Privacy Policy
Last updated September 1, 2026
MaaS is a business marketing tool used by marketing agencies and their operators to create, launch, and optimize advertising campaigns. This policy explains what the MaaS mobile app and web platform collect, how we use it, and the choices you have. It applies to the MaaS iOS and Android apps and to the MaaS web service.
Information we collect
- Account & device pairing. MaaS accounts are created and managed by your agency on the web platform. When you pair a mobile device, we store an optional device label you choose and a secure API token bound to your operator account so the app can act on your behalf.
- Notification tokens. If you enable notifications, we store a push token (from Apple or Google) to deliver the alerts and approvals you opt into.
- Content you provide. Photos, videos, and voice recordings you choose to upload to generate ad ideas and creatives, plus the campaign, client, and marketing data you manage in the product.
- Diagnostic & usage data. Standard server logs (such as request metadata and app version) used to operate and secure the service.
- Domain registrant details. If you buy a domain through us, the name, email address, telephone number and postal address you give at checkout are collected as your registrant contact and passed to our registrar and the relevant registry, as domain registration requires.
How we use information
- Provide and maintain the MaaS service and its features.
- Generate ad creatives and ideas from content you submit.
- Deliver the notifications and approvals you opt into.
- Secure accounts, prevent abuse, and troubleshoot problems.
What we do not do
MaaS does not include third-party advertising SDKs, does not track you across other companies' apps or websites, and does not sell your personal data.
Service providers and data sharing
We share data only with processors that help us run the service, and only as needed: cloud hosting and database providers (Vercel and Neon), email delivery (Resend), SMS delivery (Twilio), push-notification delivery (Apple Push Notification service and Google Firebase Cloud Messaging), and AI providers used to generate creatives (Anthropic, OpenAI, and Google). When you connect an advertising platform (for example Meta, Google, TikTok, Snapchat, or LinkedIn), we exchange the data required to manage your campaigns on that platform under your authorization.
If you register a domain through us, your registrant details are shared with our registrar and with the registry that operates the domain ending, and may be published or disclosed where that registry's rules require it. That disclosure is a condition of registering a domain and is outside our control; it is described in the Domain registrations section of our Terms.
A full list of the sub-processors we use, the data they receive, and the transfer safeguards that apply is maintained in our sub-processor register at /subprocessors.
Device permissions
- Camera & photos. Only when you choose to capture or pick an image to turn into an ad idea.
- Microphone. Only when you choose to dictate an ad idea by voice.
- Notifications. To deliver alerts and approvals you enable.
Data retention and deletion
You can revoke a device's access at any time by unpairing it from the app (More → settings) or from the web platform; this immediately disables that device's token. Because accounts are provisioned and managed on the web platform, to delete your account and associated data contact us at privacy@maas.app and we will process the request.
Children
MaaS is a business tool and is not directed to children, and we do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.
Contact
Questions about this policy? Email privacy@maas.app.