1. Who is responsible
Francesco Cifardi, operating under the name MediaLauncher, Friedrichstraße 155, 10117 Berlin, Germany, operates MediaLauncher. Contact Francesco Cifardi at francesco@medialauncher.io about privacy or your data.
This policy explains processing for our website, accounts and Google Ads workspace. Where we process client advertising data on behalf of a business customer, the customer determines the purposes of that processing; the applicable data processing agreement governs our role as processor.
2. Information we process
- Account and support information: email address, account identifiers, authentication information and messages you send us.
- Google connection information: Google account identifier and email, granted permissions, encrypted access and refresh tokens, and connection status. Our current OAuth request also includes basic profile permission.
- Google Ads information: accessible advertiser and manager accounts, account names and IDs, currencies and time zones, selected campaigns, ad groups, ads, keywords, budgets, settings and performance reports such as impressions, clicks, cost and conversions.
- Workspace content: uploaded campaign files, brand profiles, product and audience information, AI prompts and generated results, and changes you prepare or publish.
- Technical information needed to operate the service: request and error logs, authentication events and usage records used for reliability, security and usage limits.
3. Why we use it
We use this information to authenticate you, connect the Google Ads accounts you authorize, import and display campaigns and reports, prepare changes, execute publishing actions you request, provide AI assistance, answer support requests and protect the service. Offline Google access enables token refresh and background reporting while you are away.
Where we act as controller, processing necessary to provide your account and requested services is based on performance of a contract or steps requested before entering one (GDPR Article 6(1)(b)). Security, abuse prevention and service diagnostics are based on our legitimate interests in operating a reliable service (Article 6(1)(f)). Where we ask for consent, that processing is based on Article 6(1)(a); legal obligations may require processing under Article 6(1)(c). Granting Google permissions is optional, but connected Google Ads features require the relevant permissions.
4. AI features and service providers
When you use the AI assistant, your prompt and relevant workspace context, including campaign, ad group, ad and keyword information from connected Google Ads accounts, are sent to OpenAI to generate a response or proposed changes. Review the information you include in prompts. Generated output may be inaccurate and requires your review.
Brand, product and persona autofill uses Perplexity to process the website content and brand information needed for that feature. Supabase provides authentication and database services, Google Cloud supports reporting storage and processing, and Resend delivers service emails. Vercel hosts the website and processes technical requests needed to deliver it.
5. Google user data and Limited Use
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used for the account management, reporting and AI assistance features described here. It is not sold or used for unrelated advertising, credit decisions or training generalized AI models.
Transfers are limited to those necessary for the disclosed features with your consent, security, legal obligations, or a business transfer with the consent required by Google policy. Human access is limited to your affirmative agreement, necessary security investigations, legal obligations or permitted aggregated internal operations.
6. Storage, security and international transfers
We use authentication, user access controls and encryption of stored Google OAuth tokens to protect connected accounts. Access is limited to the purposes described in this policy. No system can guarantee absolute security.
Some providers may process data outside the European Economic Area. The applicable protections depend on the provider and destination, including adequacy decisions or contractual safeguards where applicable. Contact us for information about the providers, processing locations and safeguards relevant to your use of the service.
7. Retention, disconnection and deletion
Account and workspace information is kept for the service relationship and for as long as needed to resolve support requests, meet legal obligations or handle legal claims. Retention is assessed according to the purpose of the records, whether the account or connection remains active, and any applicable legal requirement. Technical logs are used for troubleshooting and security; records relevant to an incident may need to be kept until it is resolved. Backup copies follow the relevant provider’s backup lifecycle. We have not yet implemented a uniform automatic deletion schedule across these systems.
You can remove Google access from your Google Account connections. Revoking access stops future authorized access; it does not itself delete data previously imported into MediaLauncher. To request deletion of your MediaLauncher account, imported data or stored credentials, email us. Deletion requests are handled manually. We will explain any information that must be retained and the reason; disconnecting a Google account is not a substitute for requesting deletion.
8. Your rights
Subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing. Contact us to exercise these rights. You may also complain to a data protection authority, including the Berlin Commissioner for Data Protection and Freedom of Information.
9. Cookies and updates
The app uses cookies for authentication and browser storage for preferences such as your theme. The service is intended for professional advertising work, not children. We will update this policy when our processing changes and obtain new consent where required before using Google data for a new purpose.