Privacy Policy

Effective October 2, 2026Terms of Service

Mosaic Signal (“Mosaic”) is a marketing intelligence platform operated by BMI Studios. The Mosaic application is hosted at https://app.internal-hub.com. It brings advertising, web-analytics, search-visibility and creative reporting together for each authorized client engagement. Sign-in with Google is provided through an application named omnichannel-wlv-google. This policy explains what information Mosaic accesses, how it is used, and the choices you have.

1. Who this applies to

The Mosaic application is invitation-only. It is used by authorized staff of BMI Studios and its clients. It is not a consumer product, and only users invited for a client engagement can sign in.

2. Information we access

When you connect a Google account, Mosaic requests access to:

  • Google Analytics (analytics.readonly): to read traffic, engagement, and conversion reports for the properties you authorize.
  • Google Search Console (webmasters.readonly): to read search-performance and indexing data for the sites you authorize.
  • Campaign Manager 360 (dfareporting): to create, schedule, run, and download reports (such as Floodlight conversion reports) in the Campaign Manager 360 accounts you authorize. It is used for reporting only: Mosaic does not create or change campaigns, ads, placements, or tags.
  • Basic profile: your name and email address, solely to identify you as an authorized user and record who connected an account.

Mosaic may also draw on other marketing platforms (for example advertising and AI-visibility sources) that you separately connect. Mosaic does not request or access your Gmail, Google Drive, contacts, calendar, passwords, or any account credentials. Apart from the Campaign Manager 360 reports described above, it never writes to or modifies your Google data.

3. How we use the information

We use the data described above only to generate and display reporting inside Mosaic for the authorized engagement, for example dashboards, trend charts, and visibility comparisons. We do not sell your data, we do not use it for advertising or ad targeting, and we do not use it to train machine-learning or AI models.

4. Storage & security

Reporting data is stored in a private data warehouse on infrastructure controlled by BMI Studios. Access is restricted to authorized personnel, credentials and access tokens are held as protected secrets with restricted file permissions, and traffic is served over encrypted (HTTPS) connections. The application itself is gated behind authentication, and only invited users can sign in.

5. Sharing

We do not share your Google user data with third parties except as necessary to operate the service (for example, the hosting and warehouse infrastructure that stores the reporting), to comply with the law, or with your consent. Any such providers are bound to handle the data consistently with this policy and the Limited Use requirements above.

AI classification provider (TypeSafe)

To label marketing data, Mosaic sends text to TypeSafe, Inc. (“TypeSafe”, United States), whose Jev model classifies it and returns structured labels. The text sent is limited to: the names and ad copy of our own advertising campaigns and ads; answers that public AI assistants gave to the marketing questions we track; passages of public web pages those assistants cited; and our own published property facts. No Google user data obtained through the Google API scopes above, no personal information about guests or users, and no spend or performance figures are sent to TypeSafe. TypeSafe does not train its models on customer data. Results produced this way are marked “Jev” inside Mosaic.

Creative image and video analysis provider (Google)

To catalog our own advertising creative, Mosaic sends the image and video files of our ads to Google LLC’s AI service (United States), which returns a structured description of what can be seen and heard (for example the setting, on-screen text and whether a person appears). The files sent are limited to our own published advertising creative, with its channel, line of business and format. No Google user data obtained through the Google API scopes above, no personal information about guests or users, and no spend or performance figures are sent. The analysis never identifies people. We use Google’s paid service, under whose terms Google does not use these files to improve its products. These descriptions feed Prism, Mosaic’s creative intelligence, and results built on them are marked “Prism” inside Mosaic.

6. Retention

Reporting data is retained only as long as needed for the engagement. When access is revoked or the engagement ends, the associated tokens are invalidated and the related data is deleted from active systems on a reasonable schedule.

7. Revoking access

You can revoke Mosaic’s access to your Google account at any time from your Google Account permissions page at myaccount.google.com/permissions. Revoking access stops any further data collection from that account.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, notifying authorized users.

9. Contact

Questions about this policy or your data can be directed to privacy@internal-hub.com.

See Mosaic in action.

Tell us about your business, the channels you use and the questions you want to answer. We will arrange a walkthrough of Mosaic’s reports, creative insights and recommendations.

  1. Your team
  2. Your marketing
  3. Your goals

Let’s start with your team.

Tell us who will be exploring Mosaic. Fields marked * are required.

Step 1 of 3

We use these details to reply to your inquiry. See our privacy policy.