Privacy Policy

Mask Global Technologies ("Mask Global Technologies", "we", "us", or "our") respects your privacy and is committed to protecting personal information and business data processed through our website, applications, software products, integrations, and professional services.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you:

• Visit our website
• Contact us or request a quotation
• Use software applications or services provided by us
• Interact with applications integrated with Meta Platforms
• Use services involving Facebook Pages, Instagram professional accounts, advertising accounts, lead-generation tools, or other authorized Meta business integrations
• Interact with our business communications or customer-support channels.

By accessing or using our website, applications, or services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you interact with us and which services or integrations you choose to use.

1.1 Information You Provide Directly

We may collect information including:

• Name
• Email address
• Phone number
• Company or organization name
• Business contact details
• Project requirements
• Enquiry and support information
• Service preferences
• Information submitted through forms
• Communications exchanged with us
• Documents or content voluntarily provided for service delivery.

We collect this information when you contact us, request a quotation, enter into a service relationship, submit a support request, or otherwise communicate with us.

2. Information Received Through Meta Platforms

Where a user, customer, or authorized business connects a Meta asset or authorizes one of our applications to access Meta Platform services, we may receive or process information made available through Meta APIs and permissions approved for the relevant application.

Depending on the application's functionality, permissions granted, and services used, this information may include:

• Basic account or business profile information
• Facebook Page information
• Instagram professional account information
• Advertising account information
• Advertising campaign, ad set, and advertisement information
• Campaign performance metrics and insights
• Lead information submitted through authorized lead-generation forms
• Business asset identifiers
• Page or account identifiers
• Access tokens and authorization information required for integration functionality
• Webhook events and integration status information
• Other information made available through permissions expressly granted to the application.

We only request access to Meta data and permissions that are reasonably necessary for the functionality of the relevant application or service.

The exact data available to us depends on the permissions granted, the Meta products being used, the application's approved access level, and the configuration selected by the customer or authorized user.

3. How We Use Information

We may use collected information to:

• Respond to enquiries and quotation requests
• Provide software development and technology services
• Create, maintain, and support customer accounts
• Operate our websites and applications
• Provide customer support
• Manage authorized advertising activities
• Retrieve and display advertising campaign information
• Generate campaign reports and analytics
• Synchronize authorized lead information with customer systems
• Provide integrations with customer relationship management systems and other authorized business tools
• Automate authorized business workflows
• Maintain integrations with Meta Platform services
• Communicate service-related information
• Troubleshoot technical issues
• Improve application performance and user experience
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Maintain audit and operational records
• Comply with applicable legal obligations
• Enforce contractual and legal rights.

We do not use Meta Platform Data for purposes inconsistent with the permissions granted by the user, customer, or authorized business, or contrary to applicable Meta Platform requirements.

4. Meta Advertising Management Services

Where Mask Global Technologies provides advertising management services to a client, the client should remain the owner or authorized controller of its business assets, including, as applicable:

• Facebook Page
• Instagram account
• Meta advertising account
• Dataset or Pixel
• Product catalogue
• Lead-generation forms
• Other connected business assets.

We may access these assets only where access has been authorized by the client or another person with appropriate authority.

We may process campaign and performance information to create, manage, optimize, analyze, and report on advertising campaigns according to our service agreement with the client.

We do not claim ownership of a client's Meta business assets merely because access has been granted for service delivery.

5. Lead Information

Where our services process leads generated through advertising campaigns, websites, landing pages, or authorized Meta lead-generation products, we may process information such as:

• Name
• Phone number
• Email address
• City or general location
• Product or service interest
• Appointment preferences
• Answers voluntarily submitted through a lead form.

Lead information is processed for legitimate and authorized business purposes, such as responding to enquiries, lead qualification, customer follow-up, appointment scheduling, customer relationship management, sales follow-up, and campaign measurement and reporting.

Clients using our services are responsible for ensuring that their own collection and use of lead information complies with applicable laws and disclosure requirements.

6. Legal Bases and Authorized Processing

Depending on the applicable law and processing context, we process information based on one or more of the following:

• Consent
• Performance of a contract
• Steps requested before entering into a contract
• Legitimate business interests
• Compliance with legal obligations
• Authorization provided by a user, customer, or business administrator
• Another lawful basis available under applicable law.

Where consent is required, users may withdraw consent subject to applicable legal and contractual limitations.

