Cookie Policy
Effective Date: May 2026 | Last Updated: May 2026
1. Overview
This Cookie Policy explains how ENGAGECLOUD AI INC (“engagecloud.ai,” “we,” “our,” or “us”) uses cookies and similar tracking technologies on our website and platform (collectively, the “Site”). It should be read alongside our:
We use cookies and similar technologies in accordance with your preferences selected through our cookie consent banner, where required by applicable law. You may manage or withdraw your consent at any time as described in Section 7.
We maintain records of consent choices for compliance and auditing purposes.
2. What Are Cookies and Similar Technologies?
Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website. They allow a website to recognize your device, remember your preferences, and collect information about how you use the site.
First-party cookies are set directly by engagecloud.ai. Third-party cookies are set by external parties whose services are embedded in or connected to our Site.
Beyond cookies, we also use the following similar technologies, all of which this policy covers:
Web beacons / pixels — small invisible image files or code snippets embedded in pages or emails that report back when a page is opened or a link is clicked.
Server-side tracking — data sent directly from our servers to third-party analytics and advertising platforms (e.g., Meta Conversions API, Google Enhanced Conversions). Where you have not consented to marketing or analytics cookies, we apply those preferences to both browser-based and server-side data collection to the extent technically feasible under applicable law.
Local storage and session storage — browser-based storage mechanisms similar to cookies that persist data client-side.
Device fingerprinting — used by some third-party security and fraud-detection services to identify device characteristics without relying on stored cookies.
Consent management records — logs of your cookie consent choices, stored to demonstrate compliance with applicable law.
3. Categories of Cookies We Use
Strictly necessary cookies are placed automatically when you visit or log in and do not require your consent under applicable law. Strictly necessary cookies cannot be disabled because they are required for security, authentication, and core platform functionality. All other categories of cookies are only placed after you provide consent through our cookie banner, or where another lawful basis applies under applicable law.
3a. Strictly Necessary Cookies (Cannot be disabled)
These cookies are essential to operate the Site and platform. They enable core functions including authentication, session integrity, security enforcement, load balancing, and fraud prevention.
What they do:
Maintain your authenticated session while you are logged in.
Store and validate your security token and access credentials.
Prevent cross-site request forgery (CSRF) and session hijacking.
Enforce rate limits and route traffic across our infrastructure.
Record your cookie consent preference so we do not ask again.
Support multi-factor authentication flows.
Detect and block automated bots and fraudulent access attempts.
Retention: Session duration, or up to 24 hours for security tokens. Consent records retained for up to 3 years to satisfy regulatory audit obligations.
3b. Functional / Preference Cookies (Require consent outside of strictly necessary use)
These cookies remember choices you make and settings you configure, enabling a personalized experience. They may be set by us or by embedded third-party tools whose output you interact with directly.
What they do:
Remember your time zone, language, region, and display preferences.
Retain your dashboard layout, column configurations, and notification settings.
Store whether you have acknowledged a platform alert, banner, or onboarding prompt.
Enable live chat widgets and remember your support conversation history.
Remember your playback speed or view preferences for training and onboarding videos.
Retention: Up to 12 months.
3c. Analytics and Performance Cookies (Require consent)
These cookies collect aggregated, anonymized information about how visitors use the Site — which pages are visited most, how long sessions last, where users drop off, and what errors occur. We use this to improve the Site and platform.
Google Analytics (GA4)
GA4 measures traffic volume, session duration, page views, user journeys, and conversion events. Data is processed under Google’s Privacy Policy.
Opt out using the Google Analytics Opt-Out Browser Add-On: https://tools.google.com/dlpage/gaoptout
Manage via Google Ad Settings: https://adssettings.google.com
We also use Google Enhanced Conversions, a server-side feature that sends hashed first-party data (such as hashed email address) directly from our servers to Google for conversion measurement purposes. This feature is used solely for measuring advertising effectiveness. Where you have not consented to marketing cookies, we apply your preference to this data collection to the extent technically feasible under applicable law.
Retention: Up to 14 months.
