Privacy Policy

1. Information We Collect

When you register for or use the maeaco Autonomous Marketing System provided by Aveda Technologies, we collect information necessary to deliver autonomous marketing automation services:

• Account Credentials: Name, work email address, encrypted authentication password, and company details.
• Connected Platform Profiles: OAuth 2.0 access tokens for integrated platforms including Google Business Profile, Facebook Pages, Instagram Business, and LinkedIn Pages.
• Marketing Assets & Preferences: Business branding guidelines, uploaded brand logos, target audience profiles, campaign themes, and generated media assets.
• System Usage & Diagnostics: IP addresses, browser types, API logs, and interaction timestamps for system security and diagnostic monitoring.

2. How We Encrypt & Protect Your Credentials

Security is architected into every layer of Aveda Technologies software. Platform access tokens and OAuth credentials are NEVER stored in plaintext.

• All OAuth tokens (Google, Meta, LinkedIn) are encrypted at rest using Fernet AES-256 symmetric encryption.
• Database sessions and API endpoints enforce TLS 1.3 encryption in transit.
• Tokens are scoped strictly to tenant isolation contexts, ensuring zero cross-tenant data exposure.

3. Use of Third-Party AI Services

maeaco utilizes enterprise-tier AI models (Google Gemini 3.8/1.5, Hugging Face FLUX.1, Stability AI, and OpenAI GPT-4o) solely to generate marketing campaigns, captions, local offer posts, and review responses.

Your business data is passed to these provider APIs strictly for instant execution. Aveda Technologies never sells your private data to data brokers, nor is your data used to train public foundation models.

4. Data Control & Deletion Rights

You retain complete ownership of your data and connected channels:

• You can disconnect any social media channel or revoke OAuth permissions at any time via your Connections tab.
• You can request full account data deletion via our dedicated Data Deletion Page.
• Upon account termination, all stored OAuth credentials, cached media assets, and campaign records are permanently purged within 30 days.

5. Contact Aveda Technologies Privacy Team

If you have questions regarding this Privacy Policy or data security practices, please contact our Data Protection Team at: