Política de privacidad

Last updated: 19 October 2026

AiryAds (“AiryAds”, “we”, “us”) operates the AiryAds advertising platform at airyads.com and its Ads Manager cabinet. This policy explains what personal data we collect, why we collect it, and what you can do about it.

1. Who we are

The controller of the personal data described here is OÜ Airyads, registry code 17567076, Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115, Estonia. You can reach us at [email protected] for any question about this policy or about your data.

2. Data we collect

• Account data: e-mail address, password hash, display name, country, timezone, interface language and preferred currency.
• Billing data: wallet balance, invoices, payment status and the transaction identifiers returned by our payment provider. We never receive or store your full card number.
• Campaign data: the advertising campaigns, creatives, budgets and targeting settings you create, plus the performance metrics generated when they run.
• Connected accounts: when you sign in with Google or Apple, we receive your account identifier, e-mail address and whether that e-mail is verified. When you connect an advertising account (Google Ads, YouTube, Meta, Instagram or TikTok), we receive its identifier and name together with the access tokens you authorise us to use. When you connect a Telegram channel, we receive its identifier and public metadata. Section 7 describes how we handle data we receive from Google.
• Technical data: IP address, browser and device type, and request timestamps, collected in server logs and used to keep the service secure.

3. Why we use it

• To create and operate your account and deliver the Ads Manager.
• To run, optimise and report on your advertising campaigns.
• To process payments, top-ups and refunds.
• To detect fraud and abuse, rate-limit sign-in attempts and protect the platform.
• To send service messages such as e-mail verification, password resets and billing notices.
• To comply with accounting, tax and other legal obligations.

4. Legal bases

We process account, campaign and billing data because it is necessary to perform our contract with you. We process technical and security data on the basis of our legitimate interest in operating a safe platform. We process data for marketing e-mail only with your consent, which you may withdraw at any time. We process some data because the law requires it, for example invoice retention.

5. Cookies

We use strictly necessary cookies to keep you signed in and to protect sign-in forms against cross-site request forgery. These cannot be switched off. Analytics and marketing cookies are set only after you accept them in the cookie banner, and you can change that choice at any time.

6. Sharing

We share personal data only with processors acting on our instructions: our hosting and infrastructure providers, our payment provider, our transactional e-mail provider, and the advertising networks on which your campaigns run. We do not sell personal data. We may disclose data where the law obliges us to, or to establish or defend a legal claim.

7. Google user data

AiryAds asks for access to your Google data only when you choose to sign in with Google or to connect a Google Ads account or a YouTube channel, and only for the purposes below.

• Sign in with Google (openid, email, profile): we receive your Google account identifier, e-mail address, whether it is verified, and your name. We use them only to create your AiryAds account and to sign you in.
• Google Ads (https://www.googleapis.com/auth/adwords): we access the Google Ads accounts you authorise, including their campaigns, ad groups, ads, budgets and performance reports. We use this access only to create and manage the campaigns you launch through AiryAds and to show their results in the Ads Manager. We change your Google Ads account only on your instruction.
• YouTube (https://www.googleapis.com/auth/youtube.readonly): we read the identifier, name and picture of your channel. We use them only to show you which channel is connected to your AiryAds account. This access is read-only: we never upload, edit or delete anything on YouTube.

The access and refresh tokens Google issues are encrypted at rest and used only by our servers. We do not sell Google user data, do not use it for advertising unrelated to your own campaigns, and do not use it to develop, improve or train generalised artificial intelligence or machine learning models. No person at AiryAds reads it, except with your consent for a specific request, for security purposes, to comply with the law, or once it has been aggregated and anonymised for internal operations. We do not transfer it to anyone, except as needed to provide the features described above, to comply with the law, or as part of a merger or acquisition.

AiryAds’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is also handled under the YouTube Terms of Service and the Google Privacy Policy.

You can disconnect a Google Ads account or a YouTube channel in the Ads Manager at any time, which deletes the tokens we hold for it. You can also revoke our access on the Google security settings page. When you close your AiryAds account, the Google data we hold is deleted with it, as described in section 9.

8. International transfers

Some of our processors operate outside your country. Where personal data leaves the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

9. Retention

We keep account and campaign data for as long as your account is active. After you close your account we delete or anonymise it within 90 days, except for records we are legally required to keep: invoices and tax documents, which we retain for the statutory period. Server logs are kept for 30 days.

10. Your rights

You have the right to access your personal data, to correct it, to erase it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing relies on consent. You can exercise most of these directly in the Ads Manager, or by writing to [email protected]. You also have the right to lodge a complaint with your local data protection authority.

11. Security

Passwords are stored hashed and never in plain text. Traffic between your browser and our servers is encrypted with TLS. Access tokens are short-lived, refresh tokens are single-use, and credentials for connected accounts are encrypted at rest. Access to production data is limited to staff who need it.

12. Children

AiryAds is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, write to us and we will delete it.

13. Changes

We may update this policy. Material changes will be announced by e-mail or in the Ads Manager at least 14 days before they take effect. The date at the top of this page always shows the current version.

14. Contact

Questions, requests and complaints: [email protected].