Privacy Policy

1. Who we are

Mammoth Agency ("Mammoth", "we", "us") operates the website mammothagency.co and the Mammoth Ad Intel platform. Our registered contact is info@mammothagency.co.

2. What data we collect

When you use our onboarding flow or services, we may collect:

• Your name, company name, and email address
• Ad account identifiers and names (when you grant us access via Facebook Login)
• Advertising performance data from connected ad accounts (spend, impressions, clicks, conversions)
• Basic usage data (pages visited, browser type) via cookies and analytics

3. How we use your data

• To provide advertising analysis, audits, and reporting services
• To connect to your ad accounts on platforms you authorise (Meta, Google Ads)
• To send you reports, insights, and service communications
• To improve our platform and services

4. Facebook data

When you connect via Facebook Login, we request access to your ad accounts through the Meta Business API. We use this access solely to pull advertising performance data for analysis and reporting. We do not sell, share, or transfer your Facebook data to third parties. You can revoke access at any time through your Meta Business Settings.

5. Data storage and security

Your data is stored securely using Supabase (PostgreSQL) with encrypted connections. Access tokens are encrypted at rest using AES-256-GCM. We use Cloudflare and Vercel for hosting, both of which maintain SOC 2 compliance.

6. Data retention

We retain your data for as long as you are an active client. When our engagement ends, we will delete your connected account data within 90 days of your request. You can request deletion at any time by emailing us.

7. Third-party services

We use the following third-party services that may process your data:

• Meta (Facebook) - ad account data via Marketing API
• Google - ad account data via Google Ads API
• Supabase - database hosting
• Vercel - application hosting
• Cloudflare - CDN and media storage
• Stripe - payment processing

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Revoke access to connected ad accounts at any time
• Withdraw consent for data processing

9. Cookies

We use essential cookies for authentication and session management. We use Google Tag Manager for analytics. You can disable cookies in your browser settings, though this may affect functionality.

10. Contact

For any privacy-related questions or requests, contact us at info@mammothagency.co.