Privacy policy.

Who is responsible

This policy explains how Mediacendo handles personal information on mediacendo.com and in the Mediacendo paid-media planning, activation and reporting application. Mediacendo is the service operator and the controller for website inquiries, account administration, service security and our own business communications. Use the privacy contact form below to contact us.

For brand and campaign information that an agency, brand or employer puts into its workspace, that organization normally decides why and how it is used. In that case, Mediacendo processes the information on its behalf, under its instructions and the applicable service and data-processing arrangements. Contact your workspace administrator first for requests about your organization’s campaign data; we can help route a request if you are unsure.

Information we handle

Information comes from you, your workspace administrators and collaborators, the platforms you authorise, and publicly available material used in requested brand or market research. Do not upload unnecessary personal information, sensitive personal data or customer-level CRM lists into a brief.

Account and contact details needed for sign-in or a reply are required for those functions. Platform connections, optional profile fields and optional tracking are your choice; declining them limits only the relevant features.

Platform connections

You authorise access through the platform’s own permission screen. We do not ask for your Facebook or Google account password. Authorization may reveal a list of accounts you can access so you can choose which belong to a brand. Brand campaign selectors use the accounts and Pages assigned to that brand.

Platforms also process information under their own terms and privacy policies. Their availability and permissions do not follow automatically from a Mediacendo subscription. We do not collect private social messages or individual followers through the current reporting and Page-post features.

LinkedIn advertising connections. If you authorise LinkedIn access, we retrieve the advertising accounts your permission allows, including their identifiers, names, currencies and status, so you can assign them to a brand. The advertising connection requests account access, reporting and supported ad-management permissions. Supported changes require an explicit user action and the relevant LinkedIn role. Access tokens are encrypted in private server storage and are not returned to the browser. Connecting does not create or launch LinkedIn ads. Disconnecting removes the active stored credential; you can also revoke Mediacendo under LinkedIn’s permitted services settings.

Google Ads and Google Analytics data

Mediacendo offers separate Google Ads and Google Analytics 4 (GA4) connections. Each requests access when you choose that service in Brand Intelligence → Connections → Add connections. Connecting one does not require connecting the other. You sign in and authorise access on Google’s own website; Mediacendo does not receive your Google password.

Google Ads: information accessed and actions

The Google Ads connection requests https://www.googleapis.com/auth/adwords. We access the advertiser and manager accounts available to your Google user, including identifiers, names, currency, time zone and access/status information, so you can assign accounts to a brand. Supported features read campaign, ad-group and ad configuration, budgets, bidding and targeting settings, keywords, asset and conversion-action identifiers, audience definitions and status, and aggregate performance such as spend, impressions, clicks, conversions and conversion value. Linked YouTube video/channel identifiers may be read through Google Ads; this is not separate access to your YouTube account.

At your explicit request and subject to your Google Ads role, supported features create campaigns, ad groups, ads and targeting from an approved plan, and change supported campaign statuses, budgets or bids. The audience library can synchronise supported audience definitions and create supported lists in your selected Google Ads account. These operations do not download individual audience members or customer contact lists. We do not request permission to manage Gmail, Drive, Photos, Contacts or Calendar through this connection.

GA4: read-only website reporting

The GA4 connection requests only https://www.googleapis.com/auth/analytics.readonly. The Analytics Admin API lists accessible accounts and properties and reads property names, identifiers, reporting currencies and time zones. The Analytics Data API returns aggregate reports for the properties and dates you select: sessions, engaged sessions, active users, page views, key events and revenue, with supported breakdowns by session source/medium, campaign name or landing-page path. We store those report results and related property metadata to display and export website reporting alongside your media results.

The current GA4 connector does not request individual user exports or user identifiers, install tracking tags, edit Analytics settings, create audiences, change permissions or publish ads. GA4 report imports run through the Analytics APIs, not an AI model. Read-only Analytics access is separate from the optional Google Analytics tag on our public website.

Use, sharing and Limited Use

Google API information, including raw account/configuration fields, aggregate reports and derived results, is used to provide the account selection, supported advertising actions and reporting features you request. It is accessible to authorised workspace members and reviewers according to the access you grant. Our hosting and necessary service providers process it to operate and secure Mediacendo. Relevant instructions and assets are sent back to Google Ads when you request an advertising action. Reports may be shared or exported by your authorised users; choose recipients carefully.

Mediacendo’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable. We do not sell Google connection data, transfer it to data brokers, use it for our own advertising or unrelated advertising profiles, use it for lending or credit decisions, or use it to train general-purpose AI/ML models. This applies to raw, aggregated and derived Google API information. Public website advertising pixels do not receive the private Google Ads or GA4 account data imported into your workspace. Human access is limited to authorised user workflows and the support, security, legal or other circumstances permitted by that policy.

Protection, retention and deletion

Google OAuth refresh tokens are encrypted in private server storage and are not returned to the browser. HTTPS, workspace and brand permissions, request verification and audit records protect access. Account metadata and reports are held on our access-controlled hosting infrastructure; we do not claim that every reporting record is encrypted at rest. Processing may take place outside the UK as explained below.

