Privacy Policy
On this website we collect what you type into our forms, plus the basic records any website keeps. Members who use the mainstreet gravity software also give us their account details and, if they choose, connect their own Meta ad account.
We use it to run the service and reply to you. We do not sell personal information.
You can ask for a copy, a correction or deletion at any time, and you can disconnect a Meta ad account yourself in one click. We respond within 30 days.
1. Who we are
mainstreet gravity is operated by Luckiest Man Ventures LLC, a Wyoming limited liability company, doing business as 8th Replay ("we," "us," or "our"). Headquartered in Williamson County, Texas, in the greater Austin area.
This policy covers the website at mainstreetgravity.com and the mainstreet gravity software our members sign in to. To reach us, use the contact form.
2. What we collect
- Application and contact forms: your name, email address, phone number, business name, website, and your answers about your business. Collected when you submit a form, so we can review it and reply.
- Member accounts: the name, email address and role of each person a member adds to their account, and what they create and change in the software. Collected so the software works and each person sees only their own account.
- Connected Meta ad accounts: described in section 3. Only when a member chooses to connect one.
- Technical records: IP address, browser type, pages requested and the time of each request. Recorded automatically by our hosting providers to deliver and secure the service.
We do not ask for payment card details on this website.
3. Connected Meta ad accounts
A member can connect their own Meta (Facebook and Instagram) ad account from the Ads area of the software, by signing in with Facebook and approving access. Nothing is connected unless the member does this.
- What we receive from Meta: the member's Facebook user ID and name, the list of ad accounts their login can manage, and an access token that lets the software act on the ad account they pick. With that token we read the account's campaigns, their names and status, and their results.
- What we do with it: show the member their campaigns and results inside the software, and pause or resume a campaign when the member asks. We do not create ads, change budgets or spend money in the account unless the member tells the software to.
- What we never do: sell Meta data, use it for advertising to anyone else, share it with other members, or use it to build profiles of the people who see the member's ads.
- How it is stored: the access token is encrypted before it is saved and is never shown on any screen.
A member can disconnect at any time with the Disconnect button on the Meta ads screen, which deletes the saved token and connection right away. They can also remove the app in their Facebook settings under Business Integrations. Use of Meta data is also governed by Meta's own terms and policies.
4. How we use it
- To review applications, reply to you and schedule a walkthrough.
- To provide the software to members, including showing and managing their own connected ad accounts.
- To follow up about the membership. You can tell us to stop at any time.
- To keep the service working and secure, and to meet legal obligations.
We do not sell personal information, and we do not share it for advertising. We treat the business numbers you share as confidential.
5. Who we share it with
We use a small number of service providers. Each receives only what it needs to do its job.
- Form software: a form provider stores what you submit and notifies our team.
- Email delivery: a transactional email service delivers notifications and our replies.
- Hosting and database: Vercel hosts the site and software, Supabase stores the software's data, and Cloudflare provides domain services and serves images.
- Analytics: Google Analytics, described in section 6.
- Meta: when a member connects an ad account, the software sends requests to Meta on that member's behalf.
- Fonts: the site loads its typefaces from Google Fonts, so your browser makes a request to Google when a page loads.
We may also disclose information when the law requires it, or to protect our rights or the safety of others. If the business is sold or reorganized, information may transfer to the new owner under this policy.
6. Cookies and tracking
This website uses Google Analytics to understand how people use it: the pages viewed, device and browser type, and approximate location. Google Analytics sets cookies to do this. We may also add other measurement and advertising tools from other companies. The software uses a sign-in cookie to keep members signed in.
7. How long we keep it
- Form submissions: up to three years after our last contact, unless you ask us to delete them sooner.
- Member account data: for as long as the membership is active, then up to one year after it ends.
- Meta connection and token: until the member disconnects, the member's access ends, or Meta's token expires (about 60 days without renewal). Campaign data is read live from Meta and is not stored.
- Technical records: usually 30 to 90 days.
8. Your choices and rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, and you can opt out of our emails with the link in any email. Ask through the contact form. We respond within 30 days.
California residents can request access to and deletion of their personal information, and we will not treat you differently for asking. We do not sell or share personal information as those terms are defined in California law.
Visitors in the EU and UK can ask for access, correction, deletion or a copy of their data, and can object to how we use it. We rely on your request, our contract with members, and our legitimate interest in running the service.
9. Delete your data
To delete the data we hold about you, including anything received from Facebook or Meta: members can press Disconnect on the Meta ads screen to delete the Meta connection at once, or remove the app in Facebook Settings, Business Integrations. For everything else, send a deletion request through the contact form with the email address you used. We confirm and complete deletion within 30 days.
10. Children
The site and software are for businesses and are not directed to children under 13. We do not knowingly collect information from children.
11. Security
We use reasonable safeguards, such as encryption of stored access tokens and access limited to the people who need it. No system is perfectly secure, so we cannot guarantee absolute security.
12. Changes to this policy
We will update this page when what we collect or how we use it changes, and change the date at the top.