Privacy Policy

Last updated: 2026-10-22

This policy explains how Mắt Bão Marcom (“the app”), operated by Mat Bao Corporation (“we”, “us”), accesses, uses, stores and shares data, including data received from Google APIs and Meta Platforms.

1. Who uses the app

Mắt Bão Marcom is a business tool operated by Mat Bao Corporationfor its business customers. Each customer connects advertising accounts that it owns or manages. We process this data on behalf of that customer, only to provide the app's features to that customer. Accounts are created by each customer's administrator; there is no public sign-up.

2. Data we access

Google Ads (OAuth scope https://www.googleapis.com/auth/adwords): the list of ad accounts the signed-in Google user can access, account names and IDs, campaigns, ad groups, ads, assets, keywords, search terms, budgets, bidding settings, conversion actions, policy status, and performance metrics such as spend, impressions, clicks and conversions.

Meta (Facebook) Ads, through Facebook Login for Business (permissions ads_read, ads_management, business_management, pages_show_list, pages_read_engagement, pages_manage_ads): the business, ad accounts, pixels and Pages the customer chooses to share, and their campaigns, ad sets, ads, creatives and performance insights.

Account data: the name, work email address and role of each user of a customer's workspace, and a log of the actions they take in the app.

3. How we use the data

• To show performance reports and dashboards to the customer's authorized users.
• To detect problems (for example wasted spend or budget pacing issues) and suggest improvements.
• To create or change campaigns, budgets, bids, keywords, assets and status only when a signed-in user of that customer starts and confirms the change. Every change made through the app is recorded in an activity log.

We do not use data received from Google APIs or Meta Platforms for advertising, to build user profiles, or to train general-purpose AI models.

4. AI processing

To generate analyses and ad copy suggestions, the app sends selected campaign information (such as campaign names, ad text and performance metrics) to the Google Gemini API. Access tokens and passwords are never sent. Results are shown only to the customer's authorized users.

5. Storage and security

• OAuth refresh tokens (Google) and business access tokens (Meta) are stored only on the connection service operated by Mat Bao Corporation, encrypted at rest with AES-256-GCM. They are never sent to the browser.
• A customer's workspace receives only short-lived access tokens, and only for that customer's own connected accounts.
• Each customer's data is kept separate. All traffic uses HTTPS, and only a customer's administrators can connect or disconnect its accounts.

6. Sharing

We do not sell or rent any data. We do not share data received from Google APIs or Meta Platforms with third parties, except: (a) service providers that run the app for us (server hosting, and the Google Gemini API as described in section 4), or (b) when required by law.

7. Google API Services User Data Policy

Mắt Bão Marcom's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Retention and deletion

• Tokens are kept until the customer disconnects the account in the app, revokes access, or asks us to delete them. Disconnecting deletes the stored token and revokes it with Google or Meta.
• You can revoke access at any time at myaccount.google.com/permissions (Google) or in Facebook Settings → Business Integrations (Meta).
• To ask us to delete data we hold, see the data deletion page or contact us using the details below. We will delete it within 30 days.

9. Children

The app is a business tool and is not directed at children under 16.

10. Changes to this policy

We will update the date at the top of this page when this policy changes.

11. Contact