Privacy Policy
How MediaPoint AI collects, uses, shares and retains personal data — and the rights you have over it.
1. Who we are
MediaPoint AI is a trading name of US International Media, LLC, a California limited liability company, of 3415 S Sepulveda Blvd, Suite 800, Los Angeles, CA 90034, United States.
We are the controller of the personal data described in this policy. For questions or to exercise any right below, contact privacy@mediapoint.ai.
This policy covers our public website at mediapoint.ai, our client application, and the advertising services we provide. It does not cover the advertising networks themselves — Google, Meta and TikTok each publish their own privacy policies for the processing they carry out as independent controllers.
2. What we collect
Information you give us
- Account and identity — name, email address, telephone number and postal address, provided during registration and authenticated through our identity provider.
- Business details — company or trading name, website, industry category, business size and tax identifier.
- Campaign content — objectives, budgets, targeting choices, keywords, headlines, descriptions, images and video you upload or approve.
- Payment details — billing name and address. Card numbers are tokenised in your browser by our payment processor and are never transmitted to or stored on our systems.
- Correspondence — messages you send us, and our replies.
Information we generate or receive
- Advertising performance data — impressions, clicks, conversions, cost and delivery status, retrieved daily from each advertising network in aggregated form for your campaigns.
- Usage and access records — sign-in events, actions taken in the application, IP address, browser and device type, and timestamps.
- Recommendations and analysis — forecasts, budget recommendations, health scores and rebalance proposals produced from your campaign data.
Information about your website visitors
We do not place tracking pixels on your website and we do not receive information about individual people who see or click your advertisements. Advertising networks report performance to us in aggregate.
3. Why we use it, and our lawful basis
| Purpose | Data used | Lawful basis (UK/EU GDPR) |
|---|---|---|
| Creating and administering your account | Account, identity and business details | Performance of a contract |
| Reviewing an application before activation | Business details, website | Performance of a contract; legitimate interests in preventing misuse |
| Creating and managing campaigns on advertising networks | Campaign content, business details | Performance of a contract |
| Producing forecasts, budget recommendations and rebalance proposals | Campaign content, performance data | Performance of a contract |
| Taking payment and maintaining financial records | Billing details, transaction records | Performance of a contract; legal obligation |
| Support and correspondence | Contact details, correspondence | Performance of a contract; legitimate interests |
| Security, fraud prevention and audit | Access and usage records | Legitimate interests in keeping the service secure |
| Meeting tax, accounting and regulatory obligations | Account and transaction records | Legal obligation |
| Optional analytics on this website | Page views, referrer | Consent, which you may withdraw at any time |
Where we rely on legitimate interests, we have considered whether that interest is overridden by your rights, and we will explain that assessment on request.
4. What we do not do
- We do not sell your personal data, and we never have.
- We do not share your data with third parties for their own marketing, and we do not allow our sub-processors to use it for their own purposes.
- We do not combine data across clients to build audience products, lookalike segments, or any other resellable asset.
- We do not use your campaign or performance data to train machine learning models offered to anyone other than you.
- We do not make decisions producing legal or similarly significant effects about you by automated means alone. Budget and channel recommendations are proposals that a person approves.
5. Who we share it with
We share personal data only with:
- Advertising networks — Google, Meta and TikTok, to create and manage the campaigns you have asked us to run and to retrieve their performance. Each acts as an independent controller for its own platform data.
- Service providers acting on our instructions — hosting, identity and payment processing. Each is bound by a written agreement restricting them to our instructions. The current list is published at Sub-processors.
- Professional advisers — accountants, auditors and lawyers, where they need it to advise us.
- Authorities — where we are legally required to disclose. We will tell you unless legally prohibited from doing so.
- A successor — if the business is sold or reorganised, under the same protections set out here.
6. International transfers
Our infrastructure is hosted in the West US (United States). If you are in the United Kingdom or the European Economic Area, your personal data will therefore be transferred outside your jurisdiction. Where that happens we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with the technical measures described in our security statement. A copy of the relevant safeguards is available from privacy@mediapoint.ai.
7. How long we keep it
| Data | Retention |
|---|---|
| Account and campaign records | 7 years after the account closes, for tax and audit purposes |
| Advertising performance metrics | 25 months |
| Access and security logs | 12 months |
| Account data after a deletion request | 30 days, then irreversible deletion |
| Financial and transaction records | As required by applicable tax and accounting law, typically seven years |
Records we are legally required to retain — chiefly financial ones — survive a deletion request for the statutory period. We say so plainly rather than promising an erasure we cannot lawfully perform. Everything else is deleted or irreversibly anonymised.
8. Your rights
Depending on where you live, you have some or all of the following rights. We apply them to everyone, wherever they are, unless the law prevents it.
- Access — a copy of the personal data we hold about you.
- Correction — to have inaccurate data put right.
- Deletion — to have your data erased. See our data deletion instructions.
- Portability — a machine-readable export of data you gave us.
- Objection — to processing based on legitimate interests.
- Restriction — to have processing paused while a dispute is resolved.
- Withdrawal of consent — where we rely on consent, at any time, without affecting what was done beforehand.
- Complaint — to your data protection authority. In the UK that is the Information Commissioner’s Office; in the EEA, your national authority. We would rather you told us first, at privacy@mediapoint.ai.
How to exercise them. Email privacy@mediapoint.ai from the address on your account. We will verify your identity, respond within 30 days, and tell you if we need longer and why. We do not charge for this.
California residents. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not offer financial incentives for personal information. You may exercise your rights to know, delete and correct using the same address above, and you will not be discriminated against for doing so.
9. Cookies
This website sets only strictly necessary storage unless you consent to more. Analytics and marketing categories are off by default and take effect only if you turn them on. The full detail, including how to change your mind at any time, is in the Cookie Policy.
10. Security
We encrypt data in transit and at rest, separate client and staff identity systems, apply least-privilege access to the data layer, and keep no payment card numbers. The full description is on our security page. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as the law requires.
11. Children
The service is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact privacy@mediapoint.ai and we will delete it.
12. Changes to this policy
We will update this page when our practices change and revise the “last updated” date above. If a change materially affects your rights we will tell account holders by email before it takes effect, and where the law requires it we will ask for fresh consent rather than assume the old one carries over.