained through a Customer's OAuth authorization for targeted advertising, retargeting, or personalized advertising.
UTMFOX may market its own products and services and may measure the effectiveness of its own marketing using information collected independently through UTMFOX's own websites and marketing systems.
If UTMFOX begins processing other personal information in a manner legally defined as targeted advertising or sharing for cross-context behavioral advertising, we will provide legally required disclosures and choices.
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods may depend on:
Customer-authorized GA4 information is subject to the more specific retention provisions in Section 9.
Some information may remain temporarily in backups after deletion from active systems.
We may retain eligible aggregated or de-identified information for longer periods when it can no longer reasonably be associated with an identifiable individual, subject to any additional restrictions that apply to information received through third-party APIs.
When an account is canceled or terminated, access to Customer Data may be restricted or removed.
Customers should export information they wish to retain before deleting an account where export functionality is available.
UTMFOX may retain certain information after account termination when reasonably necessary for:
Customer-authorized Google Analytics information will be handled in accordance with Section 9 and applicable Google API requirements.
UTMFOX uses administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.
Security measures may include, where appropriate:
OAuth tokens, API credentials, Cloudflare credentials, and similar authentication information are treated as sensitive security information and are used only for maintaining authorized integrations or related security purposes.
No Internet-connected service or data-storage system can be guaranteed to be completely secure.
Customers are responsible for protecting their own passwords, devices, domains, accounts, integrations, API credentials, and administrator permissions.
If you believe your UTMFOX account has been compromised, contact us promptly at legal@utmfox.com.
For personal information UTMFOX collects and processes for its own purposes, UTMFOX may act as a controller, business, or similar responsible entity under applicable privacy laws.
Examples include:
When UTMFOX processes personal information solely on behalf of a Customer through the Service, including information obtained through Customer-authorized integrations where applicable, UTMFOX may act as a processor, service provider, contractor, or similar entity.
In those circumstances, the Customer generally determines the purposes for which the information is processed.
If you are an individual seeking to exercise rights concerning information controlled by one of our Customers, you may need to direct your request to that Customer.
When appropriate, UTMFOX will reasonably assist Customers in responding to valid privacy requests involving information processed through the Service.
Depending on where you live and which privacy laws apply, you may have rights concerning your personal information.
These may include the right to:
Not every right applies in every jurisdiction or circumstance.
We may need to verify your identity before completing certain requests.
We will not unlawfully discriminate against you for exercising an applicable privacy right.
Privacy requests, including requests concerning information obtained through Customer-authorized integrations, may be submitted by emailing:
Please include enough information for us to reasonably understand and verify your request.
You do not need to create a new UTMFOX account solely to submit a privacy request.
If your request concerns information controlled by a UTMFOX Customer, we may direct you to the applicable Customer.
Where applicable law gives you the right to appeal a privacy decision, you may submit an appeal by emailing:
Please use the subject line:
Privacy Request Appeal
Include enough information for us to identify the original request and the decision you wish to appeal.
We will review the appeal and respond as required by applicable law.
Where permitted by applicable law, you may authorize another person to submit a privacy request on your behalf.
We may require reasonable evidence that the person is authorized to act for you and may independently verify your identity when permitted by law.
UTMFOX is a business-oriented Service and is not directed to children.
Individuals under 16 are not permitted to independently use the Service.
An Organization may permit an authorized user who is at least 16 years old to use the Service where permitted by applicable law and the UTMFOX Terms of Service.
UTMFOX does not knowingly seek to collect personal information from children under 13.
If we learn that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete or otherwise appropriately handle that information.
If you believe a child has provided personal information to UTMFOX, contact: legal@utmfox.com
The Service may contain links to or integrate with third-party websites and services.
This Privacy Policy does not govern the independent privacy practices of third parties.
Customers and users should review the privacy policies and agreements of services they choose to connect to UTMFOX.
UTMFOX is operated from the United States.
If you access the Service from outside the United States, information may be transferred to, stored in, or processed in the United States or other countries where our service providers operate.
Different countries may provide different levels of data protection.
If UTMFOX becomes subject to additional international privacy requirements, we may implement additional contractual, technical, or organizational measures as required.
Customers are responsible for their own privacy practices.
Customers should ensure that they have appropriate authority and legal bases to connect data sources to UTMFOX and permit UTMFOX to process information through those integrations.
Customers are also responsible for providing any legally required notices or obtaining any legally required consents associated with:
UTMFOX's Privacy Policy does not replace a Customer's own privacy policy.
Certain Customers may require a separate Data Processing Agreement when UTMFOX processes personal information on their behalf.
Where appropriate, UTMFOX may enter into a Data Processing Agreement describing matters such as:
We may update this Privacy Policy from time to time.
When we make changes, we will update the "Last Updated" date at the beginning of the Policy.
If a change materially affects how we collect, use, or disclose personal information, including information received through Google APIs, we may provide additional notice through:
Where applicable law or applicable API requirements require consent or authorization for a new processing activity, we will obtain the required consent or authorization before beginning that activity.
Questions, concerns, privacy requests, and appeals may be directed to:
UTM Fox LLC
Hickory Creek, Denton County, Texas
United States
Email: legal@utmfox.com