Privacy Policy

Last updated: October 9, 2026

MCP Ads ("we", "our", or "us") operates the MCP Ads service accessible at mcp-ads.com. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account data: Your name and email address, obtained through Google Sign-In.
OAuth tokens: Access and refresh tokens for the platforms you choose to connect: Google (Ads, Analytics, Search Console, Tag Manager, Merchant Center, YouTube), Meta (Facebook Pages, Instagram and Meta Ads), Threads, LinkedIn (your profile, company pages you administer, and LinkedIn Ads), TikTok and X. They are stored encrypted and used solely to carry out the requests you make.
Connected platform data: When you ask for it, we read the data needed to answer from the platforms you connected, such as campaign performance, and the posts and engagement statistics of the profiles, Pages and company pages you manage. It is returned to you. We keep performance snapshots only to power the reports, alerts and history in your dashboard.
Content you create: Posts you draft or schedule in the content calendar, until you delete them or they are published.
Billing data: Subscription status managed by Airwallex. We do not store card numbers.
Usage data: Request logs for debugging and abuse prevention.

2. How We Use Your Data

To authenticate you and maintain your session.
To call the advertising, analytics and social platforms you connected, on your behalf and at your request, including publishing posts you have approved.
To process subscriptions and maintain product entitlements.
To send transactional emails.

We never use data from connected platforms to build advertising audiences, to profile the people who engage with your posts, or for any purpose other than serving your own requests.

3. Data Sharing

We do not sell your data. We share data only with:

The platforms you connect (Google LLC, Meta Platforms, LinkedIn Corporation, TikTok, X Corp.), only to carry out your requests on your own accounts
Pipedream, which holds the connection for LinkedIn Ads, Snapchat and Microsoft Advertising accounts connected through it
Airwallex, for payments
Resend, for transactional email
Supabase and Google Cloud, which host our database and servers in the United States

AI assistant providers. When you connect MCP Ads to an AI assistant (such as Claude or ChatGPT), the data you ask for is returned into that assistant's session so it can answer you. That transfer happens per request, at your direction, and goes only to the assistant you chose to connect. We do not send your data to AI providers for any other purpose, and it is not used to train models.

4. Data Retention

We retain your data for as long as your account is active. You can request deletion at any time by emailing us. OAuth tokens are deleted immediately when you disconnect an account.

5. Removing a Connected Platform

Facebook, Instagram and Threads: remove MCP Ads in Facebook under Settings & privacy → Settings → Apps and websites, or in Threads under Settings → Account → Website permissions. We delete that account's tokens and connection records immediately, and you can check the result on our data deletion status page.
LinkedIn: disconnect it from your MCP Ads dashboard, or remove MCP Ads under LinkedIn Settings → Data privacy → Permitted services.
Any platform: disconnect it from your dashboard, or email us and we will delete it for you.

6. Security

OAuth tokens are encrypted before being stored, with Fernet (AES-128 in CBC mode, authenticated with HMAC-SHA256); the encryption key is kept in Google Cloud Secret Manager, separate from the database. The database is also encrypted at rest (AES-256) by our hosting provider. Connections use TLS. We do not log token values.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@mcp-ads.com.

8. Google API Scopes

Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. YouTube API Services

MCP Ads uses YouTube API Services. If you connect YouTube, we read your channel's videos, playlists, captions, comments and YouTube Analytics reports, and we upload or change videos, Shorts, playlists, captions and comments only when you ask us to. By connecting YouTube you agree to be bound by the YouTube Terms of Service, and the Google Privacy Policy applies to how Google handles that data.

You can revoke MCP Ads' access to your YouTube data at any time from your Google Account security settings, or by disconnecting YouTube in your dashboard. We delete the YouTube tokens immediately on disconnect, and delete any YouTube data we stored (such as post statistics) within 30 days of access being revoked. We do not keep YouTube data longer than 30 days without refreshing it through the API.

10. Contact

Questions? Email support@mcp-ads.com.