Chính sách quyền riêng tư

1. What the System does

The System is an internal work tool for the Operator’s marketing team. Users connect Meta (Facebook/Instagram), TikTok Ads, Google Ads (including YouTube ads) and OpenAI Ads ad accounts with an access token, refresh token, service account key or API key they create in their own developer app, then manage ads from an AI assistant (Claude, ChatGPT, Gemini) through a private MCP link: daily metrics, pausing/activating, editing, copying and creating ads, and reading Facebook Page posts and insights.

Users can also add a Telegram notification channel (a Telegram bot they create themselves) to receive messages when an AI assistant changes ads, when an ad connection is about to expire or fails, when a software update is available, or when the AI assistant is allowed to send messages.

Users can also register Google Drive folders and Google Sheets (by sharing them with the System’s service account) so the AI assistant can take ad images and videos from them, upload them to ad accounts, read a creative plan in a sheet and write status back to that sheet.

There is no public sign-up: only people given an account by an administrator can sign in. The System does not use “Login with Facebook”.

2. Data we process

• Staff accounts: name, email, role. Passwords are stored only as one-way hashes; two-factor (2FA) secrets and backup codes are encrypted; sign-in sessions include the IP address and browser information.
• Ad platform credentials: Meta access tokens (plus App ID and App Secret if entered); TikTok access tokens (plus App ID and App Secret); Google Ads credentials (OAuth client ID, client secret and refresh token, or a service account JSON key file, plus the manager account ID if any); OpenAI Ads API keys. They are encrypted with AES-256-GCM before storage, never shown again (the interface only shows the last 4 characters), never written to logs and never sent to an AI assistant.
• Advertising data: the list of ad accounts (name, ID, currency, time zone, status) is stored for access control. Campaigns (including YouTube video campaigns run through Google Ads), ad sets/ad groups, ads, keywords and performance metrics are fetched directly from the Meta Marketing API, the TikTok API for Business, the Google Ads API and the OpenAI Ads API whenever a user asks, and are not kept as a separate data store.
• Telegram notification channels: the bot token (encrypted with AES-256-GCM as above, only the last 4 characters shown, never logged, never sent to an AI assistant), chat ID, group/channel title, topic ID (if any), bot name and the subscribed event types. Each message sent is recorded in a delivery log (time, source, event type, status, error code and a preview of at most 300 characters with secrets masked).
• Google Drive and Google Sheets: the Google service account JSON key and the Google API key (encrypted with AES-256-GCM as above, only the last 4 characters shown, never logged, never sent to an AI assistant); the service account email (not secret, shown so people can share folders with it); the registered folders / sheets (Google Drive ID and name, company / personal scope, who registered it, column mapping, check status). Image / video files and sheet cells are only read when a user or the AI assistant asks; files are passed straight from Google Drive to the ad platform and are not stored on the server. The System stores file IDs and the media IDs already uploaded to an ad account (for reuse), temporary links the platform uses to fetch a video (secret token, expire after 60 minutes) and the status of background video uploads. For sheets with write-back enabled, the System only writes to the declared status / result columns.
• Facebook Page data (read-only): the list of Pages the token can access (name, ID, category, profile picture, follower count) is stored for access control. Page posts and insights are read through the Graph API when a user asks. The System does not publish, edit or delete posts and does not read comment or message content.
• Logs: staff activity logs (time, actor, action, target, IP address, device) and a log of every MCP request (time, AI app, IP address, tool called, parameters and a result summary, before/after values for write actions). Secrets are masked before logging and each record has a size limit.
• Temporary technical data: password-guessing and rate-limit counters (by email, IP address) and actions waiting for two-step confirmation. They are deleted automatically when they expire.

3. Purposes

• Authenticating users, enforcing permissions and protecting accounts.
• Doing what users ask: reporting, pausing/activating, editing, copying and creating ads; reading Page posts and insights.
• Sending notifications to the Telegram groups/channels users configured, for the events they enabled.
• Taking images and videos from Google Drive to upload them to ad accounts, and updating status in Google Sheets, when users ask.
• Keeping logs for accountability, incident investigation and abuse detection.
• Operating, maintaining and updating the System.

We do not use data for advertising, do not profile users for marketing and do not sell or rent data.

4. Legal basis

• Necessity to provide the work tool staff use in their job.
• User consent: users choose to connect ad accounts, Pages and Telegram channels, to share Google Drive folders / sheets and to grant permissions to their token, and can withdraw at any time (section 8).
• The Operator’s legitimate interest in protecting the System and its ad assets (logs, password-guessing protection).
• Legal obligations, where applicable.

The Operator is responsible for processing personal data in accordance with Vietnamese personal data protection law.

