Privacy Policy

1. Overview

Maiimi Marketing Hub ("the App") is an internal marketing operations tool built for and used exclusively by employees of Maiimi (PT. Maiimi Indonesia) with verified @maiimi.com email addresses. The App is not publicly available and does not collect data from end consumers.

2. Information We Collect

We collect and store the following data:

• Account information: name, email address, and profile photo provided by Google OAuth when you sign in with your @maiimi.com account.
• Role and permissions: the role assigned to your account (e.g. admin, marketing lead) and the brand(s) you have access to.
• Connected platform data: non-personal aggregate metrics, post-level insights, and account-level analytics that we fetch on your behalf from connected platforms (Meta / Instagram Graph API, TikTok for Business API, Meta Marketing API) using OAuth access tokens you authorize.
• OAuth access tokens: encrypted access and refresh tokens for connected platforms, used solely to fetch the data listed above.
• Session cookies: a session identifier valid for 30 days to keep you signed in.

3. How We Use Your Information

• To authenticate you and authorize access to internal data.
• To fetch and display social media performance metrics from connected platforms (Instagram, TikTok, Meta Ads) for internal reporting.
• To enable role-based features (admin, marketing, sales, KOL).
• To audit access to sensitive marketing data.

We do not sell, share, or transfer your data to any third party. We do not use the data for advertising or profiling.

4. Data Storage and Security

• Data is stored in Cloudflare D1 (SQLite) within Cloudflare's infrastructure.
• OAuth tokens are stored encrypted and are accessible only to the App's authenticated server runtime.
• Access is restricted to verified @maiimi.com accounts via Google OAuth. Domain restriction is enforced server-side.
• All traffic uses HTTPS/TLS encryption end-to-end.

5. Third-Party Services

The App integrates with the following third-party services:

• Google OAuth — for authentication. See Google Privacy Policy.
• Meta Graph API / Marketing API — for Instagram and Facebook insights. See Meta Privacy Policy.
• TikTok for Business / Display API — for TikTok content insights. See TikTok Privacy Policy.
• Cloudflare — for hosting and data storage. See Cloudflare Privacy Policy.

6. Data Retention

Account data is retained for as long as your @maiimi.com account is active. When your account is deactivated, your profile and OAuth tokens are deleted within 30 days. Aggregate analytics data may be retained for historical reporting in anonymized form.

7. Your Rights

As an internal user, you have the right to:

• Request access to the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data (subject to business record-keeping requirements).
• Revoke OAuth permissions at any time via the Connect page.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

9. Contact

For any questions about this policy, contact the App administrator at qemhal@maiimi.com.