Privacy Policy

We collect the following types of information:

• Account information: the email address and role used to create and manage your dashboard account.
• Advertising data: campaign performance metrics (impressions, clicks, spend, conversions, reach) retrieved from connected advertising platforms through their official APIs on your behalf.
• OAuth tokens: access tokens issued by third-party platforms (Facebook, Google, TikTok) after you authorize our application. Tokens are stored securely and not exposed to client-side code.
• Usage data: basic server logs, including page access times and API request logs, used for debugging and security.

We use the collected information solely for these purposes:

• Retrieve and display advertising performance data from connected accounts.
• Generate weekly and monthly performance reports.
• Maintain the security and operation of dashboard accounts.
• Provide customer support when requested.

We do not use your data for advertising, profiling, or any purpose unrelated to the dashboard service.

Our platform connects to the following official advertising APIs:

• Meta (Facebook) Ads API: used to read performance metrics at the campaign, ad set, and ad level, and Page insights. All access is read-only. Scopes requested: ads_read, business_management, pages_show_list, pages_read_engagement, read_insights, pages_messaging. pages_messaging is used solely to count the number of conversations as an inbox volume metric; we do not read, store, or send message content.
• Google Ads API: used to read campaign performance data in read-only mode via GoogleAdsService.SearchStream and CustomerService.ListAccessibleCustomers. Data retrieved includes impressions, clicks, cost, conversions, CTR, and CPA for Search, Display, Performance Max, Shopping, and Video campaign types. All client accounts are accessed through a Google Ads MCC (Manager Account). We do not use the Conversion Tracking API or Remarketing API.
• TikTok Ads API: used to read campaign and ad metrics in read-only mode.

All API access requires user authorization via OAuth 2.0. We do not store raw ad creatives beyond what is needed to display thumbnails in the dashboard. We perform no write, mutate, or campaign-management operations.

Your data is stored in a secure PostgreSQL database on Vercel infrastructure. We apply the following security measures:

• All connections use TLS/SSL encryption in transit.
• OAuth access tokens are stored securely and never exposed in client-side code.
• Platform access is protected by session-based authentication.
• Admin access is restricted by role and authenticated separately.

Advertising performance data is retained for up to 12 months to support historical reporting. OAuth tokens are retained until you disconnect the advertising account or revoke access from the platform provider. You may request deletion of your data at any time by contacting us.

We do not sell, rent, or share your personal or advertising data with third parties, except:

• As required by law or valid legal process.
• With infrastructure providers (Vercel, PostgreSQL hosting) solely for operating the service, under data-processing agreements.

You have the right to:

• Access the data we hold about you.
• Request correction or deletion of your data.
• Revoke API access at any time through the platform settings (Facebook, Google, TikTok).
• Disconnect your accounts from our platform at any time.

To exercise these rights, contact us at marketing.solution@mazmaker.com.

We use a single session cookie (auth_session) to maintain login state. This cookie is HTTP-only and Secure, and is not used for tracking or advertising. We do not use third-party tracking cookies.

Our platform is intended for business use only and is not directed at individuals under 18 years of age. We do not knowingly collect data from minors.

We may update this Privacy Policy from time to time. Changes will be reflected by updating the effective date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact: