Security

Media Buying Made Easy (“Mebume”) connects to the advertising accounts you authorize and acts on them on your behalf. We take the security of that access seriously. This page summarizes the measures we use to protect your data. It is an overview, not a contractual commitment.

Data is encrypted in transit using TLS. Sensitive data at rest - including the access tokens for your connected advertising platforms - is encrypted. We never store platform passwords; access is granted through each platform’s official OAuth flow.

Mebume only takes actions on connected accounts as you direct or under the rules and guardrails you configure. You can disconnect any platform at any time, which immediately revokes our access and deletes the stored tokens for that account.

Each business is isolated, and internal access to production data is limited to the people who need it to operate and support the service. We request only the platform permissions required to run and optimize your campaigns.

Actions Mebume takes on your accounts are written to an audit log, and automated optimizations can be reversed within 24 hours. This gives you a clear record of what happened and the ability to roll back changes.

We rely on reputable infrastructure and service providers (for hosting, storage, and email) to operate Mebume. These providers process data only as needed to deliver the service and under their own security obligations.

• Use a strong, unique password and keep your login credentials private.
• Only connect accounts you are authorized to manage.
• Remove access for platforms or teammates you no longer work with.

If you believe you’ve found a security issue, please email security@mebume.com with the details. We appreciate responsible disclosure and will respond as quickly as we can. See also our Privacy Policy.