Privacy Policy

MindFortress, Inc. ("Reeve," "we," "us," or "our") operates the Reeve platform at meetreeve.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Business name and website URL

Connected Platform Data

When you connect third-party platforms (Meta — which covers both Facebook and Instagram — LinkedIn, Google Ads, TikTok Ads, Shopify, Stripe, PostHog, QuickBooks Online), we access data from those platforms on your behalf, including:

• Ad campaign performance metrics (spend, impressions, clicks, conversions)
• Ad creative content (headlines, descriptions, images)
• Store product catalogs and analytics
• Subscription and revenue metrics (for SaaS businesses)
• Website analytics and visitor behavior data
• Accounting data from QuickBooks Online, as described under QuickBooks Online Data below

Facebook and Instagram Data

Reeve connects to Facebook and Instagram through Facebook Login. When you authorize that connection, we read:

• Your Facebook Pages — the list of Pages you manage, with each Page's name, ID, profile picture, and your role on it, so you can choose which Page a campaign or post belongs to
• Your Meta ad accounts — account name, ID, status, currency, time zone, and the advertising pixels attached to them
• Ad performance data from those ad accounts — campaigns, ad sets, ads, and their delivery metrics
• The Instagram Business account linked to a Facebook Page you manage, if one exists — its profile details (username, name, profile picture, post count, and follower and following counts) and engagement on its posts (likes, comments, reach, and impressions)
• Your basic Facebook profile — we request the name and email address on the account that authorizes the connection. Only the name is stored, as the label for that connection and to confirm the connection is still valid; the email address is not retained or used for any other purpose

We request only the permissions needed for the features you use. Publishing permissions are optional and are requested in addition to the read permissions above, and Facebook shows you exactly which ones you are granting before you approve them.

LinkedIn Data

Reeve connects to LinkedIn through LinkedIn's own OAuth flow. You authorize the connection with your own LinkedIn account, and Reeve is granted access only to what you already administer — the Company Pages you manage, and, where you grant it, the ad accounts you manage. When you authorize that connection, we read:

• Your basic LinkedIn profile — we request the name, identifier, and email address on the account that authorizes the connection. Only the name and identifier are stored, as the label for that connection and to confirm the connection is still valid; the email address is not retained or used for any other purpose
• The LinkedIn Company Pages you administer — name, identifier, and your role on each, so you can choose which Page a post belongs to
• The posts Reeve has published to those Pages on your behalf, so we can show you what was published

LinkedIn applies its own limits to how long member data may be kept, and we follow them: data about a member's activity on LinkedIn is retained for no more than 48 hours, and member profile data for no more than 24 hours. LinkedIn member data is never combined with data from other sources, never used to build audiences or prospect lists, never added to a CRM record, and never shown to anyone other than the customer whose connected account it came from. These limits are specific to LinkedIn and are stricter than the general retention described in section 6.

Google Ads Data

Reeve connects to Google Ads through Google's own OAuth flow, requesting the https://www.googleapis.com/auth/adwords scope. When you authorize that connection, we access:

• Google Ads account data — the campaigns, ad groups, and keywords in the account(s) you connect, and their performance metrics (impressions, clicks, cost, and conversions)

We use this data to populate your Reeve dashboard with reporting, and to draft campaign changes — new campaigns, budget or bid changes, keyword edits — as proposals. No change is ever made to your Google Ads account until you, the signed-in user, approve it yourself under your own Google authorization; Reeve's agent proposes, it does not act unattended. Reporting shown in Reeve reflects live, per-request Google Ads data — there is no processing delay.

Your Google OAuth credentials are encrypted at rest, and the encryption key is not stored alongside the encrypted data. We do not sell Google user data, we do not share it with third parties for their own purposes, and we do not use it to train generalized AI models.

Reeve's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Reeve's access to your Google Ads account at any time — see Revoking Reeve's Access to Your Google Account below, or disconnect Google Ads from within Reeve.

QuickBooks Online Data

Reeve connects to QuickBooks Online through Intuit's own OAuth flow, requesting the com.intuit.quickbooks.accounting scope. Each QuickBooks company you connect is authorized separately. Once you authorize a company, Reeve can read:

• The company profile — company name, country, home currency, fiscal year start month, report basis (cash or accrual), and whether multicurrency is enabled
• Financial reports — Profit and Loss, Balance Sheet, Cash Flow, accounts receivable and payable aging, General Ledger, and Transaction List
• Accounting records — such as your chart of accounts, transactions (for example invoices, bills, and payments), and the customer and vendor records they refer to

Reeve only reads your QuickBooks data: it never creates, edits, or deletes anything in your books. Intuit offers no read-only permission, so its consent screen asks for full accounting access. Reeve also requests Intuit's standard sign-in scopes (openid, email, and profile) as part of the connection; it does not use the Intuit profile or email address they return.

