LimnTerms of Service
Privacy Policy
What Limn collects when you use it, why, who it reaches, how long it is kept, and the rights you have over it.
- Effective
- October 18, 2026
- Last updated
- October 20, 2026
Summary of changes
- Added a plain-language summary, a table of contents, and a print control.
- Added sections on your customers' data, privacy rights in the United States, visitors from the EU and UK, children, cookies, and how this policy changes.
- Added the categories of personal information we collect, and a table of how long each kind of data is kept.
- Added how Google Sheets data is used when an automation reads or writes spreadsheet rows.
On this page
- We collect what you give us, what your workspace stores, and the basic logs needed to keep the service running and secure.
- We do not sell personal information, we do not share it for advertising, and we do not use it to train AI models.
- A business using Limn owns its customers' records. We handle them only to run the service for that business.
- Every company that helps us run Limn is named on our subprocessors page, with what it can see.
- You can download your data, delete your account yourself, and ask us anything at support@launchwithlimn.com.
The full text below is what applies.
Limn is a marketing and CRM platform operated by Acadia Marketing LLC ("Limn", "we", "us"), One City Center, Portland, ME 04101. This policy describes what we collect, why, and the choices you have. It applies to launchwithlimn.com and the Limn application.
This policy covers two kinds of people: the people who sign up for and use Limn, and the people who visit our website. It also explains, in Your customers' data, how we handle the records a business keeps about its own customers.
A business that uses Limn to message, call or book its customers has its own privacy policy, and that policy governs what the business does with your details. If you heard from a business through Limn, that business is the one to ask first.
- Account information — your name, email address, phone number, profile photo, and password (stored hashed) when you create an account, or the name, email address and photo your Google, Facebook or Apple account shares when you sign in with it.
- Customer data you enter — contacts, companies, messages, calls, appointments, and other CRM records your organization stores in Limn. Your organization owns this data; we process it only to provide the service.
- Connected account tokens — when you connect Facebook, Instagram, LinkedIn, TikTok, Google or Microsoft accounts, we store the access tokens needed to act on your behalf. Tokens are encrypted before they are stored and never shared.
- Usage and log data — standard server logs (IP address, browser, pages requested) used for security and reliability, and error reports with personal details removed before they are sent.
- Device information — when you turn on notifications on a phone, the push address Apple or Google issues for that phone, so we can deliver the alerts you asked for.
- Billing information — payments are handled by our payment processors; we never store full card numbers.
- What you send us — the emails and messages you send our support team.
We do not track where you are.
The same information, grouped the way United States privacy laws ask for it:
- Identifiers
- What it includes
- Name, email address, phone number, the address your browser connects from, and the identifiers of accounts you connect.
- Who receives it
- The providers that host, secure and deliver the service.
- Commercial information
- What it includes
- Your plan, its billing history, and usage counts such as messages sent.
- Who receives it
- The payment processor your workspace pays through.
- Internet activity
- What it includes
- Pages and features used, server logs, and error reports with personal details removed.
- Who receives it
- Hosting and error reporting providers.
- Audio and electronic information
- What it includes
- Messages, emails, call recordings, voicemail and transcripts a workspace sends or receives.
- Who receives it
- The providers that carry calls, texts and email, and the ones that transcribe or answer calls.
- Professional information
- What it includes
- The business you work for and your role in a workspace.
- Who receives it
- The providers that host the service.
- Sign-in credentials
- What it includes
- Your password, stored only as a one-way hash, and the second-step code if two-step sign-in is on.
- Who receives it
- Nobody. It is used only to sign you in.
| Category | What it includes | Who receives it |
|---|---|---|
| Identifiers | Name, email address, phone number, the address your browser connects from, and the identifiers of accounts you connect. | The providers that host, secure and deliver the service. |
| Commercial information | Your plan, its billing history, and usage counts such as messages sent. | The payment processor your workspace pays through. |
| Internet activity | Pages and features used, server logs, and error reports with personal details removed. | Hosting and error reporting providers. |
| Audio and electronic information | Messages, emails, call recordings, voicemail and transcripts a workspace sends or receives. | The providers that carry calls, texts and email, and the ones that transcribe or answer calls. |
| Professional information | The business you work for and your role in a workspace. | The providers that host the service. |
| Sign-in credentials | Your password, stored only as a one-way hash, and the second-step code if two-step sign-in is on. | Nobody. It is used only to sign you in. |
- To provide, maintain, and improve the Limn service.
