Nine clauses to look for before you sign with a marketing agency
Chandan KumarFounder · Performance Marketing SpecialistListen to this article
The short answer
Nine things to check, in rough order of how much they cost when they bite: asset ownership (ad accounts, analytics, tags, domain, CRM data, Business Profile — all must be yours), exit terms (30–60 days, with a written handover), IP in creative (source files, not just exports), lock-in periods (rarely justified beyond a project), auto-renewal with long notice windows, scope defined by activity rather than outcome, reporting you cannot verify independently, subcontracting without disclosure, and payment terms tied to spend you do not control. None of this is adversarial — a good agency agrees to all of it readily, which is itself the test.
On this page
The worst agency situations I have been asked to help with were not about bad work. They were about a business that wanted to leave and discovered it could not — the ad account was in the agency's manager account, the domain was registered to the agency's founder, the creative existed only as flattened JPGs, and the contract auto-renewed annually with 90 days' notice that had passed three weeks earlier. All of that was in a document somebody signed while feeling optimistic. Here is what to read before you do.
1. Asset ownership: the one that actually matters
Every account must be created under your ownership, with the agency granted access. Not the reverse. This applies to Google Ads, Meta Business Manager, analytics, tag containers, your domain registration, hosting, CRM, email platform and your Google Business Profile.
The test is simple: if you terminated tomorrow, which accounts would you lose access to? Ask that question during negotiation and get the answer in writing. An agency that resists is telling you how it retains clients.
| Asset | Correct arrangement |
|---|---|
| Google Ads / Meta accounts | Your account; agency has manager access |
| Analytics and tag container | Your property; agency has edit rights |
| Domain and DNS | Registered to your company, in your registrar account |
| Website hosting | Your account, or clearly transferable |
| CRM and lead database | Yours, with export rights stated |
| Google Business Profile | Primary owner is your company account |
| Creative files | Editable source files delivered, not just JPG/PNG |
2. Exit and notice periods
Thirty to sixty days is reasonable for a retainer — enough for the agency to wind down properly, short enough that you are not trapped. Anything longer should be justified by something specific, and 'we invest heavily upfront' is a reason for a setup fee, not a six-month notice period.
Also check what happens during notice. Some contracts allow work to effectively stop while payment continues. Specify that service levels continue through the notice period and that handover is a deliverable, not a favour.
What the exit clause should say
- 130–60 days' notice, either side, without cause.
- 2Service continues at the agreed standard during notice.
- 3Handover is a named deliverable — access transfers, documentation, files, current state of work.
- 4No hostage clause — final payment cannot be conditioned on you not taking your assets.
- 5Immediate exit for material breach, defined.
3. Lock-ins and auto-renewal
Long lock-ins are occasionally justified — a large build, a heavy upfront investment — and usually are not. For ongoing marketing, a rolling monthly arrangement with a sensible notice period aligns everyone: the agency has to keep earning it, which is the point.
Auto-renewal is fine; auto-renewal with a 90-day notice window buried in clause 14 is a trap, because you will miss it. If auto-renewal exists, insist on a written reminder obligation 30 days before the notice window closes.
The combination to refuse
Twelve-month auto-renewal plus a 90-day notice window plus no reminder obligation. Any two of those are manageable; all three together mean you are choosing to leave a year in advance.
4. Scope written as activity, not outcome
'Ongoing optimisation', 'social media management', 'SEO services' are not scopes — they are categories. A scope states what is delivered, how often, and what the work is aiming at: number of campaigns managed, pages produced, creative variants per month, reporting cadence, and the two or three measures you both agree matter.
Vague scope is not always malicious; it is often how agencies preserve flexibility. But it makes underperformance unarguable in either direction, which helps nobody when month nine looks like month two.
| Vague | Workable |
|---|---|
| 'Ongoing SEO optimisation' | 'Two content pages and one technical fix batch per month, monthly report' |
| 'Social media management' | '12 posts, 4 reels, community response within 24h, monthly report' |
| 'Campaign management' | 'Up to 4 campaigns, weekly optimisation, creative refresh monthly' |
| 'Regular reporting' | 'Monthly report by the 5th: spend, leads, CPQL, revenue influenced' |
5. Reporting you can verify yourself
Insist on direct access to the source platforms — ad accounts, analytics, search console, the CRM — so any report can be checked. A PDF you cannot reconcile against a platform is a claim, not a report.