Reeve accesses your QuickBooks data on your behalf, as your service provider. We do not process your data on behalf of Intuit, and Intuit is not responsible for how Reeve handles it.

We use QuickBooks data only to answer the questions you ask Reeve, to prepare the financial reports and analysis you request, and to power Reeve's memory and search. When you ask a question or run an analysis, Reeve sends the relevant QuickBooks data to the AI model you or your organization have chosen (for example, Anthropic's Claude) to produce the answer. If you query QuickBooks from your own AI assistant through Reeve's connector, results go to that assistant's model provider. That data is not anonymized — it can include your company name and the names of your customers and vendors. To power Reeve's memory and search, chat messages and answers (which can include QuickBooks data) and Reeve Knowledge entries derived from QuickBooks (such as company, entity, and account names) are embedded using OpenAI. Our AI model providers process this data under written agreements with us and may not use it for their own purposes.

Your QuickBooks OAuth tokens are encrypted at rest, and the encryption key is not stored alongside the encrypted data. We do not sell QuickBooks data, and we do not share it with third parties for their own purposes. QuickBooks data is never used to train generalized AI models, by Reeve or by our AI providers.

You can disconnect a QuickBooks company from within Reeve at any time. After you disconnect, Reeve stops accessing your QuickBooks company immediately. Disconnecting asks Intuit to revoke Reeve's authorization for that company, erases the stored OAuth tokens, and deletes the QuickBooks data Reeve stored for that company: its company profile, its entity records with their intercompany pairings and consolidation-group memberships, and the financial statements and chart of accounts Reeve loaded from it. If you reconnect the same company later, Reeve starts over with a fresh copy. Disconnecting does not delete chat messages, answers, or Reeve Knowledge entries that already include QuickBooks data; those are deleted when you ask us to delete them — email privacy@mindfortress.com or follow our data deletion instructions.

Usage Data

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Feature usage patterns within the Reeve platform
• AI-generated report and ad creative history

2. How We Use Your Information

We use collected information to:

• Generate AI-powered ad creatives tailored to your brand
• Analyze ad performance and provide optimization recommendations
• Create scheduled performance reports
• Monitor your brand's visibility across AI platforms
• Analyze competitor advertising strategies
• Deploy and manage ad campaigns on connected platforms
• Publish content you have approved to your connected Facebook Page, Instagram account, and LinkedIn Company Page
• Improve our AI models and service quality. QuickBooks data is never used for this; it is used only to answer your questions, prepare the reports you request, and power Reeve's memory and search, as described under QuickBooks Online Data above
• Send service communications and updates

3. Publishing to Your Connected Accounts

Reeve can publish content to accounts you connect, including posting to your Facebook Page, your linked Instagram account, and your LinkedIn Company Page on your behalf. No post is ever published to any connected account automatically — every one, on every platform, requires your explicit approval in Reeve first. Reeve prepares the content, shows it to you, and waits; an approval request you never answer is never published. Paid ads are handled differently and are only ever created paused — see below.

Organic posts (Facebook Page, Instagram, and LinkedIn)

If you grant the corresponding Facebook permissions, Reeve can publish posts — video, images, and accompanying text — to a Facebook Page you manage, and Reels to the Instagram Business account linked to that Page. If you grant the corresponding LinkedIn permissions, Reeve can publish posts — text, images, video, and any link you included — to a LinkedIn Company Page you administer. When you approve one of these, it publishes right away and is publicly visible immediately. There is no paused state and no undo from Reeve — Reeve tells you this on the approval screen before you confirm. To take a published post down, remove it in Facebook, Instagram, or LinkedIn directly.

Paid ads

Paid ads work differently and more conservatively. When you approve an ad, Reeve creates it in your Meta ad account in the PAUSED state, so it does not run and does not spend any money. It stays paused until someone with access to your ad account enables it, normally you in Meta Ads Manager — Reeve never enables an ad on its own. Approving an ad in Reeve never starts spend.

What we publish

Published content consists of the creative you have approved — video or images, caption or post text, and any link you included. We do not post to your personal Facebook profile or timeline, we do not send messages or comments on your behalf, and we do not publish to your connected accounts for any purpose other than the content you approved.