- To send messages (email, SMS, social posts) that you or your organization explicitly compose and schedule.
- To power the AI features you invoke — drafting replies, summarizing, and generating content (see below).
- To bill for the plan you chose and tell you about your account.
- To secure accounts, prevent abuse, and comply with legal obligations.
We do not sell your personal information, and we do not use your customer data for advertising.
When you connect a Facebook Page or Instagram business account, we store the Page or account name, its Facebook ID, its category and profile picture, the list of permissions Facebook granted, and an access token. Tokens are encrypted before they are stored and are used only to do the things you asked for: publish the posts you schedule, show your connection status, read your comments, and read your Page statistics.
We also store what the people who contact your Page send you, because that is what an inbox is:
- Messages — the text of Facebook and Instagram direct messages sent to your Page, and the sender's Facebook or Instagram identifier. That identifier is issued by Facebook, is specific to your Page, and is not an email address or phone number.
- Comments — the text of comments on your posts, the commenter's public display name, and the same kind of Facebook-issued identifier.
- Statistics — counts we fetch from Facebook and Instagram, such as reach, views and follower numbers. These are totals about your Page. They are never about a named person.
How long we keep it. Messages, comments and statistics stay for as long as your organization has an account with us, because they are your record of your customers. When you disconnect a Page or Instagram account, we delete the comments and the statistics we fetched for it and retire its token immediately; the messages stay, because they are conversations with your customers rather than data about the connection. Deleting your organization deletes all of it.
Asking us to delete your data. If you have messaged or commented on a business that uses Limn and you want that removed, remove the Limn app from your Facebook account (Settings → Apps and Websites → Limn → Remove) and choose to delete your information, or email support@launchwithlimn.com. Either way we delete the direct messages you sent, remove your name and identifier from your comments, and delete the contact record we created for you unless that business also has your email address or phone number — in which case we keep their record of you as a customer and remove the Facebook and Instagram identifiers from it. Requests made through Facebook get a confirmation code, and entering it on this page shows exactly what was removed.
If you are the business: you can disconnect at any time from Settings, or by removing the Limn app in your Facebook settings. Removing the app revokes the token at Meta, so our access ends immediately and we mark the connection as revoked.
Limn connects to Google only where you ask it to. Each connection belongs to one business in your account, and the permission you grant is used only for that business.
- Google sign-in — signing in with Google gives us your name, your email address and your profile picture. We use them to identify your Limn account and to show who you are to your own teammates.
- Google Calendar — we read the names of your calendars and the times you are busy, and we create, update and cancel the appointments booked through Limn. Your busy times decide which slots a customer can book, so the booking pages never offer a time you are already committed to. If you switch on bringing your Google events into Limn, we also store the title and the time of those events, and match an invited email address to a contact you already have.
- Google Analytics — we read the list of websites the connected account can see, and the visitor counts, traffic sources and page figures for the one website you choose. We use them to show that business how many people visit its website beside how many of them became customers. These are totals about a website. They are never about a named person, and we write nothing back to Google.
- Google Search Console — we read the list of sites the connected account can see, and the search clicks, impressions, average position and top searches for the one site you choose. We use them in that business's performance reports. These are totals about a website and the words people searched, never about a named person, and we write nothing back to Google.
- YouTube — we read the list of channels the connected account manages and the videos already on them, and we upload the videos you publish from Limn. We use them to publish your video to your own channel and to tell you when it has finished processing.
- Google Business Profile — we read the business profiles the connected account manages, their details, and the reviews people leave on them. We use them to publish the posts you write, to send the review replies you write, and to put your booking link on your profile.
- Google Drive — when you connect Drive for a business, Limn reads its photos and videos so you can choose files for a post. Only files you choose are copied to that business's media library. Limn changes no files in Drive.
- Google Sheets — when you connect a spreadsheet to an automation, we read rows to find matches and add or update the values the automation supplies in the spreadsheet and tab you choose. The stored permission is used only to run that automation.
