Privacy Policy

Last updated: July 21, 2025

Introduction

‍Maaten Ltd ("Maaten," "we," "our," or "us") respects the privacy of your information. This Privacy Policy is designed to assist you in understanding how we collect, use and safeguard the information you provide to us in using our website (the "Site") and the services provided through our Site (the "Services"), including our campaign data structuring, metadata enhancement, and proprietary campaign ID system.From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. If we make material changes to our Privacy Policy, we may also notify you by other means, such as sending an email or posting a notice on our home page. If required by applicable data protection laws, we will obtain your consent to any material changes. Please review this Privacy Policy periodically.Please also refer to our Terms of Service regarding the proper usage of the Site and Services.

‍This Privacy Policy covers the following topics:

‍Personal Data We Collect
Platform Data Collection
How We Use Your Personal Data
How We Share Your Personal Data
Cookies and Other Tracking Technologies
International Data Transfers
"Do Not Track" Signals
Advertising and Marketing Choices
Third-Party Links
Security
Children's Privacy
Your Personal Data and Your Rights
Data Retention
How to Contact Us
Use of Artificial Intelligence

Maaten's offices are located at 31 Silverknowes Grove, Edinburgh, EH4 5LZ, UK. Maaten is the data controller of the personal data it collects through the Site and Services. This Privacy Policy does not apply to the extent we process personal data on behalf of our clients as a processor or service provider, including when clients use our campaign data structuring platform, and the confidentiality of that data is governed by our agreements with our clients. For detailed privacy information related to a client who uses our platform, please contact the client directly. We are not responsible for the privacy or data security practices of our clients. This Privacy Policy applies to the personal data we process from our clients as a data controller.

Maaten is The Campaign Data Structure Company. We take the complexity out of marketing data by standardising data at the source, creating a world where people, teams, and technology have a shared understanding of their campaign data. Our platform enables solutions across media and ad operations, content and creative, campaign tracking, and metadata enhancement.

‍1. Personal Data We Collect

‍We collect "Personal Data" as defined by applicable privacy laws. This means any information that identifies, relates to, describes, or is capable of being associated with, a particular individual. The Personal Data we collect includes:

‍Account Information

• Your name and email address when you create an account
• Organization details for business accounts
• Authentication credentials (encrypted)
• Profile information you choose to provide

‍Platform Access Data

When you connect your advertising accounts, we may collect:
• OAuth tokens (encrypted and securely stored)
• Account identifiers and basic account information
• Campaign performance data
• Creative assets and metadata
• Audience and targeting information

‍Usage and Analytics Data

• How you interact with our platform
• Feature usage patterns
• Performance metrics and error reports
• Device and browser information
• IP address and location data

‍2. Platform Data Collection

‍Google Services Integration

We integrate with Google services to provide comprehensive campaign management. Specifically:

• Google Ads API: To access campaign performance data, account structures, and management capabilities
• Display & Video 360 API: To retrieve programmatic campaign data and performance metrics
• BigQuery API: To enable data export and advanced analytics capabilities

‍Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. We use this data to:
• Provide campaign data structuring and standardization services
• Generate performance reports and analytics dashboards
• Facilitate campaign management and optimization within our platform
• Maintain secure connections to your Google advertising accounts

We do not use Google user data for any purposes other than providing and improving our application's core functionality.

Social Media Integration

When you connect social media advertising platforms (Meta, TikTok, LinkedIn), we collect:
• Campaign performance data
• Ad creative information and metadata
• Audience insights and targeting data
• Account and campaign structure information

‍Data Processing Purposes

We process platform data exclusively for business and marketing purposes, including:
• Campaign performance analysis and reporting
• Data standardization and metadata enhancement
• Cross-platform campaign optimization
• Custom audience creation and management
• Attribution modeling and measurement

‍Platform User Rights

‍If you are an individual whose campaign data may be processed through our platform integrations:Platform users retain all rights provided by the originating platform's privacy policiesWe respect all privacy settings and permissions configured on connected platformsCampaign data processing is limited to business and marketing purposes as outlined in this policyYou may contact us at support@maaten.ai with questions about how your campaign data is processed

