1. Data Controller

The data controller is:

Vít Michalek
Company ID (IČO): 76591719
VAT ID (DIČ): CZ8508015978
Dr. M. Tyrše 3104, Frýdek, 738 01 Frýdek-Místek, Czech Republic
Contact: vitmichalek@gmail.com

2. Purposes and Legal Basis of Processing

We process personal data for the following purposes:

• Account registration and management — processing based on performance of a contract (Art. 6(1)(b) GDPR). Includes name, email, password, company details, and billing information.
• Service provision (campaign management) — processing based on performance of a contract. Includes campaign settings, targeting rules, and performance data.
• Billing and invoicing — processing based on performance of a contract and legal obligation (Art. 6(1)(c) GDPR). Includes billing details, payment history, and invoice records.
• Fraud protection and security — processing based on legitimate interest (Art. 6(1)(f) GDPR). Includes IP addresses, browser fingerprints, and access patterns.
• Platform analytics — processing based on legitimate interest. Includes aggregated traffic statistics and usage patterns.

3. Scope of Processed Data

Account data: name, email address, password (hashed), timezone, company name, billing address, Company ID (IČO), VAT ID (DIČ), invoice email.

Campaign data: campaign name, targeting rules (niches, countries, devices, OS), bid prices, daily limits, scheduling, destination URLs.

Traffic data (visitors to publisher sites): IP address, country and city (based on IP geolocation), device type, OS name and version, browser name and version, referrer URL. This data is collected from visitors to publisher websites and is processed to provide traffic statistics and fraud protection to advertisers.

Payment data: payment method, transaction amounts, invoice records. Credit card details are processed solely by Stripe and are never stored on our servers.

4. Data Retention

• Account data: for the duration of the account and 3 years after deletion
• Traffic data (hits): 12 months from recording
• Campaign data: for the duration of the account and 3 years after deletion
• Billing and invoice data: as required by law (minimum 5 years)
• Legal consent records: for the duration of the account and 3 years after deletion

5. Data Recipients

Personal data is not shared with third parties except as necessary for the operation of the Service:

• Stripe, Inc. — payment processing (credit card transactions only). Stripe acts as an independent data controller for payment data.
• VIES (EU VAT validation) — VAT ID verification for EU companies.

All other data is processed exclusively by the data controller and stored on our own servers. Data is not shared with advertising networks, analytics services, or other external entities.

6. Data Subject Rights

As a data subject, you have the right to:

• Right of access — obtain information about what data we process about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of personal data when the processing purpose has been fulfilled
• Right to restriction of processing — request restriction of processing in certain cases
• Right to data portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interest
• Right to lodge a complaint — file a complaint with the Office for Personal Data Protection (www.uoou.cz)

To exercise your rights, contact us at vitmichalek@gmail.com.

7. Cookies

The Platform uses technical (essential) cookies necessary for the operation of the Service, session management, and CSRF protection. These cookies do not require consent as they are necessary for providing the Service.

The Platform does not use third-party analytics or marketing cookies.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• SSL/TLS encryption for all communications
• Password hashing using industry-standard algorithms
• Access to personal data restricted to authorized persons only
• Regular data backups

9. Changes to Privacy Policy

The data controller reserves the right to update this policy at any time. Users will be informed of material changes via email or an in-app notification.