Connection credentials are retained while the connection remains active. Disconnecting Google Ads or GA4 removes the credential from the active connection record and stops its further use by Mediacendo; you can also revoke access in your Google Account connections. Disconnecting Google Ads does not pause or delete campaigns on Google. Previously imported Ads history, campaign records, exports, audit records and backups are not automatically erased by disconnecting. Disconnecting GA4 removes its saved reports from the active connection record; exported copies, backups and retained audit records require separate deletion handling. The GA4 connector keeps up to 20 recent report snapshots per connection; this is a count limit, not a fixed time-based deletion period.

Workspace information is retained while needed for the service under the customer’s instructions; there is currently no single automatic deletion period for all imported Ads history. Request deletion of a connection’s stored data or an entire account at support@mediacendo.com, identifying the account email, workspace and relevant platform. We verify authority, respond normally within one calendar month, and explain any lawful retention or extension. Backups are addressed through the applicable recovery-retention cycle, so deletion is not instantaneous across every copy. See Data Deletion Instructions and the retention section below.

Optional AI reporting assistant. When you ask the Reporting or Optimise assistant a question, Mediacendo sends your question and the relevant selected aggregate advertising results, campaign names, saved planning allocations, cached campaign settings or aggregate GA4 source/medium results to OpenAI to produce that answer. This analysis is separate from importing reports. It does not include connection credentials, individual audience members or user-level Analytics records. Assistant requests use the OpenAI API with response storage disabled; the provider's applicable API processing and retention terms still apply. The assistant reads data and recommends actions; it does not change ads.

AI-assisted work

When you request AI research, brief extraction, planning, review or creative generation, the relevant input is sent to the configured AI service. It may include your brief, brand knowledge, product and audience descriptions, uploaded text or images and the campaign context needed for that task. Supported providers include Anthropic, OpenAI and Google, depending on the feature and workspace configuration.

AI processing is separate from connecting a Google Ads account. Authentication secrets and platform access tokens are not part of AI prompts. Do not include personal information that the task does not need. Data submitted to a provider is subject to its applicable API terms, retention and processing arrangements; we do not promise that every provider has identical retention or training settings.

AI outputs support campaign decisions and require human review. Mediacendo does not use these features to make solely automated decisions about individuals with legal or similarly significant effects. Audience recommendations may describe groups for advertising; the connected advertising platform controls its own delivery and profiling.

Why we may use personal information

For processing where Mediacendo is the controller, we use the following lawful bases under the UK GDPR and, where applicable, the EU GDPR:

• Contract or steps you request before a contract: supplying an individual’s subscribed service and responding to their request for a proposal or demonstration.
• Legitimate interests: operating a business service, working with the employees of business customers, providing support, preventing misuse, protecting accounts and keeping proportionate records. We consider the impact on individuals and their reasonable expectations.
• Consent: optional analytics and advertising cookies, and any other processing for which we expressly ask for consent. A platform’s authorization screen gives technical permission for an integration; it does not replace the separate lawful-basis assessment for personal data.
• Legal obligation: records or disclosures required by law, including applicable accounting and regulatory obligations.

When we act as a processor, the customer controller determines the lawful basis and gives processing instructions. We do not sell personal information or connected account data.

Who can receive information

Information can be accessed by the authorized members and reviewers of your workspace or brand, according to their permissions. Review links may allow people with the link and any required password to view the information shared. Use named-user access for confidential work and choose recipients carefully.

Service providers process information needed to deliver their services, including Namecheap for website and application hosting; email delivery providers; FormSubmit for messages sent through our inquiry form; configured AI API providers; and Meta or Google for the platform actions you request. Google Analytics, Meta Pixel and TikTok Pixel process public website visit information only when their optional tracking category is allowed. Private workspace records and inquiry fields are not sent to these public marketing tags.

We may also disclose information where required by law, to address fraud or security incidents, to professional advisers bound by confidentiality, or in a business transfer subject to applicable safeguards and platform restrictions. Connected Google data remains subject to Google’s permitted-use and transfer restrictions.

Storage, access and security

Application records and uploads are stored on our hosting infrastructure. The public website, application and private server configuration have different access arrangements. Credentials and private configuration are kept outside public website files. Stored Meta and Google connection tokens are encrypted; application passwords are stored as password hashes rather than readable passwords.

HTTPS protects traffic. Workspace and brand permissions restrict access, and recorded actions and approvals support investigation and accountability. Authorized support or service administration may require access for a specific support or security purpose. We do not claim that every campaign record or uploaded file is encrypted at rest, or that any system can guarantee absolute security.

Processing outside the UK

Hosting, email, advertising platforms and configured AI services may process information outside the UK or European Economic Area, including in the United States. Provider locations and processing arrangements depend on the services used; the service is not offered as UK-only hosting.