Google Tag Manager (GTM)
GTM is a tag management system that loads and manages additional tracking scripts on our Site. All tags loaded via GTM are governed by this Cookie Policy. We use GTM in standard browser-side mode and, where applicable, server-side container mode. Server-side GTM processes data on our infrastructure before forwarding to third-party platforms, providing an additional layer of data governance.
3d. Marketing and Advertising Cookies (Require consent)
These cookies track your activity on our Site to enable targeted advertising, measure campaign effectiveness, and build retargeting audiences on third-party platforms. They are placed by our advertising partners and are only activated where you have provided consent or where another lawful basis applies.
Meta (Facebook) Pixel — Browser-Side
The Meta Pixel is a JavaScript snippet that fires when you visit pages on our Site. It reports visit events, page views, and specific conversion events (such as form completions or sign-ups) back to Meta. This enables us to:
Serve retargeted advertisements on Facebook, Instagram, and Meta’s Audience Network.
Build audiences of users who resemble our existing customers.
Measure advertising return on investment.
The Pixel collects your IP address, browser type, page URL, referring URL, and any triggered events.
Manage Meta ad preferences: https://www.facebook.com/adpreferences/ad_settings
Manage off-Facebook activity: https://www.facebook.com/off_facebook_activity
Meta Conversions API (CAPI) — Server-Side
In addition to the browser-side Pixel, we use Meta’s Conversions API to send conversion event data from our servers to Meta for campaign measurement purposes. Where you have not consented to marketing cookies, we apply your preference to this data collection to the extent technically feasible under applicable law. Data sent via CAPI is hashed before transmission. You may additionally manage Meta’s use of your data for advertising via the links above.
Google Ads Conversion Tracking — Browser-Side
Google’s conversion tracking cookie fires when you complete a qualifying action after clicking a Google advertisement, allowing us to attribute that conversion to a specific campaign. It also enables remarketing — showing our ads to past Site visitors on Google’s Display Network, Search, and YouTube.
Manage Google ad personalization: https://adssettings.google.com
Google Enhanced Conversions — Server-Side
As described in Section 3c, we use Google Enhanced Conversions to send hashed first-party signals from our servers to Google for measurement purposes. Where you have not consented to marketing cookies, we apply your preference to this data collection to the extent technically feasible under applicable law. You may additionally limit Google’s use of this data via your Google Account privacy settings: https://myaccount.google.com/data-and-privacy
LinkedIn Insight Tag (where applicable)
Where we run LinkedIn advertising campaigns, the LinkedIn Insight Tag may be present on our Site. It enables conversion tracking and retargeting for LinkedIn campaigns and is only activated where you have provided consent.
Opt out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Retention for advertising cookies: Conversion windows up to 90 days; audience list membership up to 180 days, subject to Meta’s, Google’s, and LinkedIn’s own retention limits.
3e. AI and Conversational Feature Cookies (Strictly Necessary / Functional)
engagecloud.ai is an AI-enabled platform. Certain session identifiers support AI-powered features including real-time transcription, sentiment analysis, agent assist, and automated workflow routing. These identifiers allow our systems to:
Associate an active session with an in-progress AI inference or transcription job.
Pass relevant session context to our AI processing pipeline without exposing raw data to third parties.
Log AI interaction metadata (prompt type, confidence score, handoff trigger) for product improvement in aggregate, anonymized form.
We do not use your Customer Content to train our general-purpose AI models without your explicit prior written consent, as stated in our Terms of Service and Privacy Policy. These session identifiers do not enable third-party AI providers to identify you as an individual.
Retention: Session duration only.
4. First-Party vs. Third-Party Cookies
First-party cookies are set and read only by engagecloud.ai. They include session management, preference, and internal analytics cookies.
Third-party cookies are set by external parties whose services are embedded in our Site. Each third-party provider operates under its own privacy and cookie policies. We encourage you to review them:
| Provider | Role | Privacy / Cookie Policy |
| Analytics, advertising, tag management | https://policies.google.com/technologies/cookies | |
| Meta (Facebook) | Advertising, retargeting | https://www.facebook.com/policy/cookies/ |
| Advertising (where applicable) | https://www.linkedin.com/legal/cookie-policy |
engagecloud.ai is not responsible for the practices of third-party cookie providers. We contractually require that subprocessors handle your data in accordance with applicable data protection law and our DPA obligations.
