Privacy Policy

Mucho Data is a reporting and analytics platform operated by Mucho Media (“we”, “us”). It is used by advertising agencies to connect their clients’ advertising accounts, read performance data from those accounts, and report results back to those clients. This policy explains what data we access, why, where it is stored, how long we keep it, and how it can be deleted.

We act as a data processor on behalf of the agency that operates the account. The agency decides which advertising accounts are connected and which contact records are uploaded; we process that data only to provide the service to them.

1. Data we collect

Account data

• Name, email address, and a hashed password for each user we create.
• Session records and sign-in timestamps, used to keep users signed in and to detect abuse.
• An audit log of actions taken inside the platform.

Business data entered by the agency

• Client and brand profiles, offers, audience definitions, competitor references, and uploaded creative files and documents.

Advertising platform data accessed with your authorisation

When an authorised user connects an advertising account, we read the following through the platform’s official API. We never ask for, receive, or store the password of any advertising account.

• Meta Ads (permission ads_read): campaigns, ad sets, ads and creative metadata, and daily aggregate performance metrics — spend, impressions, reach, clicks, link clicks, video views, and platform-reported leads.
• Google Ads (scope https://www.googleapis.com/auth/adwords): the same campaign structure and daily aggregate performance metrics, plus the conversion actions configured on the account.
• Google Analytics 4 (scope https://www.googleapis.com/auth/analytics.readonly): read-only reporting data such as sessions and landing-page engagement for the properties you select. This scope is read-only; we cannot and do not modify your Analytics configuration.

The advertising data we read is aggregate performance data about advertising accounts. We do not request, and these permissions do not grant, access to your personal Google account contents, your Google Drive, your Gmail, your contacts, or your Facebook profile beyond your name and email address.

Contact and sales records supplied by the agency

• Lead records: name, email address, phone number, free-text notes, lead status and stage, deal value, and the campaign or ad a lead is attributed to. These records are created by the agency through file import, a webhook from their own systems, or a landing page they publish through the platform.
• Landing-page visitor events for pages published through the platform, used to measure page performance.

2. How we use the data

• To display advertising performance dashboards and reports to the agency and its clients.
• To connect advertising results to downstream outcomes — which campaigns produced qualified leads and closed deals.
• To generate written analysis and recommendations using AI models (see section 4).
• To send conversion events back to the advertising platform, when the agency enables it (see section 3).
• To operate, secure, debug and support the service.

We do not sell data. We do not use it for advertising of our own, for credit or lending decisions, or for building profiles unrelated to the service.

3. Data we send back to advertising platforms

When the agency enables conversion reporting, we send outcome events back to the platform that produced the lead, so that the platform can optimise the campaigns the agency is running:

• Meta Conversions API: the event type and time, the value of the deal, and contact identifiers that are irreversibly hashed with SHA-256 before they leave our systems, in line with Meta’s requirements. Plain-text email addresses and phone numbers are never transmitted.
• Google Ads offline conversions: the event type, time and value, matched using the Google click identifier (gclid, wbraid or gbraid) that was recorded when the visitor arrived. No personal data is sent to Google Ads — matching is by click identifier only.

4. AI processing

We use AI models from Anthropic and OpenAI to analyse campaign performance, classify creative assets, and draft written recommendations. The data sent to these providers is business and advertising performance data. We instruct these providers through their commercial APIs, under terms that do not permit them to use the content of our requests to train their general models.

Google user data obtained through Google APIs is never used to develop, improve, or train generalised AI or machine-learning models.

5. Google user data — Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described in this policy.
• We do not transfer Google user data to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition — and never to advertising platforms, data brokers, or information resellers.
• We do not use Google user data for serving advertisements, and we do not use it to develop, improve, or train generalised AI or machine-learning models.
• We do not allow humans to read Google user data unless we have your explicit consent for specific messages, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymised.

6. Meta Platform Data

Data obtained through Meta’s APIs is used only to provide the reporting and analytics features described here, for the business that authorised the connection. We do not sell it, transfer it to data brokers, or use it to build advertising audiences outside the authorising business. Our use is subject to the Meta Platform Terms.

7. Storage, security and access

• Data is stored in a PostgreSQL database and in private file storage, both access-controlled and reachable only by the application.
• Access tokens for connected advertising accounts are encrypted at rest using AES-256-GCM with a key derived from a secret held only in the hosting environment. Tokens are never exposed to the browser and are never shared with third parties.
• All traffic is served over HTTPS.
• Access inside the platform is role-based: an agency user sees only their own clients, and a client user sees only their own data.
• Staff access to production data is limited to what is necessary to operate and support the service, and is logged.

8. Sub-processors

We use the following providers to run the service:

• Vercel — Application hosting and file storage (United States / EU).
• Neon — PostgreSQL database hosting (Configured cloud region).
• Anthropic — AI analysis of campaign and creative data (United States).
• OpenAI — AI analysis and image generation (United States).

9. Retention and deletion

• Disconnecting an advertising account stops all further access immediately and deletes the stored access token.
• Archiving a client stops all data collection for it: its webhooks and landing pages stop accepting new records, scheduled syncs stop, and nothing further is sent to the advertising platforms. Existing data is kept and stays readable.
• Deleting a client permanently removes that client’s campaigns, metrics, creative records, lead records, files and activity history. It cannot be undone, and only a single non-identifying record of the deletion is kept.
• Closing an account results in deletion of the account’s data within 30 days, except where we are required to retain records by law.
• Backups are retained for a limited period and then overwritten.

Full instructions, including how to request deletion by email, are on our Data Deletion page.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Because we normally act on behalf of an agency, requests from that agency’s end customers are best directed to the agency; we will assist them in responding. You can also contact us directly at info@mucho-media.co.il.

You can revoke our access at any time from the platform itself — in your Google Account permissions or in your Meta Business settings — as well as from inside Mucho Data.

11. Children

The service is a business tool and is not directed to children under 16.

12. Changes

We will update this page when our practices change and revise the “Last updated” date above. Material changes will be communicated to account administrators.

13. Contact

Mucho Media
TODO registered address, city, postal code, country
info@mucho-media.co.il