7. How We Share Information

We do not sell or rent personal information.

We may share information only where reasonably necessary with:

• Cloud hosting and infrastructure providers
• Email and communication service providers
• Analytics and website-performance providers
• Customer relationship management and business software providers
• Payment processors where applicable
• Professional advisers
• Subcontractors or service providers involved in delivering contracted services
• Government authorities or regulators where legally required
• Business partners where the user or customer has authorized the integration.

Service providers are given access only to information reasonably necessary for their role and are expected to process information according to applicable contractual and legal obligations.

Where our applications integrate with Meta services, data processing may also be subject to the policies and terms of Meta Platforms.

8. Third-Party Services and Integrations

Our website, applications, and services may integrate with third-party platforms or services.

These may include social media platforms, advertising platforms, analytics providers, hosting services, payment gateways, email services, messaging providers, and customer relationship management systems.

The privacy practices of third parties are governed by their own privacy policies and terms. We encourage users to review those policies before authorizing or using third-party integrations.

9. Cookies and Analytics

Our website may use cookies and similar technologies for purposes including:

• Essential website functionality
• Remembering preferences
• Website security
• Performance measurement
• Analytics
• Understanding website usage.

You may control or disable certain cookies through your browser settings. Disabling cookies may affect some website functionality.

10. Data Retention

We retain personal information only for as long as reasonably necessary for providing requested services, maintaining active customer relationships, fulfilling contractual obligations, supporting application functionality, maintaining security and audit records, resolving disputes, complying with legal, accounting, tax, or regulatory requirements, and establishing or defending legal claims.

Retention periods may vary depending on the type of information, purpose of processing, contractual requirements, integration requirements, and applicable law.

Where Meta Platform Data is no longer required for an authorized business purpose, or where deletion is properly requested and no legal obligation requires continued retention, we will delete or anonymize the relevant information within a reasonable period.

11. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, unauthorized disclosure, accidental loss, misuse, alteration, and destruction.

Security measures may include access controls, authentication mechanisms, encryption where appropriate, secure application-development practices, monitoring, logging, backups, and restricted administrative access.

No method of transmission over the Internet or method of electronic storage is completely secure. Therefore, absolute security cannot be guaranteed.

12. Access Tokens and Authentication Information

Where our applications use access tokens or similar authentication credentials to communicate with third-party platforms, we use them only to provide authorized application functionality.

We take reasonable measures to protect authentication credentials from unauthorized access and do not intentionally expose access tokens to unauthorized parties.

Users and business administrators may revoke application permissions through the relevant platform settings, subject to the functionality and controls provided by that platform.

13. User Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of eligible personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request information about how your data is processed.

To exercise a privacy right, contact us using the details provided in the Contact Us section below. We may need to verify your identity before processing certain requests.

14. Data Deletion Requests

Users may request deletion of personal information associated with our website, applications, or services.

A deletion request may be submitted by contacting Mask Global Technologies through our website contact page or by sending an email to our official privacy contact address. The request should include sufficient information to identify the relevant account, application, service, or interaction.

After receiving a valid request, we will verify the request where reasonably necessary, identify data associated with the requesting user or relevant authorized account, delete or anonymize eligible information within a reasonable period, and retain only information that must be preserved for legal, security, fraud-prevention, contractual, or regulatory purposes.

Where an application uses Meta Platform Data, users may also remove or revoke application access through the settings provided by Meta. Detailed deletion instructions may also be published on a dedicated Data Deletion Instructions page on our website.

15. Children's Privacy

Our website, applications, and business services are not intentionally directed toward children.

We do not knowingly collect personal information from children in violation of applicable law. If we become aware that personal information relating to a child has been collected improperly, we will take reasonable steps to delete it.

16. International Data Processing

Our service providers, infrastructure providers, clients, or technology partners may operate in different countries.

As a result, information may be processed or stored outside the country in which it was originally collected. Where required by applicable law, we take reasonable measures to ensure that appropriate safeguards are used for international data processing or transfers.

17. Business Customers and Client Responsibilities

Where we process information on behalf of a business customer as part of a software development, advertising management, integration, automation, hosting, or support service, the business customer may determine the purpose and means of processing certain information.

In such cases, users may need to contact the relevant business customer directly regarding their information. We will reasonably assist our customers with valid privacy and data-subject requests where required by contract or applicable law.