MuzAds is an advertising management platform that allows users to connect their Google Ads and Meta (Facebook/Instagram) advertising accounts to create, manage, and optimise campaigns from a single dashboard.

We are the data controller for personal information collected through muzads.com. For questions about this policy, contact us at info@muzads.com.

Account information

• •Email address and name (from registration or Google Sign-In)
• •Profile information provided during sign-up
• •Authentication credentials (passwords are hashed; OAuth tokens are encrypted)

Platform credentials you provide

• •Google Ads: OAuth 2.0 refresh token, Client ID, Client Secret, Developer Token, and Customer ID
• •Meta Ads: Long-lived OAuth access token obtained via Facebook Login
• •All credentials are encrypted at rest using AES-256 (Fernet) and are never exposed in API responses

Advertising account data (fetched on your behalf)

• •Campaign names, objectives, budgets, and statuses
• •Ad creative content (headlines, descriptions, image/video URLs)
• •Performance metrics (impressions, clicks, spend, conversions)
• •Audience targeting parameters

Usage data

• •Log data (IP address, browser type, pages visited, timestamps)
• •Actions taken within the platform (campaigns created, edited, deleted)

What Google data we access

When you connect your Google Ads account, MuzAds requests the following OAuth 2.0 scope:

This scope allows us to:

• •Read your Google Ads account structure (campaigns, ad groups, ads)
• •Create and modify campaigns, ad groups, ads, and budgets on your behalf
• •Fetch performance metrics and reports from your account
• •Manage campaign status (activate, pause, remove)

Limited Use

• •We only use Google Ads data to provide the MuzAds service to you. We do not use it for advertising, selling data, or any other purpose.
• •We do not allow humans to read your Google Ads data unless you explicitly request support and grant permission.
• •We do not transfer your Google Ads data to third parties except as required to operate the service (e.g. our encrypted database).
• •We do not use Google Ads data to train AI or machine learning models.

How we store Google credentials

• •Your OAuth refresh token, Client Secret, and Developer Token are encrypted using AES-256 before being written to our database.
• •Access tokens (short-lived, ~1 hour) are refreshed automatically using your stored refresh token.
• •We never log, print, or expose raw credential values in API responses, server logs, or error messages.

Revoking access

You can disconnect your Google Ads account at any time from the Linked Accounts page. This immediately marks your credentials as inactive. You can also revoke MuzAds's access directly from your Google Account permissions page.

When you connect your Meta Ads account via Facebook Login, MuzAds requests the following permissions:

• •ads_management — create and edit campaigns, ad sets, and ads
• •ads_read — read campaign performance data
• •pages_read_engagement — read your connected Facebook Page
• •business_management — access your Business Manager

Meta access tokens are long-lived (60 days) and are exchanged automatically. They are stored encrypted in our database and are only used to perform actions you initiate withinMuzAds. We do not sell, share, or use Meta data outside of providing the service.

• •To authenticate you and maintain your session
• •To connect to your advertising accounts and execute actions you request (create campaigns, fetch analytics, manage budgets)
• •To display campaign performance data within the dashboard
• •To send transactional emails (account alerts, connection expiry warnings)
• •To improve platform reliability and debug errors (using anonymised logs)
• •To comply with legal obligations

We do not use your advertising data for our own marketing, sell it to third parties, or use it for purposes not described in this policy.

• •All data is stored on servers located in [your hosting region, e.g. EU / US East].
• •Database connections use TLS encryption in transit.
• •OAuth tokens and API credentials are encrypted at rest using AES-256 (Fernet).
• •Passwords are hashed using bcrypt and are never stored in plain text.
• •Access to production databases is restricted to authorised personnel only.
• •We conduct periodic security reviews of our infrastructure.

While we take appropriate measures to protect your data, no system is completely secure. If you believe there has been a security incident, contact us immediately at info@muzads.com.

We do not sell your personal data. We share data only in these limited circumstances:

• •Service providers: Our hosting provider and database provider to operate the service. They are contractually bound not to use your data for their own purposes.
• •Google and Meta: When we make API calls on your behalf, your credentials and campaign data are transmitted to Google and Meta according to their terms.
• •Legal requirements: If required by law, court order, or to protect our legal rights.
• •Business transfer: In the event of a merger or acquisition, data may be transferred — you will be notified before your data becomes subject to a different privacy policy.

• •Account data is retained for as long as your account is active.
• •If you delete your account, your personal data and credentials are deleted within 30 days.
• •Disconnecting a platform account immediately deactivates the credentials; they are purged within 7 days.
• •Anonymised analytics logs may be retained for up to 12 months for debugging purposes.
• •Backup copies may persist for up to 90 days after deletion before being purged.

Depending on your location, you may have the following rights:

• •Access: Request a copy of the personal data we hold about you.
• •Correction: Request correction of inaccurate data.
• •Deletion: Request deletion of your account and associated data.
• •Portability: Request your data in a machine-readable format.
• •Objection: Object to processing of your data in certain circumstances.
• •Withdraw consent: Disconnect any platform account at any time from the Linked Accounts page.

To exercise any of these rights, email info@muzads.com. We will respond within 30 days.

MuzAds uses essential session cookies to keep you logged in. We may also use privacy-respecting analytics (e.g. Plausible or similar) to understand aggregate platform usage. We do not use advertising cookies or tracking pixels on our own site.

You can disable cookies in your browser settings; however, this will prevent you from staying logged in.

MuzAds is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

We may update this policy from time to time. If we make material changes — particularly to how we use Google or Meta data — we will notify you by email and/or by displaying a prominent notice in the platform at least 7 days before the change takes effect. Continued use of MuzAds after that date constitutes acceptance of the updated policy.

For privacy-related questions or data requests: