Back to Home

Privacy Policy

Last updated: 14.05.2026

1. Introduction

Mavren ("we", "our", or "us") is committed to protecting your privacy and handling your data transparently. This Privacy Policy explains how we collect, use, store, and safeguard information when you visit mavren.ai, request a demo, or use our platform ("Services").

By accessing our website or Services, you agree to the practices described in this Policy.

2. Information We Collect

We may collect the following categories of information:

A. Information You Provide to Us

  • Contact Information: Name, email address, company name, and company size when you request a demo or contact us.
  • Account Information (if platform access is granted): Name, email, organisation details, and credentials required to access the dashboard.

B. Data Collected From Your Connected Marketing Platforms

If you connect your marketing or analytics tools to Mavren (e.g., Google Ads, Meta Ads, LinkedIn Ads, TikTok Ads, HubSpot, GA4), we may retrieve:

  • Performance metrics (spend, impressions, clicks, conversions)
  • Campaign structure and metadata
  • Audience/segment-level data

We do not ingest or store any personally identifiable customer data (PII) from your ad platforms.

C. Automatically Collected Information (Website Only)

  • Usage Data: Pages visited, time spent, referring pages.
  • Device Information: IP address, browser type, operating system.
  • Cookies: Currently, we do not use non-essential cookies. If this changes, this Policy will be updated.

3. How We Use Your Information

We use the collected information for the following purposes:

A. Website & Demo Interactions

  • Responding to demo requests and inquiries
  • Sending relevant updates, product information, or onboarding details
  • Improving website performance and experience

B. Platform Functionality

When using the Mavren dashboard, we use your ingested marketing data to:

  • Display performance insights
  • Run diagnostics, alerts, and recommendations
  • Generate "If–Then" relationships to suggest optimizations
  • Measure confidence levels and model accuracy

C. No Training on Your Proprietary Data

We do not use your marketing data to train external AI models or build shared datasets. Your data is used only for:

  • Your own account's insight generation
  • Internal system performance calibration (success/failure evaluation)

Your proprietary data never contributes to another customer's model or use case.

D. Legal & Compliance

  • Maintaining security, preventing fraud
  • Meeting legal, contractual, or regulatory obligations

4. Data Sharing & Sub-processors

We do not sell your personal information, and we do not share it with other Mavren customers.

We may share your data only with:

  • Trusted service providers (hosting, analytics, CRM, authentication) who operate under confidentiality and data-processing agreements. The current list of sub-processors is published at mavren.ai/sub-processors.
  • Legal authorities, if required by law
  • Professional advisors, such as auditors or lawyers, under confidentiality

Third parties are permitted to use your data solely to perform services on our behalf.

5. Google API Services

When you connect your Google Ads account to Mavren, we use Google OAuth 2.0 to request the https://www.googleapis.com/auth/adwords scope. Mavren's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

A. Data We Access from Google

Mavren accesses your Google Ads performance metrics (spend, impressions, clicks, conversions) and campaign, ad group, and ad metadata to generate the Cognitive Growth Audit. Additionally, when you explicitly initiate it, Mavren can create new ads in your Google Ads account as paused drafts using creative outputs from Mavren's AI regenerator (see Section 5C). We do not access your Google account profile, email, contacts, or any other Google service data.

B. How We Use Google Data

Solely to power the diagnostic, anomaly-detection, recommendation, and draft-ad-creation features of the Mavren Audit. We do not auto-modify existing campaigns, auto-launch ads, capture leads, build custom or lookalike audiences, retarget users, or use Google user data to train generalized AI/ML models.

C. Draft Ad Creation

When you review a creative output from the Mavren regenerator and click "Push to Google Ads as draft", Mavren creates a new ad in your selected campaign and ad group with status set to PAUSED. We never launch, un-pause, or modify the status of any ad. We never modify existing ads, change budgets, alter bids, or auto-apply changes without your explicit per-creative click. Each draft creation is initiated by your in-app action and is logged. You retain full control to review the draft in Google Ads, edit it, publish it, or delete it. Mavren does not write to any of your campaigns without that explicit user action.

