MASAR AI Privacy Policy

Last updated: July 2026

1. Introduction

MASAR AI ("we", "us", or "MASAR AI") is an AI-powered marketing platform built for small and medium businesses in Saudi Arabia. This Privacy Policy explains how MASAR AI collects, uses, and protects your personal data when you use the platform. By using MASAR AI, you agree to the practices described here.

2. Information MASAR AI Collects

MASAR AI collects the following information: account information (name, email, phone number), business information (business name, industry, location), usage data (content you create, campaigns, analytics), payment information (processed by our secure payment provider), and data from social media accounts you choose to connect to MASAR AI.

3. Data from Connected Social Platforms

When you connect a social account (TikTok, X, Snapchat, or Meta/Instagram/Facebook), MASAR AI receives, stores, and uses the following data, only for the features you enable:

  • Meta / Facebook / Instagram: your Facebook User ID and display name; the list of Facebook Pages you manage; the linked Instagram Business Account ID and username; the list of ad accounts you manage (used for the Meta Ads campaign feature); short-lived and long-lived OAuth access tokens; and, if you enable Meta Ads, a Business Manager system-user token you optionally paste in Settings.
  • TikTok: your TikTok open ID, display name, and permission to publish videos to your account.
  • X (Twitter): your X user ID, display name, and permission to publish posts.
  • Snapchat: your Snap organization ID, ad account ID, and permission to create ad campaigns.

MASAR AI does NOT collect your Facebook password, your friends list, your private messages, or any content unrelated to your business account.

4. How MASAR AI Uses Your Information

MASAR AI uses your information to provide and improve the platform, generate personalized AI marketing content, manage your campaigns on connected platforms, deliver analytics and performance reports, communicate with you about your account and MASAR AI services, and comply with applicable legal requirements. Publishing and ad launches on your connected accounts occur only when you explicitly initiate the action within the platform.

5. Data Sharing

MASAR AI does not sell your personal data. MASAR AI may share your data with: AI service providers (Anthropic, Google, fal.ai) that generate content on your behalf, social media platforms (Meta, TikTok, X, Snapchat) to publish content and manage campaigns when you initiate the action, our database and storage provider (Supabase) that hosts your data, our hosting provider (Vercel) that runs the application, payment processors to handle payments, and regulatory authorities when legally required under Saudi law.

6. Data Security

MASAR AI uses AES-256-GCM encryption to protect all stored social platform access tokens, including Meta and Instagram tokens. All data is stored on secure servers with industry-standard security practices, and Row-Level Security policies ensure no user can access another user's data. MASAR AI regularly reviews its security measures to comply with the Saudi Personal Data Protection Law (PDPL).

7. Data Retention

  • Account and content data: for as long as your account exists.
  • Log and audit data: up to 12 months.
  • Social platform tokens: until you disconnect the platform, delete your account, or the platform revokes them.
  • When you delete your account or disconnect a platform, the related data is removed within 30 days.

8. Deleting Your Data

You can remove your data from MASAR AI at any time in three ways:

  1. Disconnect a single platform: Settings → Accounts → click Disconnect on the platform's card. This deletes all data tied to that platform (tokens, campaign records, publish jobs, ad account selection).
  2. Delete your entire MASAR AI account: Settings → Profile → Delete Account. All your account, content, media, and connected platform data will be removed within 30 days.
  3. Remove MASAR AI from Facebook: visit Facebook Settings → Apps and Websites and remove MASAR AI. Meta will automatically notify our data-deletion callback (/api/meta/data-deletion) and we will delete all Meta-related data (connection tokens, Meta Ads campaigns, Instagram publish jobs) tied to your Facebook user within 30 days. You will receive a confirmation code from Meta that you can reference if you contact us at general@masarai.app to verify deletion.

9. Your Rights

Under the Saudi Personal Data Protection Law (PDPL), you have the right to: access the personal data MASAR AI holds about you, correct inaccurate data, delete your data (as described in section 8), withdraw your consent for optional processing at any time, and lodge a complaint with the relevant regulatory authority. To exercise any of these rights, email general@masarai.app from the email address associated with your MASAR AI account. We respond within 30 days.

10. Children

MASAR AI is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "last updated" date at the top and notify you via email or in-app.

12. Contact MASAR AI

If you have any questions about this MASAR AI Privacy Policy, please contact us at: general@masarai.app