5. Cookie Inventory
The table below lists the cookies we use. This inventory reflects our current deployment and is updated when our cookie usage changes. Before relying on this inventory for compliance purposes, we recommend verifying against your browser’s developer tools or a cookie scanning tool, as third-party cookies may vary based on your location, consent status, and active campaigns.
| Cookie Name | Provider | Category | Purpose | Type | Retention |
| _ec_session | engagecloud.ai | Strictly Necessary | Authenticated session management | First-party | Session |
| _ec_csrf | engagecloud.ai | Strictly Necessary | CSRF attack prevention | First-party | Session |
| _ec_mfa | engagecloud.ai | Strictly Necessary | MFA flow state management | First-party | 10 minutes |
| _ec_consent | engagecloud.ai | Strictly Necessary | Stores your cookie consent choice | First-party | 3 years |
| _ec_prefs | engagecloud.ai | Functional | Dashboard layout and display preferences | First-party | 12 months |
| _ec_tz | engagecloud.ai | Functional | Time zone and locale settings | First-party | 12 months |
| _ec_ai_sid | engagecloud.ai | Functional | Active AI session identifier for inference pipeline | First-party | Session |
| _ga | Google Analytics | Analytics | Distinguishes unique users | Third-party | 13 months |
| _ga_* | Google Analytics | Analytics | Session and campaign state for GA4 properties | Third-party | 13 months |
| _gid | Google Analytics | Analytics | Distinguishes users across 24-hour sessions | Third-party | 24 hours |
| _gcl_au | Google Ads | Marketing | Conversion linker — connects ad clicks to conversions | Third-party | 90 days |
| _gcl_aw | Google Ads | Marketing | Google Click ID for conversion attribution | Third-party | 90 days |
| _fbp | Meta Pixel | Marketing | Identifies browsers for ad delivery and retargeting | Third-party | 90 days |
| _fbc | Meta Pixel | Marketing | Stores Facebook Click ID from ad click | Third-party | 90 days |
Cookie names marked with * indicate a family of cookies sharing a naming pattern. First-party cookie names prefixed _ec_ are engagecloud.ai internal cookies; the exact names in your live environment should be verified against your actual deployment before publishing. Third-party cookies may not be set if you have not consented to their respective category or if the relevant campaign or integration is not active.
6. Cookies and the engagecloud.ai Platform (Logged-In Users)
When you are logged into the engagecloud.ai platform, additional session tokens and identifiers are used beyond what applies to the public marketing website. These include:
Authentication tokens — tokens that authorize your API requests during an active session.
Role and permission state — identifiers that enforce access controls based on your account role and subscription tier.
Audit and activity logging — session-bound identifiers used to correlate your actions with platform audit logs for security and compliance purposes.
AI session identifiers — as described in Section 3e, short-lived session tokens that associate your session with in-progress AI jobs.
Real-time communication state — identifiers used to maintain live voice, SMS, and chat sessions.
These platform-side identifiers are strictly necessary for the platform to operate and cannot be disabled while you are logged in.
Communication content processed within the platform — call recordings, transcripts, message content, AI-generated summaries — is not collected via cookies. That data is governed by our Privacy Policy and DPA.
7. Managing Your Cookie Preferences
Cookie Consent Banner
When you first visit our Site, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or customize your preferences by category. You can revisit and update your preferences at any time by clicking the Cookie Settings link in the footer of our Site. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
Browser Controls
Most browsers allow you to view, manage, block, and delete cookies through their settings. Note that disabling cookies may impair the functionality of the Site and platform, including authentication and session management. Strictly necessary cookies cannot be disabled while you are using the platform.
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
Microsoft Edge: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies
Brave: https://support.brave.com/hc/en-us/articles/360022806212
Global Privacy Control (GPC)
Our Site honors the Global Privacy Control (GPC) browser signal. When GPC is enabled, we treat it as an opt-out of the sale or sharing of your personal data for cross-context behavioral advertising in applicable jurisdictions, including California under the CPRA. We do not sell personal data.
