Martil Privacy Policy

Martil by MSBU Group · martil.msbu.dev

Martil is MSBU Group's internal analytics dashboard. It shows marketing data from Google Ads, Google Search Console, Google Analytics 4, and YouTube in one place. This policy explains what data Martil reads from your Google account, how it uses that data, how it stores it, and how you control it.

Effective date: July 8, 2026 · Last updated: July 8, 2026

1. Who we are

MSBU Group operates Martil for internal use. Only users with an @msbu.co.id email address can sign in. For privacy questions, email aida@msbu.co.id.

2. Google data we access

When you connect a data source, Google asks you to grant Martil read-only access to the scopes below. Martil never changes, creates, or deletes anything in your Google account.

Scope	What we use it for
openid, email	Sign you in and confirm your account belongs to `@msbu.co.id`. We store only your email address.
adwords	Read Google Ads metrics (campaigns, cost, clicks, conversions) to show on the dashboard. We use it read-only even though the scope is broad.
webmasters.readonly	Read Google Search Console performance (queries, clicks, impressions, position).
analytics.readonly	Read Google Analytics 4 reports (sessions, engagement, traffic sources).
youtube.readonly	Read YouTube channel and video data (channel statistics, video list).
yt-analytics.readonly	Read YouTube Analytics (views, watch time, retention, subscriber changes).

3. How we use the data

We display the metrics and charts in Martil's internal dashboard.
We compute aggregates, trends, and period comparisons from that data.
We store daily snapshots so the trend charts can plot history over time.

We do not use your Google data for advertising, we do not sell it, and we do not use it to train AI or ML models.

4. How we store and secure the data

We store your OAuth token (the refresh token) encrypted in our Supabase database. Only Martil's backend service reads it. No client or other user can.
We cache the analytics data we pull from Google as aggregates to speed up the dashboard. We store no end-user personal data.
We encrypt all traffic over HTTPS/TLS and restrict app access to @msbu.co.id.

5. Sharing

We do not share your Google data with third parties, except the infrastructure providers that process it on our behalf to run Martil:

Supabase for the database and backend hosting.
Google APIs as the source you authorized.

Non-Google social data (Instagram, LinkedIn, TikTok) comes through a separate provider (Zernio) and does not involve your Google account data.

6. Google API Services User Data Policy — Limited Use

Martil's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Martil uses this data only to provide and improve the dashboard features you use. It does not transfer the data except to operate those features or when the law requires it, does not use it for advertising, and does not let humans read it except with your consent, for security, or when the law requires it.

7. Retention and deletion

We keep tokens and cached data while a connection stays active. You can disconnect a source from Martil's Settings page at any time, which deletes the related refresh token from our database. You can also revoke Martil's access directly at myaccount.google.com/permissions. For a data deletion request, email aida@msbu.co.id.

8. Changes to this policy

We may update this policy. Material changes appear on the "Last updated" date above.

9. Contact

MSBU Group · aida@msbu.co.id · martil.msbu.dev