Privacy Policy
This Privacy Policy describes how Mass Culture, Inc. (“Mass Culture,” “we,” “us”) handles information in connection with mc-portal (the “Service”), our dashboard and business intelligence tool for client campaign data.
1. Who this policy covers
mc-portal is used by two groups: Mass Culture team members and authorized users from our client organizations. This policy covers both. It does not cover Mass Culture's broader website, marketing activities, or services delivered outside the Service.
2. What we collect
Account information from Google. When you sign in, Google shares a limited profile with us: your name, email address, profile picture, and a unique Google account identifier. We do not request access to your Gmail, Drive, Calendar, or any other Google service.
Usage data. We log activity inside the Service: pages viewed, actions taken, timestamps, IP address, browser and device type, and similar technical information. This helps us keep the Service running, debug issues, and improve features.
Client campaign data. mc-portal displays advertising performance, spend, and campaign metadata for the clients we serve. This data is provided by the client, by Mass Culture on the client's behalf, or pulled from connected advertising and analytics platforms. It does not include end-consumer personal information.
Communications. If you email us or submit a request through the Service, we keep that correspondence.
3. What we do not collect
We do not collect personal information about your clients' customers or end users. We do not buy data from data brokers. We do not use the Service to track you across the web.
4. How we use information
We use the information described above to:
- Authenticate you and provide access to the Service
- Display and analyze campaign data for your organization
- Operate, secure, debug, and improve the Service
- Respond to your questions and support requests
- Meet legal, tax, and accounting obligations
We do not sell personal information.
We may use your client organization's campaign data to refine and personalize AI features for that client organization — for example, to improve analyses, build custom views, or tailor outputs against your historical data. We do not use one client's data to train AI features for another client, and we do not share your data with our AI service providers for them to train their general-purpose models.
5. Who we share information with
We share information with the following categories of service providers, each bound by contractual confidentiality and security obligations:
- Supabase — database, authentication, and file storage
- Vercel — application hosting and content delivery
- Anthropic — AI features inside the Service
- Google Cloud (BigQuery) — data warehousing and querying for campaign analytics
- Pacvue — retail media campaign data ingestion
We share information with law enforcement or other parties when required by valid legal process, when necessary to protect the rights, property, or safety of Mass Culture, our clients, or the public, or when you direct us to do so.
We share information with a successor entity in the event of a merger, acquisition, or sale of substantially all assets of Mass Culture.
6. Where data is stored
Information collected through the Service is processed and stored in the United States. The Service is intended for use by clients and team members in the United States.
7. How long we keep it
We retain account and usage data for as long as your account is active and for a reasonable period after to meet legal, accounting, and audit obligations. When an account is closed, we delete or anonymize associated personal information within 90 days, except where retention is required by law or necessary to resolve disputes and enforce agreements.
Client campaign data is retained for the duration of the engagement governed by the applicable Master Services Agreement, and is handled per that agreement on termination.
8. Security
We use industry-standard administrative, technical, and physical safeguards to protect information, including encrypted connections, encrypted storage at rest, role-based access controls, and least-privilege access for our team. No system is perfectly secure. If we ever experience a security incident affecting your information, we will notify you as required by applicable law.
9. Your choices
You can sign out of the Service at any time. You can request that we delete your account by emailing the address below. Note that requests to delete client campaign data must come through the client organization that owns that data, not through individual users.
10. California residents
If you are a California resident, you have the right to request access to the personal information we hold about you, request correction or deletion, and not be discriminated against for exercising these rights. To exercise these rights, email hello@massculture.com. We will verify your identity before responding to substantive requests.
11. Children
The Service is intended for business use. We do not direct the Service to children under 16 and do not knowingly collect personal information from them.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Service or by email.
13. Contact us
Questions, requests, or concerns? Email hello@massculture.com.
Mass Culture, Inc.