← Back to MasReach

Privacy Policy

Last updated: May 25, 2026

1. Overview

MasReach ("we", "our", or "us") is a multi-platform advertising management platform that helps businesses create, manage, and monitor ad campaigns across Google Ads, Meta (Facebook/Instagram), and other platforms. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

By using MasReach, you agree to the collection and use of information described in this policy.

2. Information We Collect

Account Information

When you register, we collect your email address and any profile information you provide. This is used to authenticate you and operate your account.

OAuth Tokens & Ad Platform Credentials

To connect your advertising accounts (Google Ads, Meta, etc.), we store OAuth access tokens and refresh tokens. These tokens are encrypted at rest and are used solely to interact with those platforms on your behalf — to read campaign data, create campaigns, and push updates you initiate within MasReach.

Campaign & Advertising Data

We store campaign names, budgets, targeting parameters (age ranges, locations, interests, gender), ad creative assets you upload, and performance metrics synced from connected platforms. This data is used to power the MasReach dashboard and campaign management features.

Booking & Lead Data

When a person submits a booking request through a MasReach-powered booking page, we collect the information they provide: name, email address, phone number, service requested, preferred date, and any message. This data is stored and made available to the business that owns the booking page.

SMS & Text Message Data

When a booking form is submitted, we collect and store the submitter's phone number and their explicit opt-in consent to receive SMS messages. This record includes the timestamp of consent and the consent language presented at the time of submission. We retain opt-in records for compliance purposes.

Phone numbers collected through booking forms are used exclusively to send booking confirmations and enquiry-related messages on behalf of the applicable business. We do not sell, rent, or share phone numbers with any third party for marketing purposes. Phone numbers and SMS consent records are never used to send unsolicited or unrelated messages.

Usage Data

We may collect information about how you interact with MasReach, including pages visited, features used, and actions taken. This helps us improve the product.

3. How We Use Your Information

  • To operate your MasReach account and provide the service
  • To connect to and interact with your ad platforms on your explicit instruction
  • To display your campaign data, budgets, and performance metrics in the dashboard
  • To push campaign updates to connected platforms when you save changes
  • To send booking confirmation SMS and email messages to individuals who have opted in via a booking form
  • To send lead alert notifications to business owners when new bookings are received
  • To send you important service-related communications (not marketing without consent)
  • To improve, debug, and develop new features in MasReach
  • To comply with legal obligations including TCPA, CTIA guidelines, and A2P 10DLC requirements

4. SMS & Text Message Communications

MasReach operates an A2P (Application-to-Person) SMS messaging system to send transactional and operational text messages on behalf of businesses using our platform.

How Consent Is Collected

SMS consent is obtained explicitly when a person submits a booking form. The following disclosure is shown to all form submitters before they can complete a submission:

"By submitting this form you agree to receive SMS and email messages from [Business Name] regarding your enquiry. Message and data rates may apply. Reply STOP to unsubscribe."

Consent is not a condition of purchase. We maintain a timestamped record of each opt-in for compliance purposes.

Types of Messages We Send

  • Booking confirmation messages to customers confirming their enquiry was received
  • New booking alert notifications to business owners
  • Appointment reminders or follow-up messages, where applicable

Opting Out

You may opt out of SMS messages at any time by replying STOP to any message. Your number will be immediately removed from future messaging. You may also contact us at masreachadmin@masreach.net to request removal. Reply HELP to any message for support information.

Message Frequency & Rates

Message frequency varies based on booking activity — typically 1–2 messages per booking enquiry. Message and data rates may apply depending on your mobile carrier plan.

No Sharing of Phone Numbers

Phone numbers collected through MasReach booking forms are never sold, rented, or shared with any third party for marketing or advertising purposes. Numbers are shared only with the business whose booking page collected the submission, and with Twilio (our SMS carrier) solely for message delivery.

5. Third-Party Services

MasReach uses the following third-party services to operate. Each has its own privacy policy:

Supabase: Database, authentication, and file storage. Your account data, campaign records, and booking data are stored here.
Twilio: SMS delivery provider. Phone numbers and message content are transmitted to Twilio solely for the purpose of delivering booking-related text messages. Twilio does not use this data for its own marketing.
Meta Marketing API: Used to read and write campaign data to your Meta (Facebook/Instagram) ad accounts.
Google Ads API: Used to read and write campaign data to your Google Ads accounts.
Vercel: Hosting and serverless infrastructure for the MasReach application.

We do not sell, rent, or share your data with any third party beyond what is required to operate these integrations on your behalf.

6. Data Retention

We retain your data for as long as your account is active. If you disconnect a platform integration, the associated OAuth token is deleted immediately. If you delete your account, all associated data — including campaigns, tokens, and assets — will be permanently removed within 30 days.

SMS opt-in consent records are retained for a minimum of 4 years to comply with TCPA record-keeping requirements, even after an opt-out is processed. Opt-out records are retained indefinitely to ensure future compliance.

Meta OAuth tokens expire after 60 days and must be renewed by reconnecting. Google OAuth tokens use refresh tokens and are renewed automatically.

7. Security

We use industry-standard security measures to protect your data:

  • All data is encrypted in transit using TLS/HTTPS
  • OAuth tokens and sensitive fields are encrypted at rest
  • Access to production data is restricted to authorized personnel only
  • Row-level security (RLS) ensures users can only access their own data
  • SMS opt-in records are stored immutably for compliance auditing

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request that we correct inaccurate or incomplete data
  • Deletion: Request that we delete your personal data
  • Portability: Request your data in a portable, machine-readable format
  • Objection: Object to certain types of data processing
  • SMS Opt-Out: Reply STOP to any SMS message or contact us to be removed from all text messaging

To exercise any of these rights, contact us at masreachadmin@masreach.net.

9. Cookies

MasReach uses minimal cookies — primarily HttpOnly session cookies for OAuth state management during platform connection flows. We do not use advertising cookies or cross-site tracking cookies. Your authentication session is stored in your browser's local storage, not in persistent cookies.

10. Contact

For privacy questions, data requests, SMS opt-out requests, or concerns, please contact us at masreachadmin@masreach.net. We will respond within 30 days.

This privacy policy may be updated from time to time. We will notify you of material changes by email or by posting a notice in MasReach before the change takes effect.