Privacy Policy

Account & Profile Information

• Name, email address, and password (or Google account identity if you sign in with Google)
• Organization name, role, use case, and language/regional preferences
• Billing details processed by Stripe — we never store full card numbers on our systems

Content You Upload

• Creative files and assets (images, videos, audio, documents) and their versions
• Briefs, comments, annotations, tags, project data, brand guidelines, and workflow records
• Information about talent, agencies, and campaigns that you choose to enter

Usage & Technical Information

• Device and connection data (IP address, browser type, operating system)
• Activity and audit logs (logins, approvals, uploads, status changes) kept for security and accountability
• Error and performance diagnostics used to keep the platform reliable

• To provide the platform: storage, collaboration, review and approval workflows, sharing, and publishing tools
• To process payments, manage subscriptions, and apply plan limits via Stripe
• To send transactional emails (invitations, review reminders, workflow notifications) via our email provider
• To provide AI features you invoke — such as AI tagging, brand compliance checks, brief generation, and smart search — by sending the relevant content to AI model providers for processing
• To secure the platform, detect abuse, and comply with legal obligations

Within Your Organization

Mediasphere is a multi-tenant, organization-based platform. Content you add is visible to other members of your organization according to the role-based permissions (Owner, Admin, Member, Viewer, Guest) your organization administrators configure. Share links you create may expose specific assets to people outside your organization — you control their password protection, expiry, and permissions.

Service Providers (Subprocessors)

• Stripe — payment processing and billing
• Google — single sign-on authentication (if you choose Google sign-in)
• Cloudflare — secure file storage and content delivery
• Email delivery provider — transactional notifications
• AI model providers — processing for AI features you invoke
• Base44 — application hosting and database infrastructure

Legal Requirements

We may disclose information when required by law, court order, or governmental request, to protect our rights or the safety of our users, or in connection with a merger, acquisition, or asset sale.

• Encryption in transit (TLS) and at rest for stored files and records
• Private file storage — assets are served via short-lived signed URLs, not public links
• Role-based access control and organization-level data isolation (row-level security)
• Audit logging of significant actions within each organization
• Payment data handled exclusively by Stripe (PCI-DSS compliant)

Depending on your jurisdiction, you may have the right to:

• Access and export your personal data (self-service: Settings → Profile → Privacy & Data Rights)
• Correct inaccurate personal information
• Delete your personal data or your entire organization account (Settings → Delete Account, including a full data backup download)
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

We respond to verified privacy requests within the timeframes required by applicable law. Contact us at privacy@mediasphere.ai.

• Essential cookies — required for authentication, security, and core functionality; cannot be disabled
• Preference storage — remembers your language and interface settings
• Analytics — limited, privacy-conscious product usage measurement to improve the platform

We do not use third-party advertising cookies or cross-site tracking.

• Account and organization data: retained while your account is active
• Deleted projects and creatives: held in Trash for 30 days, then permanently purged
• Account deletion: all organization data and files are permanently erased upon confirmed deletion; you may download a complete backup first
• Billing records: retained as required for tax and regulatory compliance
• Security and audit logs: retained for a limited period for security purposes, then purged automatically

Your data may be processed in countries other than your own by us and our subprocessors. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and the data protection commitments of our infrastructure providers.

Mediasphere is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or platform features. For material changes we will provide notice via email or in-app notification before the changes take effect. The "Last Updated" date above reflects the most recent revision. Continued use of the platform after changes become effective constitutes acceptance of the updated policy.

Contact

Privacy questions: privacy@mediasphere.ai