Privacy policy

Who uses Marketing Nexus

Marketing Nexus is used by Marketing Nexus to report on the advertising it manages for its clients. People who sign in are Marketing Nexus staff and, where invited, staff of those clients. It is not a consumer service and is not directed at children.

Information we collect

• Account information: name, email address, role and a securely hashed password for each person who signs in, plus sign-in times and failed sign-in attempts (to protect accounts).
• Advertising data from connected ad accounts: when an ad account is connected through Google Ads (including Google Local Services Ads), Meta (Facebook and Instagram) Ads or Microsoft Advertising, we read the account's name, ID, currency and time zone, its campaigns' names and statuses, and daily performance figures (cost, impressions, clicks, conversions, conversion value and leads). Access is read-only.
• Access tokens: the authorization tokens the ad platforms issue so we can read that data.
• Information you enter: client names, budgets, report settings, notes and emails written in the app.
• Usage records: report-link view counts, the emails the app sends, and standard server logs (such as IP address and time of request) kept by our hosting provider.

We do not collect information about the people who see or click on ads. The ad platforms provide only aggregated campaign figures.

How we use it

• To show advertising performance and budget pacing, produce reports and alerts, and send report emails, for Marketing Nexus and for the client the ad account belongs to.
• To operate and secure the service: signing in, preventing abuse and fixing problems.

We do not sell any information, use it for advertising, build profiles of individuals, or use advertising data for any purpose other than reporting on the account it came from.

Google user data

Marketing Nexus's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request read access to Google Ads reporting data only, use it only to provide the reporting features described here, do not transfer it except as described in this policy, do not use it for advertising, and do not allow people to read it except where you have asked us to, for security, or to comply with the law. It is never used to develop, improve or train general-purpose artificial intelligence or machine learning models.

Who we share it with

• The client the data belongs to, and anyone you send a report or a report link to. Report links can be turned off at any time.
• Service providers that run the app for us, under their own confidentiality and security terms: our hosting provider (Railway), our database provider (Neon), our email delivery provider when email is enabled, and, only when someone uses the optional AI features, Anthropic, which processes the report figures to draft summaries and emails. Anthropic does not use data sent through its commercial API to train its models.
• When the law requires it, or to protect the security of the service.

How we protect it

All connections use HTTPS. Ad-platform access tokens are encrypted in our database with AES-256. Passwords are stored only as salted hashes. Access within the app is limited by role: client users see only their own reports.

How long we keep it

We keep advertising data while the client relationship is active, so reports can compare periods. When an ad account is disconnected, its access tokens are deleted immediately. Other data is deleted when the client or user is removed, or on request as described below. Backups held by our database provider expire on its standard schedule.

Removing access and deleting your data

• Disconnect an ad account in the app (Integrations → Disconnect). This deletes the stored tokens and, for Google, revokes the access at Google.
• Remove the app's access from the ad platform yourself: Google at myaccount.google.com/permissions, Meta at Settings → Business integrations (Facebook) or Business Settings → Integrations (Meta Business Suite), Microsoft at account.live.com/consent/Manage or your organization's Microsoft Entra settings.
• To have your data deleted, email jonesybrando@gmail.com with the subject "Data deletion request" and the email address or ad account concerned. We delete the data within 30 days and confirm when it's done.

Cookies

Marketing Nexus uses one essential cookie to keep you signed in, and short-lived cookies to secure the ad-account connection process. There are no analytics, advertising or tracking cookies.

Changes and contact

If this policy changes, we'll update the date above and, for significant changes, tell signed-in users. For questions or requests about your information, email jonesybrando@gmail.com. See also our terms of service.