Privacy Policy

1. Who we are

Marketing Reporting Manager ("the service", "we") is operated by Marketing Reporting Manager. The service lets you connect your advertising and social media accounts and view the performance data from those accounts in one reporting dashboard. It is a read-only reporting tool: it does not create, edit, pause or delete campaigns, change budgets or post content.

Questions about this policy or your data: hi@shaanejaz.com.

2. Information we collect

Account information. Your email address, and your name and profile image if you sign in with Google, plus your chosen time zone. If you sign up with a password, it is handled by our authentication provider and stored only as a secure hash; we cannot see it.

Workspace information. The names you give workspaces and clients, member roles, saved report templates and saved views.

Data from platforms you connect. When you authorize a connection (for example Meta Ads, Google Ads or LinkedIn Ads) we receive, only with your permission and only the read-only scopes we request:

• Ad account identifiers, names, currency and time zone, and which accounts your login can access.
• Campaign, ad set / ad group, ad and creative names, status and metadata.
• Performance metrics such as spend, impressions, reach, clicks, conversions and conversion value, by day.
• The access and refresh tokens the platform issues so we can keep your reports up to date.

We do not collect the personal information of the people who see or click your ads. The metrics are aggregated by the platforms before we receive them.

Technical information. Standard server logs (IP address, browser type, requested pages, errors) and the session data your browser stores so you stay signed in.

3. How we use information

• To authenticate you and keep your workspace secure.
• To sync your connected accounts and show you dashboards, comparisons and reports.
• To produce the exports you request (CSV and PDF).
• To diagnose errors, prevent abuse and provide support.

We do not sell your data, we do not use it for advertising, and we do not use it to train artificial intelligence or machine learning models.

4. Google user data

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data received through Google Ads and other Google APIs is used only to provide the reporting features you see in the service. We do not transfer it to others except as needed to operate the service (see section 6), to comply with law, or with your consent. We do not allow humans to read it unless you ask for support, it is needed for security or abuse investigation, or the law requires it.

5. Meta platform data

Data received from Meta (Facebook and Instagram) through its Marketing API is used only to show you the performance of the accounts you authorized, is not sold or shared for advertising, and is deleted when you ask us to or when you remove your account (see data deletion). You can also remove our access at any time from your Facebook settings under Business Integrations.

6. Who we share data with

We use a small number of service providers to run the service: our database and authentication provider (Supabase) and our web hosting provider. They process data on our instructions and only to provide those services. We do not share your data with anyone else, except where the law requires it or you ask us to (for example sharing a report with a person you choose).

Within a workspace, other members can see the data according to the role you give them.

7. Security

• Connection is over HTTPS.
• Platform access tokens are encrypted before they are stored and are only readable by our server, never by your browser.
• Workspace data is separated with database row-level security so a user cannot read another workspace's data.
• The service never asks for your Meta, Google or LinkedIn password.

No system is perfectly secure, and we cannot guarantee absolute security.

8. Retention and deletion

If you disconnect a platform inside the service, we delete the stored access tokens for that connection straight away and stop syncing it. Reporting data already synced for that account stays in your workspace until you ask us to delete it.

You can ask us to delete your account and all workspace data we hold at any time; we complete verified requests within 30 days. Copies in provider backups are removed when those backups expire on their normal schedule. Instructions are on our data deletion page.

9. Your rights

Depending on where you live (for example the EU, UK or California) you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. Contact hi@shaanejaz.com and we will respond within a reasonable time.

10. Cookies and local storage

We use only what is needed to keep you signed in and remember your interface settings. We do not use advertising or cross-site tracking cookies.

11. Children

The service is for businesses and is not directed to anyone under 18.

12. International processing

Our providers may process data in countries other than yours. We rely on them to protect it appropriately.

13. Changes to this policy

If we make material changes we will update the date at the top of this page and, where appropriate, notify you in the service or by email.

14. Contact

Marketing Reporting Manager · hi@shaanejaz.com