5. Sharing

• Meta Platforms, TikTok, Google and OpenAI: the System calls their APIs with your token, key or API key, only as needed to fulfil a request. Data on their side is governed by the privacy policies of Meta, TikTok, Google and OpenAI.
• Telegram: if you add a notification channel, the System sends messages through the Telegram Bot API with your bot token to the group/channel you chose. Messages may contain the MCP name, ad account names and IDs, ad object names, status/budget changes, connection status, software version information and text written by the AI assistant (only if you allow it). Messages never contain tokens, API keys or MCP links. Every member of that group/channel can read them; messages on Telegram are governed by Telegram’s privacy policy.
• Google Drive and Google Sheets (Google): the System calls the Google Drive API and the Google Sheets API with a service account or API key created by the Operator (or by you), only for folders / sheets shared with that service account or files shared publicly with “Anyone with the link”. Images and videos are passed on to the ad platform you choose (Meta, TikTok, Google, OpenAI); for videos, the platform fetches them through a temporary link with a secret token on the System’s domain. The AI assistant only receives file IDs, names, sizes and dimensions - never keys, API keys or temporary links. Data on Google’s side is governed by Google’s privacy policy.
• The AI assistant you connect (Claude, ChatGPT, Gemini…): when you add your MCP link to an AI app, the assistant only receives the data you request through the MCP tools, within the accounts, Pages and permissions granted to that link; it never receives tokens or API keys. Conversation content is processed by the AI provider under its own terms.
• The server may check for software updates (GitHub) and download system notices from noti.vn. These requests do not include user or advertising data.
• Competent authorities, when required by law.

Apart from the above, we do not share data with third parties.

6. Storage and security

All data is stored in a database on a server managed by the Operator (mcp.nguyentatduong.com) and accessed over encrypted HTTPS connections.

• Tokens, API keys, service account keys, Telegram bot tokens and MCP links are encrypted with AES-256-GCM; encryption keys are kept separate from the database.
• Passwords are hashed; two-factor authentication (TOTP) is supported; repeated wrong attempts trigger a temporary lock.
• Role-based access (Administrator / Staff); staff only see their own connections, Telegram channels and MCP servers; personal Google Drive folders / sheets are only visible to their owner and administrators.
• Write actions proposed by an AI assistant can require two-step confirmation and are subject to budget limits; newly created or copied ads always start paused.
• Invalid, disabled or expired MCP links return no data.

No system is perfectly secure. If we detect an incident affecting data, we will remediate it and notify affected people as required by law.

7. Retention

• MCP logs: the last 3 months plus the current month are kept; older entries are deleted permanently and automatically.
• Staff activity logs: the last 3 months plus the current month are kept; older entries are deleted permanently and automatically.
• Tokens and API keys: until the connection is deleted or its token is replaced; when a connection is deleted its encrypted token is overwritten immediately.
• Telegram bot tokens: until the notification channel is deleted or its token is replaced; once a channel is deleted the System stops sending messages and no longer uses that token.
• Telegram delivery logs: kept for the MCP log retention period (3 months), then deleted automatically.
• Google Drive: service account keys and API keys until deleted or replaced; registered folders / sheets until deleted; temporary video links expire after 60 minutes and are deleted after 24 hours; background video uploads are deleted after 30 days; uploaded media IDs are kept for reuse until the ad account is removed from the System. Files on Google Drive are never copied or kept by the System.
• Staff accounts: until an administrator deletes the account.
• Sessions, security counters and pending confirmations: deleted automatically when they expire.
• Advertising and Page data fetched from the platforms: not stored long-term, except the account and Page lists and the summaries in logs.

8. Your rights

• View and correct your own account information on the Account page; ask the Operator for a copy of the data about you.
• Request deletion: follow the Data Deletion Instructions at https://mcp.nguyentatduong.com/data-deletion.
• Withdraw access: delete the connection in the System, revoke the token or API key, or remove the app from your Facebook account, TikTok For Business or Google account. The System can then no longer access your platform data. For Telegram: delete the notification channel in the System and/or revoke the bot token with @BotFather (the /revoke command). For Google Drive: stop sharing the folder / sheet with the service account email in Google Drive, delete the folder / sheet in the System, or (administrators) delete the service account key / API key in Google Cloud.
• Object to or request restriction of processing, and lodge complaints as provided by law.

9. Children

The System is an internal work tool, not intended for people under 18, and does not knowingly collect children’s data.

10. Changes

This policy may be updated; the last update date is shown at the top of the page. For material changes, the Operator will inform users before they take effect.

11. Contact

For any privacy question or request, please contact mcp.nguyentatduong.com:

the system administrator at mcp.nguyentatduong.com