Security

Media Buying Made Easy LLC, doing business as ToMarket (“ToMarket”), connects to the advertising accounts you authorize and acts on them on your behalf. We take the security of that access seriously. This page summarizes the measures we use to protect your data. It is an overview, not a contractual commitment.

Data is encrypted in transit using TLS. The access tokens for your connected advertising platforms are encrypted in our database. We never store platform passwords; access is granted through each platform’s official OAuth flow.

ToMarket only takes actions on connected accounts as you direct or under the automation you turn on, which in automated modes includes ToMarket’s built-in rules alongside your own. You can disconnect any platform at any time, which immediately revokes our access and deletes the stored tokens for that account.

Each business is isolated, and internal access to production data is limited to the people who need it to operate and support the service. We request only the platform permissions required to run and optimize your campaigns.

Actions ToMarket takes on your accounts are written to an audit log with a plain-language reason. New campaigns are created paused unless you choose to launch them live. In review mode, every action goes through you before it happens.

We rely on infrastructure and service providers (for hosting, storage, AI generation, payments, and email) to operate ToMarket. These providers process data only as needed to deliver the service and under their own security obligations. The full list is in our Privacy Policy.

• Use a strong, unique password and keep your login credentials private.
• Only connect accounts you are authorized to manage.
• Remove access for platforms or teammates you no longer work with.

If you believe you’ve found a security issue, please email security@tomarket.io with the details. We appreciate responsible disclosure and will respond as quickly as we can. See also our Privacy Policy.