‍Platform Compliance

We maintain compliance with platform-specific requirements:
• Meta Business Tools Terms and Developer Policies
• Google Ads API Terms of Service and Developer Policies
• TikTok for Business API Terms and Marketing API Policy
• LinkedIn Marketing Developer Platform Agreement
• All platform data usage policies and restrictions

‍3. How We Use Your Personal Data

We use your Personal Data to provide, maintain, and improve our Services. Specifically, we use your Personal Data for the following purposes:

‍Service Provision

We do not sell, rent, or otherwise monetise personal data or customer data to third parties. Our revenue is generated solely through subscription fees, consulting services, and usage-based charges.

‍We may share the information that we collect about you in the following limited ways:

• To provide the core functionality of our platform
• To authenticate and secure your account
• To process and fulfill your requests
• To provide customer support and technical assistance
• To send you service-related communications

‍Platform Integration

• To connect and synchronize your advertising accounts
• To retrieve and process campaign data
• To generate standardized reports and analytics
• To facilitate cross-platform campaign management
• To provide data export and integration capabilities

‍Improvement and Analytics

• To understand how our Services are used
• To identify and fix technical issues
• To develop new features and improvements
• To conduct internal research and analytics
• To optimize platform performance and user experience

‍4. How We Share Your Personal Data

‍5. Cookies and Other Tracking Technologies

‍Like many other companies, we may use cookies and other tracking technologies (collectively, "Cookies"). Cookies are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets). Cookies are not enabled by default and instead require your consent through our consent management platform on our Site.

We use Cookies to:

• Remember your preferences and settings
• Provide a personalized experience
• Understand how you use our Services
• Improve our Services
• Provide relevant content and advertising
• Measure the effectiveness of our marketing campaigns

‍Third-Party Advertising Settings

‍You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt out of some of those Cookies and related targeted advertising by accessing the Network Advertising Initiative's website or the Digital Advertising Alliance's website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative's Mobile Choices website.Please note these opt-out mechanisms are specific to the device or browser on which they are exercised. Therefore, you will need to opt out on every browser and device that you use.You can also opt out of Cookies, analytics, and targeted advertising from some of the specific entities we use by following the instructions found on their respective websites.

‍6. International Data Transfers

‍Your information may be transferred to, stored, and processed in countries other than your own. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place for international transfers in accordance with applicable privacy laws, including:

• European Union: General Data Protection Regulation (GDPR)
• United States: California Consumer Privacy Act (CCPA) and other applicable state privacy laws
• Africa: Protection of Personal Information Act (POPIA) in South Africa and other applicable regional privacy laws

‍7. "Do Not Track" Signals

‍Some internet browsers incorporate a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the "Do Not Track" signal, the Site does not currently interpret, respond to or alter its practices when it receives "Do Not Track" signals.

‍8. Advertising and Marketing Choices

‍Depending on your location (and reflecting applicable law), you may have been asked to indicate your preferences, provide us with your consent regarding the receipt of such information from us, and indicate how you would like to receive it.Wherever you are located, we will send you marketing communications based on any preferences you may have expressed.We only want to send you information in which you are interested. If you do not want to receive these communications or would like to understand more about other unsubscribe options, please contact us as set out in the "How to Contact Us" section below.For email communications, you can opt-out and/or manage your preferences by clicking on the email preferences link provided at the bottom of any email you receive from us. You also may submit a request to us at support@maaten.ai. If we call you with information you do not want to receive, you can advise us of this during the telephone call.

‍9. Third-Party Links

‍The Site may contain links that will let you leave the Site and access another website. Linked websites are not under our control, and their privacy policies will govern how they manage the information you provide them. We accept no responsibility or liability for these other websites.

‍10. Security

‍We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and authorization systems
• Regular security assessments and penetration testing
• Employee background checks and security training
• Incident response and breach notification procedures
• Access controls and authentication systems
• Regular security audits and assessments
• Employee training on data protection and security practices

‍11. Children's Privacy

‍The Site and Services are not intended for children under 16 years of age. We do not knowingly collect, use, or disclose personal data from children under 16. If we become aware that we have collected personal data from children under 16, we will take steps to delete such information promptly.

