Privacy Policy

Activatus, Inc. ("Activatus," "we," "us," or "our") operates activatus.com (the "Site") and provides communications, content production, audience research, and digital execution services to our clients. This policy explains what information we handle, why, and the choices you have. It covers three situations: visiting our Site, appearing in audience research we conduct for a client, and being one of our clients.

1. Information you give us

When you complete our contact form, we collect what you provide — your name, organization, work email, website (optional), and your message — and use it to respond to you.

2. Information collected automatically

When you visit the Site, we and our analytics providers collect standard technical data such as IP address, browser type, device, referring page, and pages viewed, to understand how the Site is used and improve it.

3. Cookies and your choices

We use cookies for four purposes. On your first visit you can accept all, reject everything non-essential, or open Customize to set each category individually, and you can change your choice at any time using the cookie control on every page or your browser settings.

• Strictly necessary — required for the Site to function and to remember your cookie choice. Always on.
• Analytics — Google Analytics 4, to understand how the Site is used. We ask Google to anonymize your IP address.
• Performance — remembers preferences such as layout and dismissed notices.
• Marketing — would measure advertising campaigns. We do not currently advertise, so no marketing cookies are set today.

We use Google Consent Mode to honor these settings. If you reject a category, its cookies are not set, and any analytics cookies already placed are cleared.

4. Our CRM

We use HubSpot to manage contacts and communications. Contact-form submissions are stored there so we can follow up, and HubSpot processes this data on our behalf under its own data-processing terms.

5. Audience research

When a client engages us to identify and reach a specific audience, we conduct audience research using publicly available information — organizational websites, public professional profiles, industry databases, and public tax-exempt organization filings (such as IRS Form 990). This is analysis of public information about organizations and professional roles. It is not a consumer database, and it does not draw on private communications.

Where a client asks us to personalize outreach in a specific sender's own written style, we analyze that sender's sent communications and public posts with the sender's consent, obtained by our client. We do not access private or privileged communications.

We do not sell, rent, or license this information, and we do not use it to train any third-party machine-learning model. If we hold information about you from this research, you may contact us (Section 9) to ask what we hold, or to ask us to correct or delete it, and every outreach campaign we run includes an opt-out.

6. Client accounts

This section applies once an organization becomes our client.

Data our clients provide remains their property. We use it solely to deliver their services, we protect it with appropriate safeguards, and we share it only as permitted by the data processing terms in their agreement, under which the client is the controller and we act as their processor.

Where a client authorizes us to manage their Google Ads or Google Ad Grants account, we access it through the Google Ads API with the client's authorization, which the client controls and can revoke at any time. We use that access solely to manage, report on, and maintain policy compliance for that client's account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements: we do not sell this information, use it for unrelated advertising, or transfer it to others except as needed to provide the client's services, to comply with law, or in connection with a merger or acquisition.

Where a client directs us to provide their data to an advertising platform for targeting, we do so only with the client's prior written approval; the client is the controller of that data and we act at their direction.

7. Who we share information with

We share information only with service providers that help us operate the Site and deliver our services — including cloud infrastructure, database, CRM, productivity, analytics, and AI providers, and, at a client's direction, advertising platforms — each under its own data-processing terms. Client agreements identify the providers used for that engagement, and we notify clients before adding one. If you would like our current list, email privacy@activatus.com.

We do not sell your personal information, and we do not send marketing email unless you have asked us to. We may disclose information where required by law.

8. Retention

We keep contact-form submissions and CRM records for as long as needed to respond to you and maintain our relationship, then delete or anonymize them. Client data and audience-research outputs are kept for the duration of the engagement and deleted or returned at its end, except where the law requires us to keep them longer.

9. Your rights, and how to reach us

Depending on where you live, you may have the right to access, correct, or delete personal information we hold, or to opt out of certain processing. We do not charge for this and we do not require an account.

Email us at privacy@activatus.com and we will respond within five business days.

Activatus, Inc.
1405 S Fern St, Suite 92012, Arlington, VA 22202

10. International transfers

We operate a distributed team, including personnel and infrastructure in the United States and Pakistan, and information may be accessed from those locations to deliver our services. Where information originates in the European Economic Area, the United Kingdom, or Switzerland and requires a transfer mechanism, we put appropriate safeguards in place, including Standard Contractual Clauses.

11. Children's privacy

The Site and our services are intended for a professional audience and are not directed to children under 13. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above.