Privacy Policy
Last updated 27 September 2026
In short. We store the account and client information you put into MNCL360, and the advertising performance data you connect. We do not sell it, we do not use it to train models for anyone else, and you can export or delete it at any time.
1. Who we are
MNCL360 is operated by BusinessGenics d.o.o., Borongajska cesta 82, Zagreb, Croatia ("we", "us"). MNCL360 provides an operations platform for marketing agencies. This policy explains what personal data we handle and why. For questions, or to exercise any right described here, contact privacy@mncl360.com.
For personal data about your own clients and their customers that you upload or connect, you are the data controller and we act as your processor. For your account data — the people on your team who use MNCL360 — we are the controller. The terms of our processing are set out in our Data Processing Agreement.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email address, workspace name, role, authentication identifiers | To create and secure your account |
| Workspace content | Client records, contacts, notes, calls, tasks, uploaded spreadsheets | To provide the service you signed up for |
| Advertising data | Campaign spend, impressions, results, cost per result and creative content from advertising accounts you connect | To produce performance reporting and health scoring |
| Billing data | Subscription status, plan, payment records | To bill you. Card details are handled by Stripe and never reach our servers |
| Technical data | IP address, browser type, timestamps, error logs | Security, abuse prevention and diagnosing faults |
3. Advertising platform connections
When you connect an advertising account, we receive an access token scoped to the permissions you grant. We use it only to read performance data for the accounts you select.
- We request read access to advertising performance data. We do not create, edit, pause or delete campaigns.
- Tokens are encrypted at rest and used only to serve your workspace.
- You can disconnect an account at any time in Settings. Disconnecting revokes our access immediately.
- Data retrieved from advertising platforms is used solely to provide reporting, scoring and analysis inside your workspace. It is never sold, shared with other workspaces, or used for advertising.
4. Artificial intelligence features
Some features — activity summaries, client research briefs, report narratives, support chat — send workspace content to a third-party model provider to generate output. That content is processed to produce your result and is not used to train the provider's models. You control which features you use, and AI features can be disabled for your workspace.
5. Legal bases
Where the GDPR applies, we rely on: contract for providing the service and billing you; legitimate interests for security, fraud prevention and improving the product; and consent where you connect a third-party account or opt into marketing email. You can withdraw consent at any time.
6. Sharing
We do not sell personal data. We share it only with service providers who help us run MNCL360, each bound by contract to protect it:
- Clerk — authentication and user management
- Neon — database hosting
- Render and Vercel — application hosting
- Stripe — payment processing
- Anthropic — AI feature processing
- Resend — transactional email
- Cloudflare — file storage and delivery
- Meta and Google — where you connect an advertising account
We may also disclose data where required by law, or as part of a merger or acquisition, in which case we will tell you before your data becomes subject to a different policy.
7. International transfers
We operate from the European Union and use providers located in the EU, the United Kingdom and the United States. Where personal data leaves the EEA we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
8. Retention
We keep workspace content for as long as your account is active. If you close your account we delete or anonymise your data within 90 days, except where we must keep records longer for tax or legal reasons. Backups are purged on a rolling schedule and are not restored to serve deleted accounts.
9. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or object to our processing, and to receive your data in a portable format. Write to privacy@mncl360.com and we will respond within 30 days. You can also complain to your local data protection authority.
To delete data connected from an advertising platform, see Data deletion.
10. Security
Data is encrypted in transit and at rest. Access to production systems is limited to people who need it. Third-party credentials you provide are stored encrypted. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as required by law.
11. Children
MNCL360 is a business tool and is not directed at anyone under 16. We do not knowingly collect their data.
12. Cookies and analytics
On mncl360.com we use our own first-party analytics to see which pages are useful, and Google Analytics and the Meta (Facebook) pixel to understand traffic and measure our advertising. These set cookies and share usage data such as pages visited, device and approximate location with Google and Meta.
Visitors in the EU, EEA, UK and Switzerland are asked first: these cookies are only set if you click Accept, and you can change your mind at any time by clearing the mncl_consent cookie. We honor Global Privacy Control and Do Not Track signals for our own analytics.
13. US residents
If you live in a US state with a consumer privacy law (such as California, Colorado, Connecticut, Virginia or Utah), you have the right to know what personal data we hold about you, to access it, correct it and delete it, and to opt out of its sale or use for targeted advertising.
- Categories we collect: identifiers (name, email, IP address), commercial information (plan and billing records), internet activity (pages visited and product usage) and the professional information in your account. The table in section 2 explains each one.
- We do not sell personal data for money. Google Analytics and the Meta pixel on mncl360.com may count as "sharing" for targeted advertising under some state laws. You can opt out by enabling Global Privacy Control in your browser, which we honor, or by writing to us.
- No sensitive data: we do not ask for or use sensitive personal information.
- How to ask: email privacy@mncl360.com. We verify requests against the email on your account, respond within 45 days, and never treat you differently for using these rights. You may use an authorized agent.
Where your agency uploaded your data into MNCL360, the agency decides how it is used. We will pass your request to them and help them respond.
14. Changes
If we make a material change we will email account administrators and update the date at the top of this page before it takes effect.