How we handle your information.

Midnight Drive is a performance marketing and sales agency for auto detailers, paint protection film installers, and window tint shops. We are based in Toronto, Ontario, Canada. This policy explains what information we collect through this website and through the tools we use to do our work, why we collect it, and the choices you have. If anything here is unclear, write to us at max@midnightdrive.co.

Information you give us

When you fill out the contact form on this site, we ask for your name, your business name, your email address, your phone number, and a message about your shop. We use this information to reply to you and to talk about working together. Form submissions are delivered to our inbox through Formspree, a form processing service, and protected from automated abuse by Cloudflare Turnstile.

If you become a client, we collect the information needed to run your marketing: your business details, access to your advertising and analytics accounts, your lead and booking data, and the content of our conversations. The scope of that work is set out in your service agreement.

Information collected automatically

This site is hosted on Vercel. Like most web hosts, Vercel keeps standard server logs that can include your IP address, browser type, the pages you visited, and the time of your visit. We use these logs only to keep the site running and secure. This site does not run advertising pixels or third party analytics scripts.

Google user data

Midnight Drive operates a Google Cloud application that connects to the Google Ads API and the Google Ads Data Manager API. The application is an internal tool. It is authorized only by Midnight Drive staff using Midnight Drive accounts, and it is used to manage the Google Ads accounts of clients who have granted us manager account access in writing.

Through that connection we access campaign, keyword, ad, budget, and performance data, and we upload conversion events for leads and booked jobs so that Google Ads can measure results. We use this data for one purpose: managing and reporting on our clients' advertising. We do not sell it, we do not use it to build advertising profiles of individuals, and we do not share it with anyone other than the client whose account it belongs to and the service providers named below.

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Clients can revoke our access at any time by removing Midnight Drive from their Google Ads manager account. Midnight Drive staff can revoke the application's own access at any time from their Google Account permissions page.

How we use information

• To respond to your enquiry and discuss our services.
• To deliver marketing and sales services to clients under a service agreement.
• To measure and report on advertising performance.
• To keep this website and our systems secure and working.
• To meet legal and accounting obligations.

Who we share it with

We do not sell personal information. We share it only with service providers who help us operate, and only to the extent needed for the job. Today those providers include Vercel for hosting, Formspree for form delivery, Cloudflare for bot protection and edge services, Google for advertising and analytics platforms, and the customer relationship and scheduling tools our clients already use in their shops. We may also disclose information when the law requires it.

How long we keep it

Contact form submissions are kept for as long as we are in conversation with you and for a reasonable period afterwards, so that we can pick the thread back up. Client data is kept for the length of the engagement and for as long as needed to meet our accounting and legal obligations, after which it is deleted or anonymized. Data accessed through Google APIs is kept only as long as needed to produce reports and measurements for the client, and reports are retained as part of the client's records.

Security

We protect information with access controls, encrypted connections, and credentials stored in managed secret stores rather than in code. No method of storage or transmission is completely secure, so we cannot promise absolute security, but we take reasonable steps appropriate to the sensitivity of the data.

Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Write to max@midnightdrive.co and we will respond within 30 days. Residents of Canada have rights under the Personal Information Protection and Electronic Documents Act, and residents of other regions may have similar rights under their local laws. We honour those rights regardless of where you live.

Children

This site and our services are for businesses. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy we will update the effective date at the top of the page. Material changes affecting clients will also be communicated directly.

Contact

Midnight Drive, a Grow Against Limits brand. Toronto, Ontario, Canada. max@midnightdrive.co.