Privacy Policy

Who we are

Meduzia is a marketing and technology studio based in Buenos Aires, Argentina. We provide digital advertising campaign management services to business clients, and we offer synthetic consumer profiles for market research.

The data controller is Grupo Meduzia S. R. L., CUIT 33-71927835-9, with its registered address at General Guido 14, Béccar (B1643), Buenos Aires, Argentina.

For questions about this policy or about the processing of data: administracion@meduzia.com.ar.

Scope

This policy describes how we handle information when a client company connects its advertising accounts to our platform so that we can manage its campaigns, and when someone uses this website (see The Meduzia website).

Our services are intended for businesses. We do not collect data from end consumers or from minors.

What information we receive

When a client authorizes our application through Meta login, we receive:

Access credentials

An access identifier (token) that allows us to operate on the assets the client chose to share. At no time do we receive or store the password of the client or of its users: authentication takes place entirely on Meta's servers.

Ad account data

Account identifiers, currency, time zone, and the structure of campaigns, ad sets and ads.

Performance metrics

Spend, impressions, clicks, conversions, frequency and conversion value of the client's campaigns.

Associated business assets

Identifiers of pages, pixels, product catalogs and custom audiences, when the client shares them for the operation of its campaigns.

Lead data

Only when the client hires lead generation campaigns, and only in order to deliver the leads to the client.

What we use it for

We use this information for a single purpose: to provide the service contracted by the client. Specifically, to:

• Analyze campaign performance
• Create, modify, pause and optimize campaigns and ad sets
• Generate results reports for the client
• Exclude existing buyers from acquisition campaigns

What we do not do

• We do not sell or rent information to third parties
• We do not use one client's data for the benefit of another — each account is isolated
• We do not build our own advertising profiles with client data
• We do not use the data to train artificial intelligence models

How we protect it

Access identifiers are stored encrypted (AES-256) and are accessible only to the automated processes that operate the campaigns. Staff access is limited to those who need it to provide the service.

We request only the minimum permissions necessary to operate advertising campaigns. We do not request access to messages, contacts or personal information of the client's end users.

Who we share it with

We share information only with the infrastructure providers necessary to provide the service:

• Meta Platforms

  Purpose

  Operating the campaigns

  What it receives

  The operations on the client's account

• Anthropic

  Purpose

  Analysis and strategy generation

  What it receives

  Aggregated campaign metrics, without personal data

• Supabase

  Purpose

  Storage

  What it receives

  Configuration data and metrics, encrypted

None of these providers is authorized to use the information for its own purposes.

How long we keep it

We keep the data for as long as the business relationship with the client lasts. Once the relationship ends, access identifiers are deleted immediately and the rest of the data within 30 days, unless we are legally required to retain it.

How to revoke access or delete the data

The client may do so at any time, in either of two ways:

Directly from Meta. In their Facebook account settings, under Apps and websites, they can remove our application's access. Access ends immediately.

By writing to us. At administracion@meduzia.com.ar, requesting deletion. We confirm the removal within 30 days. The full procedure is described under data deletion.

The Meduzia website

When you use this website, we process only the data you give us and the data needed for it to work.

Waitlist

If you sign up, we receive your first and last name, your work email, your company or brand, your job title, what you would like to simulate and how you handle it today (required: without them we cannot add you to the list) and, if you provide them, your phone number, the size of your company and what you are about to decide. We also record the page you signed up from, and when you accepted this policy and which version, as proof of your consent. We use this data to manage your registration, contact you and schedule a meeting. We do not sell or transfer it.

Scheduling a meeting

The scheduling button takes you to Calendly (United States), which processes the booking data under its own privacy policy. We receive the data you enter there for the meeting.

Videos

Some videos are hosted on YouTube. Until you press play, only the cover image is loaded from Google's servers, which receive your IP address. When you press play, the video opens in YouTube's privacy-enhanced mode (youtube-nocookie.com), subject to Google's policy.

Cookies and browser storage

We do not use analytics or advertising cookies. For the duration of your visit only, the website stores in your browser whether you have already seen the waitlist notice, so that it is not shown to you again.

To know how many visits the website receives, which pages are viewed and how fast they load, we use Vercel Web Analytics and Vercel Speed Insights. They measure anonymously and in aggregate, without cookies and without identifying anyone: the page visited, the referring site, the country, the device type, the browser and loading times.

Website providers

• Vercel (US)

  Purpose

  Hosting the website and processing forms

  What it receives

  The data you submit and the technical data of your visit

• Supabase

  Purpose

  Storing the waitlist

  What it receives

  The waitlist data

• Calendly (US)

  Purpose

  Scheduling meetings

  What it receives

  The data you enter for the meeting

• Google / YouTube (US)

  Purpose

  Showing the videos

  What it receives

  Your IP address and, if you press play, the playback data

Some of these providers host data outside Argentina. By sending us your data, you accept that transfer, which we make only for the purposes of this policy.

How long we keep website data

Waitlist data is kept for up to 24 months from your last contact with us or until you ask to be removed, whichever comes first. To be removed, follow the steps under data deletion.

Rights of the data subject

Under Ley 25.326, the Personal Data Protection Law of the Argentine Republic, the data subject may request access to, rectification, updating or deletion of their information by writing to the contact address. The Agencia de Acceso a la Información Pública (Agency for Access to Public Information) is the supervisory authority under that law and has the power to handle complaints filed in connection with non-compliance with the rules on personal data protection.

The data subject has the right to exercise the right of access to their personal data free of charge at intervals of no less than six months, unless a legitimate interest to that effect is shown, as provided in article 14, paragraph 3 of Ley Nº 25.326. The AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA (AGENCY FOR ACCESS TO PUBLIC INFORMATION), in its capacity as Supervisory Authority of Ley Nº 25.326, has the power to handle the complaints and claims filed by those whose rights are affected by non-compliance with the rules in force on personal data protection.

Changes to this policy

If we modify this policy, we will update the date at the top and notify active clients by email when the change is substantial.