Privacy Statement

Introduction

MessCube is a creative intelligence platform that helps brands analyze, benchmark, and optimize ad creatives.

We understand that you care about your privacy, and we take that seriously. This Privacy Statement explains our practices regarding the collection, use, and sharing of your personal information, and outlines your rights. As privacy laws and our services evolve, we may update this Statement from time to time.

Contacting Us About Data Protection

MessCube is headquartered in San Francisco, California. If you have questions about our data practices or wish to exercise your rights, please contact us:

How We Collect and Use Your Information

MessCube collects personal information from website visitors, customers, and platform users. This generally includes:

• Name
• Company name
• Work email
• Job role or title
• Account identifiers (e.g., ad account IDs, platform IDs)

We use this information to:

• Provide and improve our services
• Analyze ad creatives and deliver benchmarking insights
• Communicate product updates and support
• Ensure compliance with platform rules and applicable laws

We do not sell your personal information. We only share it with trusted third parties necessary to deliver our services (such as hosting providers or analytics tools).

Use of the MessCube Website

Like most websites, we automatically collect technical data such as:

• IP address
• Browser type and device type
• Operating system
• Pages visited and actions taken on our site

We use this to operate and secure our site, improve user experience, and understand usage patterns.

Cookies and Tracking

MessCube uses cookies and tracking technologies to improve your experience and analyze usage. You can adjust cookie preferences through your browser settings. A detailed Cookie Notice will be available at /cookies.

Sharing Information with Third Parties

Your personal information may be stored with cloud service providers in the U.S. These providers cannot use your information for purposes other than delivering our services.

We may share information if:

• You authorize it
• Required by law or legal request
• To protect the safety, rights, or property of MessCube or others
• To trusted partners providing necessary services (e.g., hosting, support, analytics)

A current list of our sub-processors is available at: https://messcube.com/legal/subprocessors

International Data Transfers

If you access MessCube from outside the U.S., your data will be processed in the United States. We use safeguards such as Standard Contractual Clauses (SCCs) to ensure data transferred from the EU, UK, or Switzerland is adequately protected.

Data Subject Rights

Depending on your jurisdiction (e.g., GDPR, CCPA/CPRA), you may have the right to:

• Access your data
• Correct or update your data
• Delete your data
• Restrict or object to processing
• Request data portability
• Opt out of certain uses, such as marketing

To exercise these rights, contact us at square@messcube.com.

Meta (Facebook) Platform Data

MessCube integrates with Meta Platforms, Inc. ("Meta") to help you manage and publish ad creatives. When you choose to connect your Facebook account, we request your explicit authorization via OAuth before accessing any data.

Data We Access

With your permission, we access the following data from your Meta account:

• Your Facebook user name (for display purposes only)
• Ad account IDs and ad account names
• Campaign and ad set structures within your ad accounts
• Facebook Page names and IDs associated with your business

How We Use Meta Data

We use Meta Platform Data solely on behalf of the authenticated user to provide requested functionality within MessCube, and only for actions initiated by that user. This includes displaying ad accounts, campaigns, ad sets, and Pages for selection, uploading creative assets, and creating ads or ad creatives at the user's direction. Ads created through our Meta integration are created in a review workflow controlled by the user.

We do not sell, rent, or license Meta Platform Data. We do not use Meta Platform Data for advertising, profiling, data brokerage, or any unrelated purpose.

Authentication & Token Storage

When you connect your Facebook account, we securely store an access token that allows us to interact with Meta's APIs on your behalf. Tokens are stored in our encrypted database and are never exposed to other users. You can revoke access at any time by disconnecting your account within MessCube, which immediately deletes your stored token. You may also revoke access directly through your Facebook account settings.

Data Deletion

When you disconnect your Meta account or delete your MessCube account, we delete all stored Meta access tokens and associated Meta Platform Data from our active systems. Operational logs and backups may persist temporarily under our standard retention periods before being purged. If you would like to request deletion of your data, please contact us at square@messcube.com.

Publicly Accessible Data

As part of our creative intelligence platform, MessCube may collect and analyze publicly accessible advertising content, including ad creatives, ad copy, and associated metadata that is made available through public advertising libraries and platform transparency tools (such as the Meta Ad Library).

This publicly accessible data is used to:

• Provide competitive benchmarking and creative analysis
• Generate industry insights and performance trends
• Help brands understand the advertising landscape in their category

This data is publicly available and does not include any private user information. We process it in accordance with the terms of the platforms that make it available and applicable laws.

Data Protection & Security

We apply industry-standard protections, including:

• Encryption in transit and at rest
• Role-based access controls and MFA
• Logging, monitoring, and rate limiting
• Secure infrastructure hosted with trusted providers
• No use of your data to train third-party AI models

Data Retention

We retain customer data for the duration of your account and as long as necessary for service delivery, compliance, or legitimate business purposes. Data can be deleted earlier upon verified request.

Children's Data

MessCube does not knowingly collect personal information from children under 16.

Questions, Concerns, or Complaints

If you have questions, concerns, or wish to exercise your rights, please contact: