Privacy Policy

This policy explains what information Mavyn ("Mavyn", "we") collects when you use the Mavyn platform, how we use it, and the choices you have.

Information we collect

• Account information: your name and email address from Google when you sign in.
• Business information you enter: your business name, website, location, offer, customers, goals, budget limits, notes and any image links you provide.
• Advertising account access: when you connect Google Ads, Microsoft Advertising or Meta, we receive access and refresh tokens from that platform. We store them encrypted (AES-256-GCM) and use them only to act on the accounts you choose.
• Advertising data: campaign names, settings, budgets and performance figures (impressions, clicks, cost, conversions and conversion value) from the ad accounts you connect.
• Activity records: a log of every change Mavyn proposes or makes, with the reason and outcome.
• Technical data: standard server logs (such as IP address, browser and time of request) kept by our hosting provider for security and troubleshooting.

How we use information

• To provide the service you ask for: building, launching, monitoring and optimizing campaigns in the ad accounts you connect, within the limits you set.
• To show you reports and a full record of what Mavyn changed and why.
• To secure the service, prevent abuse and fix problems.

We do not sell your information, use it for advertising to you, or share your advertising data with other customers.

Google user data

Mavyn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Ads data only to provide and improve the user-facing features of Mavyn for the account owner who connected it. We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you. Humans do not read it unless you ask us to for support, it is needed for security, or the law requires it. We do not use Google user data to train general-purpose AI models.

Service providers

We use a small number of providers to run Mavyn, each bound by their own data-protection terms:

• Vercel for hosting and scheduled jobs.
• Neon for our database.
• Anthropic (Claude) to analyze your business information and campaign data and to write campaigns and recommendations. Data sent to Anthropic through its commercial API is not used to train its models.
• Google, Microsoft and Meta, whose platforms you connect and whose own privacy policies apply to your ad accounts.

Retention and deletion

We keep your information while your account is active. When you disconnect an ad account in Settings, we delete its stored tokens immediately. You can also revoke Mavyn's access at any time in your Google, Microsoft or Meta account settings. To delete your Mavyn account and all associated data, email [contact email]; we will complete deletion within 30 days, except where the law requires us to keep records.

Security

Tokens are encrypted at rest, connections use HTTPS, and access to production systems is limited. No system is perfectly secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain uses. Contact us at [contact email] to make a request.

Children

Mavyn is a business tool and is not intended for anyone under 18.

Changes

We will post any changes to this policy here and update the effective date. If changes are significant, we will notify you by email or in the app.

Contact

Questions about this policy: [contact email].