‍12. Your Personal Data and Your Rights

‍Legal Basis for Processing

The legal basis for our processing of your personal data depends on the specific context in which we collect it. Generally, we process your personal data based on:

• Your consent (for marketing communications and optional features)
• Performance of a contract (to provide our services)
• Legitimate interests (to improve our services and ensure security)
• Legal obligations (to comply with applicable laws and regulations)

‍Necessary for the Performance of a Contract

Much of our processing of your personal data is necessary for the performance of the contract between you and us, and for taking steps at your request prior to entering into a contract. This includes processing your personal data to provide you with the Services you have requested and to respond to your inquiries.

‍Necessary for Our Legitimate Interests

We may process your personal data where it is necessary for our legitimate interests, such as:To provide, operate, optimize, and maintain our ServicesTo send you technical notices, security alerts, and administrative messagesTo respond to your comments and questionsTo provide customer service and supportTo protect the rights, property, and safety of us, our users, and othersTo enforce our terms and conditionsTo prevent fraudulent or illegal activityTo comply with legal obligations and protect legal rights

‍Necessary for the Exercise or Defence of Legal Claims

If you bring a claim against us or we bring a claim against you, we may process your personal data in relation to that claim.If you have any questions about or need further information concerning the legal basis on which we collect and use your personal data for any specific processing activity, please contact us using the "How to Contact Us" section below.

‍Your RightsAccess Your Personal Data

You have the right to obtain from us confirmation as to whether or not we are processing personal data about you and, if so, the right to be provided with the information contained in this Privacy Policy. You also have the right to receive a copy of the personal data undergoing processing.

‍Correct Your Personal Data

You have the right to have inaccurate personal data rectified. You also have the right to have incomplete personal data completed, including by providing a supplementary statement.

‍Delete Your Personal Data

You can ask us to delete your personal data if:We no longer need it for the purposes for which we collected it;We have been using it with no valid legal basis;We are obligated to erase it to comply with a legal obligation to which we are subject;We need your consent to use the information and you withdraw consent;You object to us processing your personal data where our legal basis for doing so is our legitimate interests and there are no overriding legitimate grounds for the processing.However, this right is not absolute. Even if you make a request for deletion, we may need to retain certain information for legal or administrative purposes, such as record keeping, maintenance of opt-out requirements, defending or making legal claims, or detecting fraudulent activities. We will retain information in accordance with the "Data Retention" section below.If you do exercise a valid right to have your personal data deleted, please keep in mind that deletion by third parties to whom the information has been provided might not be immediate and that the deleted information may persist in backup copies for a reasonable period (but will not be available to others).

‍Transfer Your Personal Data to Another Service Provider

You may request that we transfer some of the personal data you have provided to us or another service provider in electronic copy. This applies to personal data we are processing to service a contract with you and to personal data we are processing based on your consent.To exercise any of these rights, please contact us as described in the "How to Contact Us" section below.

‍Make a Complaint

If you have any concerns or complaints regarding our processing of your personal data, please contact us as described in the "How to Contact Us" section below and we will do our best to answer any question and resolve any complaint to your satisfaction.If, for whatever reason, you feel we do not meet the standards you expect of us, you are also entitled to make a complaint to your local supervisory authority:Information Commissioner's Office (United Kingdom)EU Data Protection Authorities (DPAs)

‍For Users in Other Jurisdictions

We respect the privacy rights of users in all jurisdictions and strive to provide appropriate privacy protections regardless of location. If you have specific questions about your privacy rights under local law, please contact us at support@maaten.ai.

‍13. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention period depends on various factors, including:

• The nature of the personal data
• The purposes for which we process the personal data
• Legal and regulatory requirements
• Contractual obligations
• Business and operational needs

When we no longer need to process your personal data for the purposes set out in this Privacy Policy, we will either delete or anonymize it, or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.

‍14. How to Contact Us

‍15. Use of Artificial Intelligence

We may use artificial intelligence and machine learning technologies to enhance our Services. When we use AI features that process your personal data, we ensure:

You have the right to request information about any automated decision-making that affects you and to request human review of AI-generated decisions that have significant impacts on your use of our Services.