Privacy Policy

MK Marketing Platform ("Platform", "we", "us") is operated by GEC Business ("GEC"). This Privacy Policy explains how we collect, use, store, and protect data when you use our multi-tenant social media management platform.

1. Information We Collect

We collect information you provide directly (business name, contact email, social media page details, content uploads) and information from connected platforms (Facebook, Instagram, LinkedIn, TikTok) via OAuth, including page access tokens, ad account identifiers, and post engagement metrics.

2. How We Use Information

• To generate and publish social media content on behalf of clients
• To run paid advertising campaigns on connected ad accounts (with explicit authorization)
• To analyze content performance and produce reports
• To bill clients for management services rendered
• To monitor system health and detect issues

3. Data Storage and Security

All data is stored on encrypted servers operated by GEC. API credentials and access tokens are encrypted at rest using AES-256-GCM. We never sell, rent, or trade your data to third parties. Access is limited to authorized GEC operators (Tea, IT) and the tenant themselves through their portal.

4. Third-Party Services

We integrate with the following services to deliver our platform features:

• Meta (Facebook + Instagram) — for posting content and managing ads
• LinkedIn — for posting content and managing ads
• TikTok — for posting content
• Anthropic Claude — for AI-powered content generation
• OpenAI DALL-E — for AI-generated images
• Google Maps — for business research during onboarding

When ads management is enabled, we transmit campaign configurations, ad creatives, and targeting specifications to Meta and LinkedIn ad systems. We do not share custom audience data without explicit tenant consent.

5. Custom Audiences and Pixel Data

If a tenant uploads customer data for custom audience matching, that data is hashed before being sent to advertising platforms in compliance with their data processing terms. Pixel events are collected only on websites where the tenant has installed the tracking pixel and obtained user consent per their own privacy notice.

6. Data Retention

Tenant data is retained for the duration of the service contract plus 90 days for backup purposes. Backups are kept for 30 days in encrypted form. Upon contract termination, tenants may request immediate deletion via the data deletion endpoint described below.

7. Data Deletion Rights

Tenants may request deletion of all their data at any time. To request deletion:

• Email it@gecbusiness.com with subject "Data Deletion Request"
• Or POST to https://mk.gecbusiness.com/api/data-deletion with the tenant's confirmation code

We will permanently delete all tenant data within 30 days and confirm completion via email. Backups will be purged within 90 days.

8. Your Rights (GDPR)

You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at it@gecbusiness.com.

9. Contact

GEC Business
Email: it@gecbusiness.com
Platform: https://mk.gecbusiness.com