Privacy Policy

Who we are

MediaPlan is operated from Sydney, Australia. We're a small team building tools to help marketers and business owners create better media plans faster. For privacy enquiries, contact us at privacy@yourmediaplan.com.

What we collect

• Account data — your email address and name, collected when you sign up via Supabase Auth.
• Brief content — the business information, audience details, budget, and goals you enter when generating a plan. Stored in Supabase and sent to Anthropic's Claude API to generate your strategy.
• Generated plans — the strategy output produced by the Council, stored in Supabase and linked to your account.
• Analytics data — page views and usage events (sign-up, plan generation, exports, checkout) via Google Analytics 4 and Google Tag Manager. This includes IP-derived approximate location, device type, and browser information.
• Payment data — Stripe handles all card transactions. We never see or store your card number or CVV. We do store your Stripe customer ID and subscription status.
• Email engagement data — delivery, open, and click events for transactional emails sent via Resend.

How we use it

• To provide the MediaPlan service — generating and storing your strategy plans.
• To send transactional emails such as account confirmations and plan notifications.
• To understand how the product is being used so we can improve it.
• To process payments and manage your subscription.
• To prevent fraud and abuse.

We do not sell your data. We do not use your brief content to train AI models.

Third parties we share data with

We share data with the following processors to operate the service. Each is bound by their own privacy policy:

• Anthropic ↗ — AI plan generation — your brief content is sent to Claude to produce your strategy plan.
• Supabase ↗ — Database and authentication — stores your account, briefs, and plans.
• Vercel ↗ — Hosting and edge infrastructure — serves the application and logs edge requests.
• Google (Analytics + Tag Manager) ↗ — Product analytics — tracks usage events to help us understand and improve the product.
• Stripe ↗ — Payment processing — handles all card transactions. We never see or store your card details.
• Resend ↗ — Transactional email — sends account confirmations and plan notifications.

Cookies

We use first-party cookies to keep you logged in (managed by Supabase Auth) and third-party cookies set by Google Analytics for product analytics. Google Analytics cookies help us understand aggregate usage patterns — they do not identify you personally.

A cookie consent banner is on our roadmap. In the meantime, you can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

Data retention

• Account data — retained while your account is active.
• Brief and plan data — retained while your account is active.
• Analytics data — retained for 14 months per GA4 default settings.
• All personal data — deleted within 30 days of a verified account deletion request.

Your rights under the Australian Privacy Act 1988

You have the right to access, correct, or request deletion of your personal information. To exercise any of these rights, email privacy@yourmediaplan.com and we will respond within 30 days.

You can delete your account at any time from your account settings. This will remove your plans and briefs from our systems.

International data transfers

Some of our service providers (Anthropic, Vercel, Google, Stripe) process data in the United States and other jurisdictions outside Australia. We rely on those providers' standard contractual clauses and security certifications to protect your data in transit and at rest.

Children

MediaPlan is not directed at users under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top and notify you of material changes via email. Continued use of MediaPlan after changes are posted constitutes acceptance of the updated policy.