- Google Ads — for an agency that connects its own Google account, we read campaign, keyword, Quality Score and lead records for the client accounts under that manager account, and we apply campaign changes the agency approves in Limn (pause, enable, names, and later budgets when switched on). Writes happen only when someone applies a change. We also still read Google Guaranteed lead records for client reports.
- Firebase Cloud Messaging — when you turn notifications on from an Android phone, Limn sends that phone the alerts you asked for. This does not read your Google account.
How we store it. The permission Google issues is encrypted before it is stored, and it is stored against the one business you connected it to. Nothing else in Limn can read it, and no other business can use it. What we read from Google is stored against that same business and used only for the feature named above.
Who can see it. We never sell information received from Google. The only companies it reaches are the service providers that host and run Limn, each of which may process it only on our instructions. We never use it for advertising and we never use it to train an AI model. No person here reads it, except with your agreement — when you ask us for help with a problem — or where reading it is needed to keep accounts secure or to meet the law.
When we delete it. Disconnecting a Google account deletes the stored permission straight away, and our access to that account ends with it. Deleting the business, or your organization, deletes what we read from it. You can also remove Limn from the permissions page of your own Google account, which ends our access the same way.
Limn's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Limn includes AI features — drafting a reply, summarizing a conversation, generating post or email copy, and similar. When you or one of your organization's automations runs one of these, the text needed for that specific request (for example the message being replied to, or the contact details you are merging) is sent to Anthropic, and the generated result is returned to you. Requests are made only to produce output you asked for. If your organization has chosen the alternative model, that same request is sent to RunPod instead.
We do not use your data to train AI models. Anthropic does not train on data submitted through its API. RunPod hosts the alternative model, and we do not use what is sent there to train a model. Organizations that prefer to use their own Anthropic account can supply their own API key in Settings, in which case those Anthropic requests are billed to and governed by that account.
When comparison of the assistant's answers is turned on, the same request is also sent to RunPod while Anthropic is still the model that answers you. The comparison only records the two answers. RunPod, Anthropic, and the other companies that see data for a specific feature are named on the subprocessors page with what each one sees and when it is used.
We share data only with the service providers required to run Limn — hosting, database, email and SMS delivery, telephony, file storage, AI generation, and payment processing — each bound to process it only on our instructions. We do not sell personal information or share it with advertisers. We may disclose information if required by law.
Mobile numbers and text messaging. We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Mobile numbers and text-message opt-in information are used only to send the messages you or your organization have agreed to receive (account notifications, verification codes, appointment reminders, invoices and document links, and customer-care replies) and are disclosed only to the carriers and messaging providers needed to deliver them. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help.
The full list of those providers, with what each one does and where, is on the subprocessors page. If Acadia Marketing LLC is ever sold or merged, the information we hold would pass to the new owner under the terms of this policy, and we would tell account owners before it did.
A business that uses Limn decides whose details go into its workspace and what it does with them. For those records — its contacts, their messages and calls, their bookings and invoices — the business is the controller and Limn is its processor: we hold and handle the records only to run the service for that business, and only as it instructs.
If you are one of that business's customers and want to see, correct or delete what it holds about you, ask the business. If you write to us instead, we will pass your request to the business and help it answer. The one exception is a request made through Facebook, which we carry out ourselves as described above.
Each business is responsible for having the right to contact the people it messages and calls through Limn. Our Acceptable Use Policy sets out what that means.
Records you delete in the application are removed from your workspace immediately and stop being processed. Some deletions are recorded as soft deletes, meaning the underlying row is retained but inaccessible, so that related history and audit records stay intact; we retain those for as long as your organization has an account with us. Organization owners can export their full dataset at any time from Settings, and can request complete and permanent deletion of an organization's data by emailing support@launchwithlimn.com.
Any user can delete their own account from inside the application, in Settings under My profile, or by email. The steps, the grace period and what is kept are on the account deletion page.
- Assistant customer and background-work events
- How long
- 30 days, then removed in daily batches. Customer events hold an outcome and record reference. Staff threads stay until the business is deleted.
- Your account
- How long
- While the account exists. Erased 7 days after you delete it.
- A workspace's records
- How long
- Contacts, conversations, calls, appointments, jobs, quotes and invoices stay until the workspace deletes them, and are removed when the workspace is deleted.
- Permissions for connected accounts
- How long
- Until you disconnect the account. Deleted straight away when you do.
