Legal

Privacy Policy

Last updated: September 7, 2026 · Version 1.1

1. Overview

This Privacy Policy explains how Internet Moguls, operated by Moguls Online Pvt. Ltd. (“Internet Moguls,” “we,” “us,” or “our”), collects, accesses, uses, stores, and protects data through IM Connect MCP (the “Service”) — a Model Context Protocol (MCP) connector that unifies advertising and analytics data from Google and Meta platforms on behalf of authorized users and the clients they manage.

This policy applies to anyone who authorizes IM Connect MCP to access a Google or Meta account, including Internet Moguls team members, client stakeholders, and, where the Service is made available externally, other agencies or properties using it directly.

2. Data We Access

IM Connect MCP requests access only to the scopes required to deliver reporting, automation, and AI-assisted analysis. Depending on which integrations an account authorizes, this may include:

  • Google Analytics 4 (GA4): sessions, conversions, channel and campaign attribution, and aggregate on-site behavior data.
  • Google Ads: campaign, ad group, keyword, and ad-level performance and spend data, and — where explicitly authorized — the ability to create or modify campaigns, budgets, bids, and statuses.
  • Google Search Console: organic search query performance, indexing status, and click-through data.
  • Google Business Profile: listing performance, reviews, ratings, and search/Maps visibility metrics.
  • Google PageSpeed Insights: page-experience and Core Web Vitals data for specified URLs.
  • Meta Marketing API: campaign, ad set, ad, and creative-level performance and spend data for authorized ad accounts.
  • Meta Graph API: Page-level engagement, audience, and organic content performance data for authorized Pages.
  • Meta Conversions API: server-side event data submitted on behalf of an authorized advertiser for attribution and measurement purposes.

The data accessed through these integrations is advertising and analytics performance data — campaign metrics, audience aggregates, listing and review content, and website performance signals. IM Connect MCP does not request access to personal inboxes, private messages, financial account credentials, or end-consumer personal data beyond what is inherently present in standard ad platform reporting (for example, aggregate audience demographics or the text of a public review).

3. How We Use Data

Data accessed through IM Connect MCP is used solely to:

  • Generate performance reports and dashboards for the account owner or the agency managing the account.
  • Power automated workflows explicitly configured by an authorized user (for example, scheduled reporting or budget-pacing checks).
  • Enable AI-assisted analysis and natural-language querying of an account's own data.
  • Where explicitly authorized, execute write actions back to Google Ads (such as budget, bid, or status changes) on behalf of the account owner.

Data is not used to build cross-client benchmarks, sold, or shared with any party outside the scope described in this policy without separate, explicit consent.

4. AI-Assisted Processing

IM Connect MCP is built on the Model Context Protocol so that account data can be queried and summarized using AI assistants, including Anthropic's Claude. When AI-assisted analysis is used, relevant account data is transmitted to the applicable AI provider as part of processing the request. This data is used only to generate the requested output and is handled under that provider's own data-handling terms as a sub-processor of Internet Moguls (see Section 8).

Users and clients should avoid entering unrelated sensitive personal information into natural-language queries, as query text may be processed by the underlying AI model.

5. Credential & Token Security

IM Connect MCP does not request or store platform passwords. Access is granted through each platform's standard authorization flow:

  • Google access is granted via OAuth 2.0 and, where applicable, through My Client Center (MCC)-level permissions rather than individual account logins.
  • Meta access is granted via System User access tokens scoped to specific ad accounts and Pages, or via standard OAuth for individual users.

All access tokens and secrets are encrypted at rest and in transit, are never stored or logged in plaintext, and are accessible only to the systems and personnel required to operate the Service. Tokens can be revoked at any time by the account owner directly within Google or Meta's own account settings, or by request to Internet Moguls.

6. Data Protection and Security

Beyond encrypting tokens at rest and in transit (Section 5), we apply the following additional safeguards to data accessed through Google or Meta APIs:

  • Access controls: Access to a client's connected account data is scoped by design to that client's own account within the Service — a login cannot view or query another client's connected data. We do not grant any single login blanket access across every client's data.
  • Audit logging: Every attempted write to a connected Google Ads account through the Service (such as a budget, bid, or status change) is recorded in a dedicated, append-only audit log capturing the entity affected, the exact before and after values, whether the change succeeded, who made it, and the timestamp — providing a complete record of every account modification made through the Service.
  • Data minimization: As described in Section 2, we request only the specific scopes of access necessary to provide our reporting and campaign management features, not broader permissions than required.
  • No third-party sale or sharing: As described in Section 9, we do not sell, rent, or share data accessed through Google or Meta APIs with any third party outside of what is necessary to provide the Service to the account owner.

See Section 7 for how long this data is retained and how deletion requests are handled.

7. Data Retention & Deletion

Performance data is retained for as long as an account remains connected to IM Connect MCP, in order to support historical reporting and trend analysis. When an account is disconnected, or when a client relationship ends:

  • Access tokens are revoked and deleted from active systems.
  • Retained reporting data is deleted or anonymized within a reasonable period following the request, except where retention is required to meet legal, tax, or audit obligations.

Account owners or clients may request deletion of their data at any time by contacting us using the details in Section 17.

8. Sub-Processors

Internet Moguls uses a limited number of sub-processors to operate IM Connect MCP, including:

  • Anthropic (Claude): for AI-assisted analysis and natural-language querying of account data, where enabled.
  • Google Cloud Platform: for underlying infrastructure, and as the platform of origin for Google API data.
  • Meta Platforms, Inc.: as the platform of origin for Meta API data.

Each sub-processor is bound by its own data protection terms. We do not add new categories of sub-processor without updating this policy.

9. No Sale of Data

Internet Moguls does not sell, rent, or trade data accessed through IM Connect MCP to third parties for their own marketing or commercial purposes.

10. Cookies & Tracking

The marketing website at im-connect.internetmoguls.com does not set non-essential tracking cookies. If analytics or session cookies are introduced in the future, this policy will be updated to describe their purpose and give visitors the ability to opt out where required by law.

11. Your Rights

Subject to applicable law, you may request to:

  • Access the categories of data IM Connect MCP holds in connection with your account.
  • Correct inaccurate account or contact information.
  • Request deletion of your data, subject to the retention exceptions in Section 7.
  • Revoke platform access at any time via Google or Meta account settings.

To exercise these rights, contact us using the details in Section 17.

12. Google API Services User Data Policy

IM Connect MCP's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide and improve the reporting and automation features described in this policy, and is not used for advertising, sold, or transferred to third parties except as necessary to provide the Service or as required by law.

13. Meta Platform Terms

Use of Meta's Marketing API, Graph API, and Conversions API through IM Connect MCP complies with the Meta Platform Terms and applicable data-use policies, including restrictions on how data obtained from these APIs may be used, retained, and shared.

14. Children's Privacy

IM Connect MCP is a business-to-business tool intended for use by marketing and revenue management professionals. It is not directed at children, and we do not knowingly collect data relating to children through the Service.

15. Changes to This Policy

We may update this policy as the Service evolves or as required by law or platform terms. Material changes will be reflected by updating the “Last updated” date and version number at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

16. Governing Law

This policy is governed by the laws of India, without regard to conflict-of-law principles. Any disputes arising from this policy are subject to the exclusive jurisdiction of the courts of New Delhi, India.

17. Contact Us

Questions, access requests, or deletion requests related to this policy can be directed to:

Moguls Online Pvt. Ltd. (Internet Moguls)
New Delhi, India
Email: rajesh@internetmoguls.com or abhinav@internetmoguls.com