MediaOps Privacy Policy
Last updated: October 16, 2026
This Privacy Policy explains how MediaOps ("we," "us," "our") collects, uses, discloses, and protects information when you use our website and application (the "Service").
By using MediaOps, you agree to the collection and use of information as described in this policy.
1. Information We Collect
1.1 Information you provide directly
- Account information: name, email address, password (hashed, never stored in plain text), public media kit username/slug, and profile avatar.
- Business/deal information: sponsor brand names, contact names and emails, deal amounts, deliverables, deadlines, and notes you enter into the CRM.
- Payment information: billing details are securely collected and processed by our payment processor (Lemon Squeezy as Merchant of Record); we never store full credit card numbers on our servers.
- Support requests & tickets: messages, inquiries, and screenshot/image attachments (PNG, JPEG, WebP, GIF) submitted through our client support center or sent via email.
1.2 Information collected automatically
- Social media analytics: when you connect social media accounts or manually input your social stats, we collect follower counts, engagement rates, audience demographics, and related public performance metrics for your media kit.
- Usage data: pages visited, actions taken, timestamps, device/browser type, and IP address.
- Cookies: strictly necessary session cookies for authentication and session security; we do not use third-party advertising cookies or cross-site tracking mechanisms.
- Web analytics & telemetry: we use Vercel Web Analytics to monitor aggregate site performance, page traffic, referrers, device categories, and general country-level visitor geography. Vercel Web Analytics is cookieless and does not track personal identities or build browsing profiles across websites. You can disable analytics telemetry at any time by selecting "Essential Only" in our cookie preferences banner.
1.3 Information from third parties
- OAuth providers (Google): name, email address, profile avatar, and Google user ID, used strictly to create and authenticate your account.
- Payment processor (Lemon Squeezy): subscription status, customer identifier, and payment confirmations.
- E-signature provider (Documenso): contract signing status and timestamps.
- External communication channels: if you choose to join our Discord community or initiate a direct chat with Pro support via WhatsApp, your interactions on those platforms are governed by Discord's and WhatsApp's (Meta) respective privacy policies.
2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service (media kits, deal tracking, contracts, invoicing, and reminders).
- Generate and update your media kit with current social statistics.
- Process subscription payments and manage billing via Lemon Squeezy.
- Send transactional communications: deadline reminders (via email), invoice notices, account notifications, and support ticket replies.
- Send contract documents to the brand contacts you designate for electronic signature.
- Respond to support inquiries, resolve technical issues, and provide customer assistance.
- Monitor and improve Service reliability, performance, and platform security.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information to third parties, and we do not use your data for third-party advertising.
3. How We Share Information
We share information only as strictly necessary to operate the Service, with the following categories of service providers (subprocessors):
| Provider | Purpose | Data shared |
|---|
| Supabase | Database, authentication, and secure file storage (including support ticket attachments) | Account records, deals, contracts, and uploaded application assets |
| Lemon Squeezy | Subscription billing, Merchant of Record, and tax remittance | Email, billing info, and subscription status |
| Documenso | Contract e-signature facilitation | Contract content, signer name, and email address |
| Resend | Transactional email delivery (reminders, notifications, support updates) | Recipient email address and message content |
| Vercel | Application hosting and aggregate Web Analytics | Application data in transit/at rest on hosting infrastructure; aggregate, cookieless telemetry (anonymized IP hash, user agent, requested paths) |
Public Media Kits
If you choose to create a Public Media Kit, the information you select—including your name, bio, avatar, connected social platforms, and aggregated performance metrics (follower counts, engagement rates)—will be accessible to anyone who visits your unique public link (/mk/[slug]). You can make your media kit private or delete it at any time in your dashboard.
We may also disclose information if required by law, to protect our legal rights, or in connection with a merger, acquisition, or sale of assets (with prior notice to you).
4. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account or request cancellation, your account is immediately frozen for a 30-day recovery grace period; after 30 days, all personal data, deals, contracts, and uploaded attachments are permanently deleted or anonymized by automated maintenance routines, except where retention is required for legal, tax, or dispute-resolution purposes.
5. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Export your data in a portable, structured format.
- Withdraw consent for connected social accounts at any time.
- Disable or withdraw consent for non-essential web analytics telemetry via the cookie banner.
- Object to or restrict certain processing activities as permitted by applicable law.
You can also revoke MediaOps' access to your Google account anytime via your Google Account Permissions.
To exercise these rights, contact us at support@mediaops.online.
6. Data Security
We implement industry-standard technical and organizational safeguards, including:
- Encryption of tokens and sensitive credentials at rest (AES-256).
- Row-level security policies (RLS) ensuring strict isolation so you can only access your own data.
- Strict binary magic-byte validation and filename sanitization on file uploads to protect against malware.
- Webhook cryptographic signature verification and 100% HTTPS encryption for all network traffic.
- Access to production infrastructure restricted exclusively to authorized personnel.
7. Children's Privacy
MediaOps is not directed at individuals under 18. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice prior to those changes taking effect. Continued use of the Service after changes take effect constitutes acceptance.
9. Contact Us
Questions about this Privacy Policy or our data practices:
Email: support@mediaops.online
Business name: Opsia Tech