Back to home

Legal

Privacy Policy

Effective date: May 24, 2026. This policy covers Media Analytics Engineering, its website, and the data pipeline, automation, and AI analytics services it provides to clients. Legal review is recommended before relying on this as final.

Scope

  • This policy describes how Media Analytics Engineering (“we,” “us,” or “our”) collects, uses, and protects information through this website and through consulting, data-pipeline, automation, and AI-analytics services provided to clients.
  • This policy applies to visitors to this site, prospective clients who submit inquiries, and clients and their authorized users who access platform integrations, dashboards, workflow tools, or managed services.
  • This site is intended for business audiences. We do not knowingly collect information from individuals under 18.

Information We Collect

  • Inquiry and contact information: name, company name, email address, job title, and project or budget details submitted through contact or scheduling forms.
  • Client and engagement information: business requirements, system architecture context, credentials or OAuth tokens for authorized integrations, scoping documents, and communications related to service delivery.
  • Platform and analytics data: social media performance metrics (impressions, engagements, video views, comments, follower data) from platforms a client authorizes — including YouTube, Facebook, Instagram, X, TikTok, and Snapchat; paid media campaign data (spend, delivery, pacing, frequency, conversion) from Google Ads, Meta Ads, X Ads, TikTok Ads, and Snapchat Ads; website analytics from Google Analytics 4; and CMS or operational records from systems such as Airtable, Monday.com, Google Sheets, and Google Docs.
  • AI-processed content data: asset metadata, content tags, sentiment scores, emotion classifications, entity extractions, and scoring outputs generated by processing client assets and copy through AI models (including Google Gemini and Anthropic Claude).
  • Technical and usage data: IP address, browser type, device type, pages visited, referring URL, and session duration collected automatically when you use this site. This data is used for security, diagnostics, and aggregate analytics.
  • Workflow and audit data: logs of automated action executions, approval-queue events, budget change records, and campaign status updates generated by workflow automation features.

How We Use Information

  • To respond to inquiries, schedule discovery calls, prepare proposals, and onboard clients.
  • To design, build, operate, monitor, and maintain data pipelines, API integrations, dashboards, content-scoring systems, sentiment analysis workflows, automation rules engines, asset management systems, and custom MCP servers as specified in engagement agreements.
  • To generate, store, and surface AI-assisted metadata, scores, recommendations, and classifications for client content and campaigns.
  • To execute and log automated actions (budget adjustments, campaign pauses or activations, CMS record updates, Slack or Teams notifications) that clients configure and authorize within workflow tools.
  • To troubleshoot issues, investigate anomalies, and audit automated workflows or connected integrations.
  • To send operational communications such as system alerts, status updates, credential-expiry notices, and engagement-related correspondence.
  • To comply with legal, contractual, accounting, security, and audit obligations.

Our Role as a Service Provider

  • When we process data from a client's connected platforms, CMS systems, or ad accounts, we do so as a service provider or data processor acting on the client's instructions. The client remains responsible for the lawful basis of that data and for maintaining the permissions required by each connected platform.
  • We do not sell client data to third parties. We do not use client platform data for our own advertising purposes, for cross-client benchmarking without explicit consent, or for any purpose outside the scope of the services agreement.
  • Client data is logically separated from other clients' data and is accessible only to personnel who need it to deliver the agreed services.

Platform Integrations and Third-Party Processors

  • Delivering our services requires us to route data through or store data with third-party infrastructure providers and platform APIs. Those providers operate under their own terms and privacy practices.
  • Infrastructure and AI: Google Cloud Platform (compute, Cloud Storage, BigQuery), Anthropic (Claude API for AI processing), Google Gemini API.
  • Analytics and advertising APIs: Google Analytics 4, Google Ads, Meta Ads, X Ads, TikTok for Business, Snapchat Ads.
  • Organic social APIs: YouTube Data API, Facebook Graph API, Instagram Graph API, X API, TikTok Content API, Snapchat API.
  • CMS and operational systems: Airtable, Monday.com, Google Sheets, Google Docs, Google Drive.
  • Messaging and workflow destinations: Slack, Microsoft Teams.
  • Communication and scheduling: email delivery providers, calendar and scheduling tools (such as Calendly).
  • We will update this list as the set of sub-processors materially changes and, where required by applicable law or contract, will notify affected clients of changes.

AI Processing

  • Content assets, captions, comments, and associated metadata submitted to AI pipelines are processed to generate tags, scores, sentiment classifications, and editorial suggestions. These outputs are stored and surfaced in client dashboards.
  • AI outputs are probabilistic and may be incorrect, incomplete, or contextually inappropriate. They are intended to assist human review and should not be acted on automatically without appropriate validation.
  • When client content is sent to third-party AI APIs (Gemini, Claude), it is subject to those providers' API data-handling terms. We use API access, not the consumer products, and data submitted through the API is not used to train those providers' foundation models under their current API terms. Clients should review those terms directly.

Retention and Security

  • Contact inquiry data is retained for a reasonable period to manage the sales process and any resulting engagement, typically no more than three years after the last interaction unless a longer period is required.
  • Client engagement data, pipeline configurations, and workflow logs are retained for the duration of the engagement plus a reasonable post-engagement period for audit, support, and legal purposes, as specified in the services agreement.
  • Platform credentials and OAuth tokens are stored with encryption at rest and are revoked and deleted when an engagement ends or when a client requests removal.
  • We apply administrative, technical, and organizational security measures appropriate to the sensitivity of the data, including access controls, encryption in transit and at rest, and audit logging. No system is perfectly secure, and we cannot guarantee that unauthorized access, disclosure, or loss will never occur.
  • In the event of a security incident affecting client data, we will notify affected clients promptly and in accordance with applicable law and contractual obligations.

Cookies and Site Analytics

  • This site may set essential cookies required for session management and security. It may also use analytics cookies or scripts to understand aggregate site usage.
  • Where applicable law requires consent before setting non-essential cookies, a consent mechanism will be implemented before those cookies are active. You can disable cookies in your browser settings, though some site functionality may be affected.

Your Rights and Choices

  • You may request access to, correction of, or deletion of personal information we hold about you. Requests are subject to verification, legal retention obligations, backup constraints, and contractual limitations.
  • Clients may request disconnection of integrations, revocation of OAuth tokens, and deletion of platform data collected under their engagement at any time. We will fulfill such requests in accordance with the services agreement and applicable law.
  • If you are in the European Economic Area, United Kingdom, or another jurisdiction with applicable privacy rights, you may have additional rights including data portability and the right to object to certain processing. Contact us to make a request.
  • We will respond to verifiable requests within the timeframe required by applicable law.

Updates to This Policy

  • We may update this policy from time to time. When we make material changes, we will update the effective date and, where appropriate, notify affected clients directly.
  • Continued use of this site or our services after an updated policy is posted constitutes acceptance of the updated terms.

Contact

For privacy questions, data requests, or to report a concern, contact us through the inquiry form on this site or at the email address provided in your engagement agreement.