Privacy Policy

Mahzya is a marketing analytics and reporting platform that helps businesses, agencies and organisations connect digital marketing platforms into a single reporting dashboard. Our platform brings together data from channels such as Meta, Google, LinkedIn, YouTube, website analytics and future integrations so users can understand performance and produce clear reports.

Privacy and security are core principles of Mahzya. We aim to collect only the information needed to provide the service, protect access to connected platforms and give users meaningful control over their data.

Mahzya is a marketing analytics platform operated by Axle Media, unless this legal entity is updated in future notices or agreements.

For privacy questions, contact us at privacy@mahzya.com.

We collect information in the following categories, depending on how you use Mahzya and which integrations you connect.

Account Information

• Name and email address
• Encrypted password or authentication provider details
• Profile image and user preferences
• Workspace, brand and report settings

Connected Platform Data

When you connect third-party services, Mahzya may process data from Facebook, Instagram, Meta Ads, Google Analytics, Google Ads, LinkedIn, YouTube, website analytics tools and future integrations such as TikTok, SEO providers, X, custom APIs or other marketing platforms.

• Campaign, account and content performance metrics
• Reach, impressions, engagement, followers, clicks and conversions
• Website traffic, events, page views and audience analytics
• Advertising spend, cost metrics and campaign delivery data
• Content metadata, public media, asset names and report history
• Business account IDs, property IDs, page IDs and advertising account IDs

Mahzya is designed for business reporting and does not require access to private personal communications. We do not access:

• Private messages or personal conversations
• Personal Facebook profiles
• Personal Google Drive files or Gmail content
• Private LinkedIn messages
• Passwords for connected third-party services
• Payment information belonging to advertising platforms

We use information to operate Mahzya, deliver reporting features and keep the platform secure. This includes:

• Provide marketing dashboards, charts and performance reports
• Sync platform data and maintain historical analytics
• Calculate KPIs, comparisons, recommendations and alerts
• Generate AI summaries, insights and report commentary
• Support customer service, troubleshooting and platform reliability
• Improve security, prevent fraud and comply with legal obligations

Mahzya may process aggregated analytics and report context through trusted AI providers to generate summaries, recommendations and insights. AI processing is used to explain performance trends and suggest practical actions.

Advertising platform credentials are not shared with AI providers. Mahzya does not analyse personal conversations, private messages or private inbox content for AI insights.

Mahzya requests OAuth permissions so users can connect their own marketing and analytics accounts. We request permissions only for the functionality the user chooses to activate, such as reading insights, listing accessible assets or syncing performance data.

• Facebook Pages and Instagram Business accounts
• Meta Ads accounts and campaign reporting
• Google Analytics properties and Google Ads accounts
• LinkedIn organisation pages and advertising accounts
• YouTube channels and website analytics integrations

Permissions are used to provide Mahzya features. They are never sold.

Mahzya never sells user data. We share information only where necessary to provide, secure and improve the service, or where required by law.

Trusted service providers may include:

• Supabase for authentication, databases, storage and platform infrastructure
• OpenAI or other trusted AI providers for report insight generation
• Google Cloud and hosting providers for application delivery and analytics integrations
• OAuth providers such as Meta, Google, LinkedIn, YouTube and future connected platforms
• Payment providers if billing features are introduced
• Legal authorities where disclosure is legally required

Connected analytics, reports and historical metrics are retained while your Mahzya account, brand or integration remains active, or as needed for legitimate business and legal purposes.

Data may be removed when a user deletes a brand, disconnects an integration, deletes their account or requests deletion, subject to legal obligations and backup retention practices.

We use technical and organisational safeguards designed to protect Mahzya accounts and connected data. These safeguards may include HTTPS, encryption, access controls, authentication, Row Level Security, secure OAuth flows, limited employee access, monitoring and industry best practices.

No system is completely secure, but we work to reduce risk and respond responsibly to security concerns.

Mahzya may use cookies and similar technologies for authentication, session management, preferences, analytics and future marketing functionality.

You may disable cookies in your browser, but some Mahzya features may stop working correctly if authentication or session cookies are blocked.

Depending on where you live, you may have rights over your personal information and connected platform data. These may include the right to:

• Access the personal information and platform data associated with your account
• Correct inaccurate account or profile information
• Disconnect integrations and withdraw consent for future syncing
• Delete brands, reports or your Mahzya account where available
• Request deletion or export of relevant information
• Object to certain processing where applicable law gives you that right

Mahzya aims to process personal information in line with South Africa's Protection of Personal Information Act (POPIA). This includes processing information for lawful purposes, taking reasonable security measures and allowing users to request access, correction or deletion where applicable.

For users in the European Economic Area, United Kingdom or other jurisdictions with similar privacy laws, Mahzya aims to support applicable rights under GDPR-style frameworks. This may include access, correction, deletion, restriction, portability, objection and withdrawal of consent where relevant.

Mahzya is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided information to Mahzya, contact us so we can review and remove it where appropriate.

Mahzya and its infrastructure providers may process information in countries outside your own. Where international transfers occur, we use appropriate safeguards and trusted providers to protect the information in line with applicable requirements.

When you connect third-party services, their own privacy policies and terms also apply. These services may include Meta, Google, LinkedIn, Microsoft, YouTube, Supabase, OpenAI and future providers used for analytics, reporting, AI, payments, hosting or related functionality.

Mahzya may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify users through the application, email or another appropriate channel.

Privacy Questions: privacy@mahzya.com

General Support: support@mahzya.com

Website: www.mahzya.com