Third-Party Opt-Out Tools
Google Analytics: https://tools.google.com/dlpage/gaoptout
Google Ads personalization: https://adssettings.google.com
Google account data and privacy: https://myaccount.google.com/data-and-privacy
Meta ad preferences: https://www.facebook.com/adpreferences/ad_settings
Meta off-Facebook activity: https://www.facebook.com/off_facebook_activity
LinkedIn ad opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Industry opt-out (US): https://optout.aboutads.info and https://optout.networkadvertising.org
8. Server-Side Tracking — Transparency Notice
Several technologies we use operate server-side (Meta Conversions API, Google Enhanced Conversions, server-side GTM). These do not set cookies in your browser and therefore behave differently from browser-based cookies.
We use server-side tracking only for the purposes described in this policy — conversion measurement, fraud prevention, and first-party analytics. We do not use server-side data to build individual behavioral profiles for advertising purposes beyond what is described here.
Where you have not consented to marketing or analytics cookies, we apply those preferences to server-side data collection to the extent technically feasible under applicable law. If you wish to exercise further control over server-side data collection, you may submit a data subject request via privacy@engagecloud.ai or use the opt-out mechanisms provided by the relevant third-party platform listed in Section 7.
9. U.S. State Privacy Rights
Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, and other U.S. states with applicable privacy laws may have additional rights regarding personal data collected through cookies and similar technologies, including the right to know, delete, correct, and opt out of the sale or sharing of personal data. These rights are described in full in our Privacy Policy. To exercise your rights, contact privacy@engagecloud.ai.
10. Data Collected via Cookies and Similar Technologies
Depending on the technologies active during your visit and your consent choices, data collected may include:
Browser type, version, and language settings.
Operating system and device type, screen resolution.
IP address and approximate geographic location (country/city level, not precise location).
Pages visited on our Site, time spent on each page, scroll depth, and navigation path.
Referring URL and search query that brought you to our Site.
Events triggered during your visit (form submissions, button clicks, sign-ups, feature activations).
Session identifiers and authentication tokens.
Ad click identifiers (e.g., Google Click ID, Facebook Click ID) where consent has been provided.
Hashed identifiers (e.g., hashed email address) used for server-side conversion measurement where you are a known logged-in user and applicable consent or lawful basis exists.
AI session state identifiers (see Section 3e).
Error context and crash data (browser type, OS, page URL, relevant session state) captured by Sentry.
All data is processed in accordance with our Privacy Policy and, for Customer Data, our DPA.
11. Cookies and Children
Our Site is not directed at children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly use cookies to collect data from children. If you believe a child has provided personal data via our Site, contact privacy@engagecloud.ai and we will take steps to delete that data promptly.
12. International Transfers
Some cookie providers listed in this policy — including Google and Meta — may process data in countries outside the United States or European Economic Area. All such transfers are governed by appropriate safeguards including Standard Contractual Clauses or other legally recognized transfer mechanisms, as described in our Privacy Policy and DPA.
13. Changes to This Cookie Policy
We may update this Cookie Policy at any time to reflect changes in the cookies we use, new third-party integrations, changes in applicable law, or updates to our product. When we make material changes, we will update the “Last Updated” date at the top of this page and, where required by law, trigger a consent refresh via our cookie banner. We will also provide notice via email to registered account holders for material changes. Continued use of the Site after any update constitutes acceptance of the revised policy to the extent permitted by applicable law.
14. Related Policies and Resources
- Privacy Policy — [Privacy Policy URL]
- Terms of Service — [Terms of Service URL]
- Data Processing Agreement — [DPA URL]
- Data Deletion Request — [Deletion URL]
15. Contact
For questions about this Cookie Policy, to update your preferences, or to submit a data subject request:
Email: privacy@engagecloud.ai
Phone: (888) 231-5088
Mailing address: ENGAGECLOUD AI INC, 108 West 13th St., Wilmington, DE 19801, United States