Privacy

What OobiMax does

OobiMax is an approval-first performance marketing system. It connects to advertising and communication platforms so it can collect campaign context, generate recommendations, deliver those recommendations to selected destinations, execute approved actions, and learn from outcomes.

Data we process

Depending on what a workspace connects, OobiMax may process:

• workspace, user, brand, source, account, delivery, automation, and settings records
• Google Ads account, campaign, ad group, asset, keyword, search term, audience, budget, performance, and approved-action data
• Meta Ads business, ad account, campaign, ad set, ad, creative, audience, budget, performance, and approved-action data
• Slack workspace/channel metadata and recommendation messages needed for delivery and interactive approval
• Telegram chat/connect metadata and recommendation messages needed for delivery and interactive approval
• sanitized AI advisory context used by Oobi-managed recommendation helpers
• audit logs, run logs, delivery records, recommendation decisions, retry records, and support context needed to operate the service safely

How we use data

OobiMax uses connected data only to provide and improve the user-facing OobiMax workspace experience.

• discover reachable accounts and map brands to the right accounts
• collect and analyze campaign performance and account state
• generate, rank, pace, and revalidate recommendations
• show recommendation detail in the Dashboard and selected delivery channels
• execute only actions that an authorized operator approves
• track execution status, failed-action recovery, and post-action learning
• protect the service through audit logs, abuse prevention, troubleshooting, and security monitoring

Google API data

OobiMax uses Google Ads OAuth for account discovery, campaign collection, recommendation generation, and approved Google Ads actions through the mapped source. Google Auth Platform branding is verified for OobiMax, and Google Data Access verification for the Google Ads scope is approved.

OobiMax's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• we do not sell Google user data
• we do not use Google user data for unrelated advertising, retargeting, credit decisions, or data brokerage
• we do not transfer Google user data to third parties except as needed to provide OobiMax features, comply with law, maintain security, or with the workspace's direction

Sensitive data protection

OobiMax protects sensitive connected-platform data, including Google API data, with technical and operational controls designed to reduce unauthorized access, loss, alteration, or disclosure.

• production traffic is served over HTTPS/TLS so data is protected in transit
• Google OAuth tokens, platform integration secrets, webhook secrets, and OobiMax-managed AI credentials are stored as encrypted secret payloads where OobiMax stores them
• workspace data is isolated by tenant, and Dashboard access uses authenticated sessions plus workspace permission checks
• connected-platform actions require an authorized operator approval before OobiMax executes supported changes
• important source, mapping, recommendation, delivery, execution, billing, and admin actions are recorded in audit logs
• Slack and Telegram approvals use signed or scoped callback flows to reduce forged external actions
• diagnostic, support, and audit surfaces redact token-like secrets before display or export where those surfaces include integration context

Sharing and processors

OobiMax does not sell workspace data. We share data only when needed to operate the product, when a workspace selects a destination, when required by law, or when needed for security and support.

• Slack and Telegram receive recommendation messages only when the workspace selects those destinations
• Oobi-managed AI providers may receive sanitized advisory context only to provide OobiMax features
• cloud infrastructure, email, monitoring, and support processors may handle limited operational data needed to run OobiMax
• Google, Meta, Slack, Telegram, AI providers, and infrastructure processors remain separate third-party platforms with their own terms and controls

Security and workspace isolation

Workspace data is scoped by tenant. A workspace should not see another workspace's sources, accounts, mappings, recommendations, delivery records, or settings.

• integration secrets and OobiMax-managed AI credentials are encrypted
• Dashboard sessions use secure production cookie behavior
• important operator actions are audited
• Slack and Telegram actions use signed or scoped callback flows

Retention and deletion

OobiMax keeps workspace records for as long as needed to provide the service, support the workspace, preserve audit history, maintain security, comply with legal obligations, or protect backup integrity.

Workspace owners can request deletion through the Data Deletion page. You can also revoke OobiMax access inside Google, Meta, Slack, Telegram, or another connected platform at any time.

Contact

For privacy questions or requests, email support@oobimax.io.