Privacy Policy

Last updated: March 31, 2026

1. Introduction

TX Media Agency ("we", "our", "us") operates the Cesara (the "Platform"). This Privacy Policy explains how we collect, use, store, and protect information when you use the Platform.

2. Information We Collect

Account Information

When an account is created for you by your organization administrator, we store your name, email address, and role within the organization.

Advertising Data

The Platform processes advertising campaign data including budgets, performance metrics, creative assets, and audience targeting information. This data belongs to the client organizations and is processed on their behalf.

Platform Credentials

When you connect advertising platforms (Meta, Google Ads, TikTok), we store encrypted OAuth tokens to manage campaigns on your behalf. These tokens are encrypted at rest using AES-256-GCM encryption.

Usage Data

We collect usage logs, audit trails, and error reports to maintain platform security and improve the service. This includes IP addresses, browser information, and actions taken within the Platform.

3. How We Use Your Information

  • To provide and maintain the advertising management service
  • To authenticate your identity and enforce access controls
  • To generate AI-powered campaign recommendations and creative content
  • To produce performance reports and analytics
  • To detect and prevent unauthorized access
  • To maintain an audit trail for compliance purposes

4. Data Sharing

We share data with the following categories of third parties:

  • Advertising Platforms: Meta, Google Ads, and TikTok receive campaign data necessary to run your advertisements.
  • AI Providers: Anthropic (Claude) processes campaign data to generate recommendations. Data sent to AI providers is not used for model training.
  • Infrastructure: Supabase (database), Vercel (hosting), and Sentry (error monitoring) process data as part of platform operations.

We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures including:

  • AES-256-GCM encryption for stored OAuth tokens
  • Row-Level Security (RLS) policies enforcing data isolation between organizations and users
  • Role-based access control (admin, manager, client)
  • HTTPS encryption for all data in transit
  • Immutable audit trail for all data modifications

6. Data Retention

Account data is retained for the duration of your organization's subscription. Campaign performance data is retained for up to 2 years. Audit trail entries are retained indefinitely for compliance purposes. Upon account deletion, personal identifiers are removed but anonymized audit records may be retained.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict processing of your data

To exercise these rights, contact your organization administrator or email us at privacy@txmedia.com.

8. Cookies

The Platform uses essential cookies for authentication and session management. These cookies are strictly necessary for the Platform to function and cannot be disabled. We do not use advertising or analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via the Platform or email.

10. Contact

For privacy-related inquiries, contact us at privacy@txmedia.com.