MiaCreate Privacy Policy

Data controller: 30 Works (Pty) Ltd t/a 11&1 Agency
Reg. 2015/046999/07 | VAT 4130284898
51 6th Avenue, Walmer, Port Elizabeth, 6065, South Africa

1. Information We Collect

• Account Data: name, email, company name, billing address, and payment details.
• Usage Data: log files, browser type, pages visited, and session duration.
• Creative Data: information provided in briefs, uploads, and feedback.
• AI Interactions: prompts, instructions, and communications generated during use of the platform.
• Connected Platform Data: marketing data from third-party platforms you choose to connect (see Section 5).

2. How We Use Your Information

• To deliver creative and marketing-intelligence services.
• To improve the platform's performance and user experience.
• To communicate updates, invoices, and reports.
• To comply with tax and other legal requirements.
• To generate personalised marketing insights and recommendations for your connected accounts.
• To train our internal systems using anonymised and aggregated MiaCreate platform-usage data only (this excludes any data obtained through Google APIs — see Section 5).

3. Data Storage and Security

• Data is stored on encrypted servers and cloud infrastructure.
• Access is restricted to authorised personnel only.
• We apply technical and organisational measures designed to prevent unauthorised access or disclosure.
• Connected-platform data is stored separately, with additional access controls.

4. Cookies and Analytics

We use cookies and analytics tools (such as Google Analytics) to understand usage patterns and improve site performance. You can manage your cookie preferences through your browser settings.

5. Third-Party Platform Data (Google and Other Services)

When you connect a third-party platform to MiaCreate, we access data through that platform's API solely to provide marketing-analytics services.

Google Ads Data (via Google Ads API): When you connect a Google Ads account, we access campaign performance metrics (impressions, clicks, conversions, spend, ROAS), ad group and keyword performance data, and account structure and campaign settings — all in read-only mode. MiaCreate does not create, modify, pause, or delete campaigns, ads, or settings in your Google Ads account.

Google Analytics Data (via Google Analytics Data API): When you connect a Google Analytics 4 property, we access website traffic metrics (sessions, users, pageviews, bounce rate), audience demographics and behaviour data, and acquisition channels, traffic sources, and conversion/goal data — all in read-only mode. We do not modify your Google Analytics settings, properties, or data.

How we use Google API data: solely to display your marketing performance in MiaCreate dashboards, generate real-time, account-specific AI-powered insights and recommendations, combine data across platforms for unified cross-channel reporting, and identify trends, anomalies, and optimisation opportunities in your marketing data.

How we store Google API data: on encrypted servers with restricted access, cached temporarily to improve dashboard performance; historical data may be retained to show trends over time. You may disconnect your Google accounts at any time via the Integrations page — once disconnected, we stop accessing new data from those accounts. You may request full deletion of stored Google data by emailing privacy@miacreate.ai.

AI and machine-learning disclosure for Google data: MiaCreate does not use data obtained through Google APIs (including the Google Ads API and Google Analytics Data API) to develop, improve, or train generalised AI or machine-learning models. AI-powered insights shown in MiaCreate are generated in real time from your own account data only, and your Google data is never used to train models that benefit other users. This policy adheres to Google's API Services User Data Policy, including its Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).

Other connected platforms: MiaCreate may also integrate with Meta Ads, Meta Pages, Brevo, and HubSpot. Each integration accesses only the data necessary to provide marketing-analytics services, and the same read-only and data-protection principles above apply to all connected platforms.

6. Automated Analysis and Machine Learning

• Platform usage data: we may use anonymised, aggregated data about how MiaCreate is used (e.g. which features are popular, common query patterns) to improve our services. This never includes identifiable personal information or data obtained through connected Google APIs.
• Your marketing data: machine-learning models may analyse your connected-platform data to generate personalised insights, predictions, and recommendations for your benefit only; your data is not used to train models for other users.
• Opt-out: you may opt out of automated analysis by emailing privacy@miacreate.ai, though this may limit the insights available to you.

7. Sharing of Information

We do not sell or rent your personal data. We may share information with payment processors (for billing), cloud service providers (for storage and hosting), and contractors or freelancers working under confidentiality agreements. We do not share your connected-platform data (Google Ads, Google Analytics, Meta, etc.) with any third party except as required to provide MiaCreate's services or as required by law.

8. Data Retention

• Account data is retained while your account is active, plus seven (7) years thereafter for tax and legal compliance.
• Connected-platform data is retained while your account is active and the relevant platform remains connected.
• On account deletion or platform disconnection, associated data is deleted within 90 days unless we are legally required to retain it longer.

You may request deletion of your data at any time by emailing privacy@miacreate.ai.

9. Your Rights

Under POPIA, and GDPR where applicable, you have the right to access the personal data we hold about you, request correction or deletion of your information, withdraw consent to processing, disconnect third-party platforms at any time, request your data in a portable format, and lodge a complaint with the Information Regulator. To exercise any of these rights, email privacy@miacreate.ai.

10. International Transfers

Where data is processed outside South Africa, we ensure equivalent data-protection standards are maintained. Our cloud infrastructure providers hold appropriate certifications and data-protection agreements.

11. Children's Privacy

MiaCreate is not intended for individuals under 18, and we do not knowingly collect data from minors.

12. Policy Updates

We may update this Privacy Policy from time to time. Updates are posted on this page with a revised effective date. Material changes affecting your Google API data will also be communicated by email.

13. Information Officer and Contact

Under POPIA, our Information Officer is: Ryan Le Roux.

For any privacy-related question or data request, contact:
Email: privacy@miacreate.ai (include “Google Data Request” in the subject line for Google-API-specific enquiries)
Phone: 061 512 6095
Company: 30 Works (Pty) Ltd t/a 11&1 Agency
Registered address: 51 6th Avenue, Walmer, Port Elizabeth, 6065, South Africa