Privacy Policy

What we collect

We collect the information you provide when creating an account — your email, name, and company details. When you upload media plans for analysis, we process the data you share including budget allocations, channel mix, target audiences, and campaign timing. We also collect usage data to improve our services.

How we use your data

Your data is used solely to provide our media plan analysis services — scoring your plans, generating insights, benchmarking against industry standards, and providing outcome tracking. We never sell your data to third parties. Aggregated, anonymized benchmark data may be used to improve industry insights for all users.

Encryption and storage

All sensitive data is encrypted at rest using AES-256-GCM encryption. Your media plans, analyses, and files are stored securely on Supabase (EU-West) with industry-standard security measures. We retain your data for 12 months after your last activity, after which it is automatically and permanently deleted.

Your rights

• Right to export: Download all your data in JSON format anytime from your account settings.
• Right to delete: Request account deletion. We provide a 30-day grace period during which you can cancel before permanent deletion.
• Withdraw consent: You can revoke marketing consent or data processing permissions at any time.

Sub-processors

We use the following service providers to deliver our services:

• Supabase — Database and storage (EU-West)
• Vercel — Hosting and edge infrastructure
• Groq — AI inference for analysis
• Google (Gemini) — AI inference for analysis
• Resend — Transactional email
• Stripe — Payment processing
• Modal — Compute infrastructure

Compliance

We comply with the EU General Data Protection Regulation (GDPR), Singapore Personal Data Protection Act (PDPA), Philippines Data Privacy Act, Thailand Personal Data Protection Act, and Malaysia Personal Data Protection Act. For GDPR, we operate as a data processor where applicable. Our legal basis for processing is contract performance and legitimate interest.

Contact us

For data protection inquiries, deletion requests, or to exercise your rights, contact us at privacy@yourmediastudio.com