Privacy Policy

Mediatrow is an AI Marketing OS for creating, scheduling, publishing, and analyzing social media content across connected platforms. Controller contact for privacy requests: privacy@mediatrow.com.

Account and profile

• Name, email address, password (stored hashed), account type, and organization name if provided
• Workspace and team membership details, roles, and invitation emails
• Plan, subscription, and usage information associated with workspaces

Customer Content

• Posts, captions, drafts, schedules, media files, and brand-training materials you upload or generate
• Comments and related engagement data synced or managed through the Service
• Publish results (success/failure, platform post IDs, URLs, and error messages)

Connected social accounts

• Platform identity (e.g. handle, page/channel IDs), follower counts, connection status
• OAuth access and refresh tokens, stored encrypted, used only to act on your instructions (publish, sync metrics, manage comments where enabled)

Technical and usage data

• Authentication cookies and workspace selection cookies (see our Cookie Policy)
• Theme preference and similar settings stored in local browser storage
• Device/browser information, IP address, timestamps, and product usage events needed for security and operations

Communications

• Emails you send us, and transactional messages we send (password reset, invitations, security notices)
• Optional product notification preferences you configure in Settings

• Provide, operate, secure, and improve the Service
• Authenticate users, manage workspaces, and enforce plan limits
• Connect to social platforms and publish or sync data you request
• Generate AI-assisted content via third-party providers when you use those features
• Host and deliver media through our media infrastructure partners
• Send transactional and (where permitted) product communications
• Detect abuse, prevent fraud, and comply with legal obligations

We process personal data as needed to perform our contract with you, with your consent where required, for legitimate interests (such as securing and improving the Service), and to meet legal requirements.

When you use AI features (captions, adaptation, image/video generation, suggested replies, brand voice training), relevant prompts, brand notes, and media may be sent to our AI provider (currently Google Gemini / Google AI services) to produce output. Do not submit sensitive personal data in prompts unless necessary. Provider processing is also governed by their terms and privacy notices.

We do not sell your personal information. We share data only as needed:

• Service providers — hosting, database, media storage (e.g. Cloudinary), email delivery, AI providers, and similar processors under appropriate agreements
• Social platforms — when you connect an account and instruct us to publish, sync, or interact
• Team members — within workspaces you belong to, according to roles and permissions
• Legal and safety — if required by law, regulation, legal process, or to protect rights, safety, and integrity of the Service
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards

We retain account and workspace data while your account remains active and as needed to provide the Service. Social tokens are cleared when you disconnect an account, where technically feasible. We may retain limited records after deletion for security, dispute resolution, backups, and legal compliance, for a period consistent with those purposes.

We use industry-standard measures including encrypted transport (HTTPS in production), hashed passwords, and encryption of social OAuth tokens at rest. No system is perfectly secure; please use strong passwords and manage teammate access carefully.

We and our processors may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for cross-border transfers.

Depending on your location (including the EEA, UK, California, and other regions), you may have rights to access, correct, delete, export, or restrict processing of your personal data, to object to certain processing, and to withdraw consent where processing is consent-based.

To exercise these rights, email privacy@mediatrow.com or use Contact. You may also have the right to lodge a complaint with a supervisory authority.

Account holders can update profile details and notification preferences in Settings, and disconnect social accounts from Connect.

The Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

We use essential cookies and similar technologies for authentication and workspace context. Details are in our Cookie Policy.

We may update this Policy periodically. The “Last updated” date will change when we do. Material changes will be communicated through the Service or by email where appropriate.

Privacy requests: privacy@mediatrow.com
General support: support@mediatrow.com