Security

Media Buying Made Easy (“ToMarket”) connects to the advertising accounts you authorize and acts on them on your behalf. We take the security of that access seriously. This page summarizes the measures we use to protect your data. It is an overview, not a contractual commitment.

Data is encrypted in transit using TLS. Sensitive data at rest - including the access tokens for your connected advertising platforms - is encrypted. We never store platform passwords; access is granted through each platform’s official OAuth flow.

ToMarket only takes actions on connected accounts as you direct or under the goal and rules you configure. You can disconnect any platform at any time, which immediately revokes our access and deletes the stored tokens for that account.

Each business is isolated, and internal access to production data is limited to the people who need it to operate and support the service. We request only the platform permissions required to run and optimize your campaigns.

Actions ToMarket takes on your accounts are written to an audit log with a plain-language reason, and new campaigns and creatives are created paused. In ToMarket Review, every action goes through you before it happens.

We rely on reputable infrastructure and service providers (for hosting, storage, and email) to operate ToMarket. These providers process data only as needed to deliver the service and under their own security obligations.

• Use a strong, unique password and keep your login credentials private.
• Only connect accounts you are authorized to manage.
• Remove access for platforms or teammates you no longer work with.

If you believe you’ve found a security issue, please email security@mebume.com with the details. We appreciate responsible disclosure and will respond as quickly as we can. See also our Privacy Policy.