The same applies to LinkedIn: through the LinkedIn connection described in this policy, Reeve publishes only to a Company Page you administer. It does not post to your personal LinkedIn profile, and it does not send connection requests, direct messages, or comments on your behalf.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• AI Service Providers: We send business data to AI providers (such as Anthropic, Google, and OpenAI) to generate ad creatives and analysis and to answer the questions you ask. This data can identify your business. QuickBooks data is sent to the AI model you or your organization have chosen to produce the answer you asked for, and to OpenAI to create the embeddings that power Reeve's memory and search, and for no other purpose. It can include the names of your customers and vendors; see QuickBooks Online Data above.
• Connected Platforms: When you deploy ads, we send creative content to your connected ad platforms (Meta, Google, TikTok) via their APIs. When you approve an organic post, we send that content to Facebook, Instagram, or LinkedIn, where it becomes publicly visible on your Page, Instagram account, or LinkedIn Company Page. See Publishing to Your Connected Accounts above.
• Service Providers: We use infrastructure providers (hosting, email delivery) that process data on our behalf under strict agreements.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.

5. Data Security

We implement industry-standard security measures to protect your data:

• OAuth tokens and API keys are encrypted at rest
• All data transmission uses TLS encryption
• Access to production systems is restricted and logged
• Connected platform credentials are stored in encrypted form and never exposed via our API

6. Data Retention

We retain your account data for as long as your account is active. Connected platform data (ad performance, analytics) is cached for up to 90 days for reporting purposes. AI-generated content (ad creatives, brand profiles) is retained until you delete your account or request removal.

LinkedIn is an exception to the 90-day figure above. Where LinkedIn's own terms impose shorter limits on member data, those limits govern: activity data is kept for no more than 48 hours and member profile data for no more than 24 hours, as described under LinkedIn Data above.

QuickBooks is also an exception to the 90-day figure above. QuickBooks data Reeve stores is kept until you disconnect that company or ask us to delete it, so your financial reports and analysis can cover past periods. Disconnecting a QuickBooks company deletes the QuickBooks data Reeve stored for it, as described under QuickBooks Online Data above.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect any connected platform at any time
• Export your data in a portable format
• Opt out of non-essential communications

8. Third-Party Platforms

Reeve integrates with third-party platforms via their official APIs. Your use of those platforms is governed by their respective privacy policies. We only access data you explicitly authorize through OAuth connections, and you can revoke access at any time from your Reeve dashboard or from the third-party platform directly.

Revoking Reeve's Access to Your Meta Account

Reeve connects to Meta through Facebook Login — including any Instagram business account linked to a Facebook Page you granted us. You can revoke that access at any time from Facebook Settings → Apps and Websites → find Reeve → Remove. This invalidates our access token, so Reeve can no longer read from or write to your Meta account or its linked Instagram account, and can no longer publish anything on your behalf.

Revoking Reeve's Access to Your Google Account

Reeve connects to Google Ads through Google's OAuth flow. You can revoke that access at any time from myaccount.google.com/permissions → find Reeve → Remove Access, or by disconnecting Google Ads from within Reeve. Disconnecting from within Reeve invalidates our access token immediately, so Reeve stops using it right away and can no longer read from or write to your Google Ads account — well within 3 business days, the maximum Google allows for a client to regain exclusive control of their account after a disconnect or removal request.

Revoking Reeve's Access to Your LinkedIn Account

Reeve connects to LinkedIn through LinkedIn's OAuth flow. You can revoke that access at any time from your LinkedIn account settings, under the section listing the third-party applications and services you have permitted. This invalidates our access token, so Reeve can no longer read from or write to your LinkedIn account or the Company Pages you granted, and can no longer publish anything on your behalf.

You can also disconnect a platform from within Reeve. The integration is deactivated immediately — Reeve stops using its credentials and stops reading from or writing to that platform. Revoking or disconnecting does not by itself erase data Reeve has already stored (QuickBooks is the exception, as described under QuickBooks Online Data above), and it does not remove posts that were already published. To have stored data deleted, email privacy@mindfortress.com; see our data deletion instructions.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We use analytics tools (PostHog) to understand how our platform is used. You can disable non-essential cookies in your browser settings.

10. Children's Privacy

Reeve is a business-to-business service not directed at children under 13. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Continued use of Reeve after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or requests, contact us at:

MindFortress, Inc.
Email: privacy@mindfortress.com
Website: meetreeve.com