Privacy Policy

Media Fusion (“the app”) is an internal business application operated by the EggMedia / EDM team at Ascend Corporation (“we”, “us”). Authorised staff use it to prepare, generate and evaluate retail-media campaign material for Lotus’s and Makro. It is not a consumer product and has no public sign-up: sign-in is restricted to Google Workspace accounts on the ascendcorp.com domain.

This policy explains what the app collects, why, and what we do with data received from Google APIs.

1. Information we collect

• Google account information. When you sign in with Google we receive your name, email address, profile picture and Google account identifier. We use these to identify you, to enforce the ascendcorp.com domain restriction, and to apply your role (for example admin or ds-admin) to gated areas of the app.
• Content you create in the app. Campaign briefs and forms, product and SKU selections, report and evaluation configurations, generated results and run history, and messages you send to the in-app assistant.
• Technical data. Standard Google Cloud request logs (IP address, user agent, timestamp, path) kept for operations, troubleshooting and security.

2. Google permissions we request, and how we use them

• Basic profile and email address (openid, email, profile) — sign-in, access control, and a record of who ran which job.
• Send email on your behalf (https://www.googleapis.com/auth/gmail.send) — used only when you explicitly click Send request on a task, so the campaign request email (and any CC addresses you type) is sent from your own Google account and the recipient sees it as coming from you. The access token is held in your browser’s session storage for at most one hour and is passed to our backend solely to perform that single send. We never read, search, download, modify or delete your mail, and we do not retain the content of messages sent.

Google Sheets, Drive and Slides files that the app generates are created by our own Google service account in corporate storage — not in your personal Drive, and not with your Google credentials.

Limited Use disclosure. Media Fusion’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to third parties except as described in section 4.

3. How we use information

• To authenticate you and authorise the features your role allows.
• To run the work you ask for: product matching, report and slide generation, campaign evaluation pipelines, and the in-app assistant.
• To show your own forms, results and run history back to you.
• To operate, debug and secure the service.

We do not use your data for advertising, profiling, or automated decisions about you.

4. Where data is stored and who can access it

• Firebase Authentication — identity records for signed-in users.
• Firebase Realtime Database — your forms and generated results, stored under your own user identifier.
• Google Cloud Run (asia-southeast1) — the application and the backend services that perform the compute.
• Google Workspace — Sheets, Drive and Slides files produced by the pipelines, held in corporate storage.
• Databricks — jobs that run the evaluation pipeline over campaign data.

Access is limited to authorised EDM staff and system administrators. We do not share your data with third parties for their own purposes and we do not sell it. We may disclose data where required by law, or where Ascend Corporation’s internal security and compliance policies require it.

5. Retention

Account data is kept while your account is active. Content you create is kept for as long as the campaign work it belongs to requires, in line with Ascend Corporation’s record-keeping policies. Cloud request logs follow Google Cloud’s default retention. You can ask us to delete content you created — see section 8.

6. Security

All traffic runs over HTTPS. Every backend call must carry a valid Firebase ID token, sign-in is restricted to the corporate Google Workspace domain, and sensitive areas require an additional role check. Google access tokens live only in your browser session and expire within an hour. No system is perfectly secure; report any suspected issue to the contact below.

7. Your choices

• Revoke the app’s access to your Google account at any time at myaccount.google.com/permissions.
• Sign out to clear the tokens held in your browser session.
• Ask us to access, correct or delete data you created.

8. Contact

Questions, access requests and deletion requests: [email protected].

9. Changes to this policy

We may update this policy as the app changes. The date at the top always reflects the current version, and material changes are announced through internal channels.