D. Sharing and Limited Use

We do not transfer Google user data to third parties except as necessary to provide and improve the Service, and never for advertising or independent analytics purposes. We do not use Google user data for serving ads.

E. Revoking Access

You may revoke Mavren's access at any time from your Google Account permissions page, or by emailing privacy@mavren.ai. On revocation, we stop syncing new data and delete stored OAuth refresh tokens within 30 days.

5b. Meta Platform Data

Mavren's Meta Ads integration is strictly read-only. Unlike the optional Google Ads draft-creation feature described in Section 5C, Mavren never creates, modifies, pauses, or writes any ad, campaign, asset, or audience to your Meta Ads account.

When you connect your Meta Ads account to Mavren, we use Facebook Login for Business and the Meta Marketing API with the ads_read and business_management permissions. Mavren's use of data received from Meta APIs adheres to the Meta Platform Terms, including any applicable Limited Data Use requirements.

A. Data We Access from Meta

Read-only access to your Meta Ads performance metrics (spend, impressions, clicks, conversions, CTR, CPM, CPA, ROAS), campaign / ad set / ad structure, and creative metadata (image and video URLs, ad copy). We do not access user profile information, friend lists, messages, or any non-advertising data on Meta.

B. How We Use Meta Data

Solely to power the diagnostic, anomaly-detection, creative-psychology, and recommendation features of the Mavren Audit. We do not modify your campaigns, place or edit ads, capture leads, build custom or lookalike audiences, retarget users, or use Meta data to train generalized AI/ML models.

C. Sharing and Limited Use

We do not transfer Meta data to third parties except to the sub-processors disclosed at mavren.ai/sub-processors, which are required to render the audit (application hosting, creative analysis, narrative generation). We do not use Meta data for serving ads, building advertising profiles, or any purpose beyond producing the audit you requested.

D. Revoking Access

You may revoke Mavren's access at any time from your Facebook Business Integrations settings, or by emailing privacy@mavren.ai. On revocation, we stop syncing new data and delete stored OAuth tokens and ingested ad data within 30 days.

6. Data Security

We implement appropriate technical and organisational safeguards, including:

  • Encryption in transit and at rest
  • Strict access controls
  • Multi-factor authentication
  • Continuous monitoring and auditing

No method of transmission is 100% secure, but we take all reasonable measures to protect your data.

7. Data Retention

We retain your information only as long as necessary for:

  • Providing the Service
  • Fulfilling legal or contractual obligations
  • Resolving disputes

Ad Platform Data Retention

Performance data fetched from connected ad platforms (Meta Ads, Google Ads, and similar) is retained on a rolling 90-day window. Insight rows older than 90 days are automatically purged by a daily background job. Campaign and creative metadata is retained for as long as your Mavren account is active and the integration remains connected. On disconnection or deletion request, all platform data is removed within 30 days; encrypted backups containing your data are purged on our standard rolling cycle, no later than 90 days after the deletion request is completed.

If your account is closed, we delete or anonymise data unless retention is required by law.

8. Your Rights

Depending on your jurisdiction (e.g., UK GDPR, EU GDPR, CCPA), you may have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion ("right to be forgotten")
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent (where applicable)

To exercise your rights, contact us at privacy@mavren.ai.

9. Cookies & Tracking Technologies

At this time, Mavren.ai does not use non-essential cookies. We may use strictly necessary cookies for security and functionality if the dashboard requires it. If cookie usage expands, we will update this Policy and provide a cookie banner where required.

10. International Data Transfers

Your data may be processed or stored in the UK, EU, or other jurisdictions where our service providers operate. We use appropriate safeguards (e.g., Standard Contractual Clauses) when transferring data internationally.

11. Contact Us

If you have questions or wish to exercise your rights, please contact:

Email: privacy@mavren.ai

Address: Mavren Technologies Ltd, London, United Kingdom

12. Changes to This Policy

We may update this Privacy Policy as our product or legal requirements evolve. Updates will be published on this page with a revised "Last updated" date. Continued use of our Services indicates acceptance of the updated policy.