- Facebook and Instagram messages, comments and statistics
- How long
- As set out in the Facebook and Instagram section above.
- Page views from a business's website snippet
- How long
- 90 days, then deleted.
- A signed-in session
- How long
- 30 days, then you sign in again.
- Audit log entries and the billing history of what Limn charged
- How long
- Kept after an account is deleted, with the person's name removed.
- Database backups
- How long
- A restore reaches back 24 hours. Older copies do not exist.
| What | How long |
|---|---|
| Assistant customer and background-work events | 30 days, then removed in daily batches. Customer events hold an outcome and record reference. Staff threads stay until the business is deleted. |
| Your account | While the account exists. Erased 7 days after you delete it. |
| A workspace's records | Contacts, conversations, calls, appointments, jobs, quotes and invoices stay until the workspace deletes them, and are removed when the workspace is deleted. |
| Permissions for connected accounts | Until you disconnect the account. Deleted straight away when you do. |
| Facebook and Instagram messages, comments and statistics | As set out in the Facebook and Instagram section above. |
| Page views from a business's website snippet | 90 days, then deleted. |
| A signed-in session | 30 days, then you sign in again. |
| Audit log entries and the billing history of what Limn charged | Kept after an account is deleted, with the person's name removed. |
| Database backups | A restore reaches back 24 hours. Older copies do not exist. |
Every period the software enforces is listed on How long data is kept.
Depending on the state you live in, you may have the right to know what personal information we hold about you and to get a copy of it, to have it corrected, to have it deleted, and to opt out of its sale, its sharing for advertising, or its use for profiling. We answer these requests from anyone who asks, whichever state they live in.
We do not sell or share personal information. We have not sold personal information, or shared it for cross-context behavioral advertising, in the past twelve months, and we do not use or disclose sensitive personal information for any purpose other than providing the service. There is nothing to opt out of, and you do not need to send a request to keep it that way.
To make a request, email support@launchwithlimn.com from the address on your account. We confirm requests from that address before acting on them, and we answer within the time the law where you live sets — 45 days under California law. Someone you authorize may make a request for you if they show us your written permission. Exercising a right never changes the price you pay or the service you get.
If you are a customer of a business that uses Limn, your request about that business's records goes to the business, as set out in Your customers' data above.
Limn is run from the United States, and the data we hold is stored and processed there. If you are in the European Economic Area or the United Kingdom, these are the legal bases we rely on:
- Contract — running the account you signed up for, and billing for it.
- Legitimate interests — keeping the service secure, preventing abuse, fixing faults, and understanding how the website is used, in ways that do not override your rights.
- Consent — text messages from us, and the accounts you choose to connect. You can withdraw consent at any time, without affecting what was done before.
- Legal obligation — keeping billing records the law requires.
You have the right to access your personal data, to have it corrected or erased, to limit how it is used or have us stop a use you disagree with, to receive it in a portable form, and to complain to the data protection authority where you live. Write to us to use any of them.
Personal data sent to us from the EEA or the UK is transferred to the United States. Many of the providers on our subprocessors page include the European Commission's Standard Contractual Clauses in their own data processing terms. A business that needs those clauses in an agreement with us can write to us.
Limn is a tool for businesses and is not directed to children. Our Terms require every user to be at least 18, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their details, write to us and we will delete them.
All traffic is encrypted in transit (TLS). Connected-account tokens are encrypted before they are stored, passwords are hashed, and each workspace is separated from every other at the database, so a query can only return rows belonging to the workspace that asked. Uploaded files are kept in private storage that no public address reaches, and anyone who signs in with a password can add a second step: a code from an authenticator app or a code texted to their phone.
No system is perfectly secure. If you find a flaw, the security page says how to tell us and what happens next.
We use a small number of cookies to keep you signed in and to remember which business you are working in. Limn's own website carries no advertising cookies. Every cookie we set is listed, with how long it lasts, in our Cookie Notice.
When we change this policy we update the date at the top of this page and list what changed under Summary of changes. If a change affects how we use information we already hold, we tell account owners by email or in the app before it takes effect.
Questions about this policy or your data: support@launchwithlimn.com. By post: Acadia Marketing LLC, One City Center, Portland, ME 04101.