AdFlow privacy policy

AdFlow is a software service by Darklabs that connects an online store with its advertising platforms and helps its owner measure, understand and improve the store's advertising. The service is in development. This policy will be replaced by the final policy before public launch.

1. Data controller

Talaridis Athanasios of Nikolaos (Darklabs), sole proprietorship, Mouson 84, 56224 Evosmos, Thessaloniki, Greece. Privacy contact: [email protected].

2. Data we process

• Your AdFlow account: name, email address, password (stored only as a hash) and your settings.
• Meta (Facebook and Instagram), when you connect your account: the identifier and name of the account that connects, the business portfolios, ad accounts, Pages, Instagram accounts, datasets (pixels) and catalogs you select, the settings and statistics of their ads, and the access token issued by Meta.
• Other platforms you connect (for example Google Ads, Google Analytics, TikTok): the corresponding account, settings and statistics data.
• Your store (WooCommerce, Shopify): orders, products, refunds and costs as the store provides them. These may contain personal data of your customers. We process them only on your behalf and on your instructions, as a processor.

3. Why we process it

To show you how your store and your ads perform, to detect measurement problems, to suggest actions, and to carry out only the actions you explicitly approve. The legal basis is the performance of our contract with you and our legitimate interest in keeping the service secure.

We do not sell data. We do not use it for our own advertising. We do not share it with third parties, except the infrastructure, email and artificial intelligence providers the service needs to run, who act as processors under contract and only for that purpose.

4. Storage and security

Each business's data is kept in a separate database. Platform access tokens are stored encrypted and are used only by our servers, never in the browser.

5. Retention

We keep data while your connection and your account are active. When you disconnect a platform or delete your business or your account, the access token is deleted at once and the related data within 30 days, except what the law requires us to keep (for example invoices).

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Write to us at [email protected]. If you believe your rights are infringed, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

7. Data deletion

Instructions for deleting your data, including the data we received from Meta, are on the AdFlow data deletion page.

8. Terms of service

Your use of AdFlow is governed by the AdFlow terms of service.