And define the metrics in the contract, especially 'lead'. If fees or performance claims rest on lead volume, the definition of a qualified lead needs to be written down, including what disqualifies one. Most agency-client disputes I have been asked to mediate came down to this single undefined word.
One word
'Lead', undefined in the contract, is the most common root of agency-client disputes. Define it, including what disqualifies one.
6–9. The rest of the list
Subcontracting: disclosure and your consent for anything material, plus confirmation that confidentiality and data obligations flow down. IP: you own the deliverables on payment, with source files, and the agency retains only a portfolio right. Payment tied to spend: if the fee is a percentage of media, state the floor, the cap and what happens when you deliberately reduce spend. Liability and data: who is responsible if a breach exposes your lead data, and what the agency's obligations are under DPDP as a processor.
That last one is newer and increasingly important. Your agency touches personal data in your CRM, your ad platforms and your WhatsApp tool. Get their processing obligations, data location and deletion commitments in writing — it is your exposure, not theirs.
The remaining four, briefly
- 1Subcontracting — disclosed, consented, with obligations flowing down.
- 2IP — deliverables and source files yours on payment; portfolio rights only for them.
- 3Spend-linked fees — floor, cap, and behaviour when you cut spend.
- 4Data and liability — processing terms, data location, deletion, breach responsibilities under DPDP.
How to raise all this without starting a fight
Frame it as standard practice rather than suspicion: 'we keep all accounts in our own name as company policy, and we need source files and a 30-day exit — is that a problem?' A good agency says no problem, because it already works this way. A weaker one negotiates, and how they negotiate tells you a great deal about the next two years.
And remember the asymmetry: at signing you have all the leverage you will ever have. Every one of these clauses is easy to agree now and impossible to fix later, which is the entire reason they are worth an hour of your attention today.
One sentence worth adding
'All accounts, data and source files remain the property of the client and will be transferred within 14 days of termination.' If that sentence causes friction, you have learned something important for free.
Key takeaways
- Own everything — ad accounts, analytics, tags, domain, hosting, CRM data, Business Profile and creative source files — with the agency granted access rather than ownership.
- Insist on 30–60 day exit with service maintained during notice and handover as a named deliverable; refuse long auto-renewal with a buried notice window.
- Define 'qualified lead' in the contract and keep direct access to source platforms, so reports can always be verified independently.
Frequently asked questions
Who should own the Google Ads account, me or my agency?
You. The account should be created under your ownership with the agency granted manager access, never the other way round. If the agency owns it, you lose the campaign history, conversion data and machine-learning signal when you leave — which is precisely why some agencies prefer that arrangement. The same applies to Meta Business Manager, analytics, tag containers and your Google Business Profile.
What is a reasonable notice period for a marketing agency contract?
Thirty to sixty days for an ongoing retainer, either side, without cause. Longer periods should be justified by something specific such as a substantial upfront build, and heavy initial investment is a reason for a setup fee rather than a six-month lock-in. Also specify that service continues at the agreed standard during notice and that handover is a deliverable, not a courtesy.
Should I sign a 12-month marketing contract?
Rarely for ongoing work. A rolling monthly arrangement with a sensible notice period keeps incentives aligned, because the agency has to keep earning the relationship. If a long term is genuinely required, negotiate a break clause at three or six months tied to agreed measures, and refuse the combination of long auto-renewal, a 90-day notice window and no reminder obligation.
Do I own the creative my agency produces?
Only if the contract says so. Insist that deliverables and their editable source files become your property on payment, with the agency retaining a portfolio right to show the work. Receiving only flattened exports is common and expensive — it means every future edit has to be rebuilt from scratch by whoever comes next.
What should an agency contract say about data protection?
It should name the agency's obligations as a processor of personal data on your behalf: what data they access, where it is stored, retention and deletion commitments, security obligations, whether anything is subcontracted, and what happens in a breach. Under India's DPDP framework the exposure largely sits with you, so those commitments need to be in writing rather than assumed.
Tools & next steps
Put this into practice, go deeper, or see how we'd do it for you.
Written by
Mr. Chandan Kumar
Founder & Performance Marketing Director, Global Info Edge
Founder of Global Info Edge and a performance-marketing specialist with 18+ years — Google & Meta ads, conversion funnels and measurable growth.
View full profile