International transfers of personal information require a valid legal arrangement where applicable. Depending on the recipient, this can be an applicable adequacy decision or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum and, for relevant EU transfers, standard contractual clauses. These mechanisms are not interchangeable and a provider’s location alone does not establish compliance.

Contact us for the providers, locations and applicable transfer arrangements for your workspace. Specific contractual safeguards and customer data-processing terms must be confirmed for the services in use; this notice does not assert that every provider has the same arrangement.

How long information is kept

We use the purpose and continuing need for the information to decide retention. The current service does not apply a single automatic deletion period to all workspace records.

• Inquiries and bookings: kept while arranging or following up the request and for any proportionate business, complaint or legal record that remains necessary.
• Accounts and campaign records: kept while the workspace needs them, subject to its agreement, administrator instructions and deletion requests. Archiving or removing a row from a view is not necessarily permanent deletion.
• Audit and approval history: may remain necessary for security, accountability and resolving disputes after an item is archived. Retained information is limited to the purpose and any legal requirement.
• Connection credentials: retained while needed for the connection. Disconnect removes credentials from the active connection record. Older versions, backups or already-imported records require separate deletion handling.
• Security logs and backups: retained according to operational, security and recovery needs. A deletion request must also account for backup copies and any applicable legal hold; it is not a promise of instantaneous erasure.

Cookie choices are stored for 180 days. Analytics and advertising provider retention varies with their configuration and policies. Ask us for the applicable retention and deletion arrangements for your workspace.

Disconnecting and requesting deletion

1. In the app, open Brands → your brand → Connections and disconnect the relevant authorization. A user with the required brand permissions can do this.
2. Revoke Mediacendo’s access in the connected platform’s own account settings if you also want to remove the authorization there. For Google, use your Google account connections; for Meta, use the relevant Apps and Websites or Business Integrations settings.
3. To delete information already held by Mediacendo, use the privacy contact form and choose Delete my data. Include your account email, workspace or brand, the platform involved and what you want removed. Do not send passwords, access tokens or identity documents in the form.

Disconnecting prevents future use of that connection in Mediacendo. It does not by itself erase saved reports, selected creative posts, campaign history or audit records, nor delete anything from your advertising-platform account. We verify your request, work with the workspace controller where needed, and explain any lawful reason for retaining particular records. You do not need a paid subscription to make a privacy request.

For step-by-step instructions and our support email, see Data Deletion Instructions.

Your rights and choices

Depending on the circumstances and applicable law, you can request access to your information, correction, deletion, restriction of processing or transfer of eligible information. You can withdraw consent at any time without affecting the lawfulness of earlier consent-based processing.

Use the form below for rights requests. We may need proportionate information to verify your identity. We normally respond without undue delay and within one month, subject to the permitted time rules and extensions; we explain if more time is needed. Requests are normally free.

You can complain to the UK Information Commissioner’s Office, telephone 0303 123 1113, or your relevant local supervisory authority. You do not have to contact us first, although we welcome the opportunity to resolve your concern.

United States and California privacy

We accept privacy questions and requests from US residents. Where applicable state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, apply, rights can include access to information about data use, correction, deletion, portability, opting out of sale or sharing, and non-discrimination for exercising a right. Coverage depends on the law, the business and the information involved; this notice does not assert that every state law applies to Mediacendo.

Use the privacy contact form below to make a request or contact us about an authorized agent. We may need to verify identity and authority proportionately. Applicable exceptions and statutory response periods apply. For workspace information, we coordinate with the customer organization that controls it. A customer-selected advertising platform or AI provider has its own privacy responsibilities.

We do not sell connected account data. Optional Meta Pixel and TikTok Pixel advertising activity on the public website may involve sharing information for cross-context advertising if you allow it. Use Your privacy choices to reject optional tracking. We honour browser Global Privacy Control on this website by disabling future optional analytics and marketing tags, including where a previous choice allowed them. This does not undo information already received by providers.

The categories, sources, purposes, providers and retention practices are described above. Mediacendo does not require sensitive identity documents in the privacy request form. We do not offer financial incentives for providing personal information or deny the service merely for making a privacy request.

Cookies and public website tracking

Essential storage supports sign-in, security and cookie preferences. Optional Google Analytics, Meta Pixel, TikTok Pixel, X Pixel and ChatGPT Ads Pixel are off until you allow the relevant category. They help us measure public website use and, for advertising pixels, advertising and retargeting. These tags are not installed in signed-in app pages.

Read the cookie policy for the categories and identifiers. You can reject optional tracking or change your choice using Cookie settings. You can also manage cookies in your browser. Withdrawing website advertising consent is separate from disconnecting an advertising account in the app.

Scope and updates

Mediacendo is a business service and is not intended for children. We do not knowingly offer accounts to children. Tell us if you believe a child’s personal information has been supplied.

We update this notice when our processing or services change. The date above identifies the current version. A material change to connected-platform use may require an updated in-product notice and fresh authorization before that use begins.

Contact us about privacy

Ask a question or request access, correction or deletion. Include only the information needed to locate your account or request.