Legal

Privacy Policy

Last updated: April 11, 2026

Your privacy matters to us. This policy explains what data ADDSEY collects, why we collect it, and how it is used and protected. Please read it carefully before using the platform.

1. Who We Are

ADDSEY ("we", "our", or "us") is an automated digital advertising platform that allows users to fund ad campaigns via Bitcoin and deploy them across major social and search networks — including Meta (Facebook and Instagram), TikTok, X (formerly Twitter), Google, and YouTube. Our website is addsey.com.

2. Information We Collect

We collect only the minimum data required to operate the platform: • Account data: email address and hashed password when you register. • Campaign data: campaign name, target platform, daily budget, ad creative (image or video URL), and the handle or page you are promoting. • Transaction data: Bitcoin deposit amounts, wallet balances, and USD-equivalent values used to fund campaigns. • Ad performance data: impressions, clicks, and spend figures returned by ad-platform APIs (Meta, Google, etc.) — used solely to show you campaign progress in your dashboard. • Technical data: server logs, IP addresses, and browser information collected automatically to maintain security and diagnose errors. We do not collect payment card numbers, Social Security numbers, or any government-issued identification.

3. How We Use Your Information

We use the information we collect to: • Create and manage your ADDSEY account. • Submit and manage ad campaigns on your behalf via the Meta Marketing API (Graph API v20.0) and other ad platform APIs. • Display real-time campaign performance metrics (spend, impressions, clicks) in your dashboard. • Process Bitcoin deposits and maintain wallet balances. • Send transactional emails such as campaign status updates and password resets. • Detect and prevent fraud, abuse, or unauthorized access. • Comply with legal obligations. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

4. Meta Marketing API

To deliver your ads on Facebook and Instagram, we use the Meta Marketing API. When you create a campaign on ADDSEY, we transmit the following data to Meta on your behalf: • Campaign name and objective. • Daily budget (in USD). • Ad creative URL (the image or video you upload to our Media Library). • Target platform (Facebook Feed, Instagram Story, etc.). Meta processes this data under their own Privacy Policy and Data Policy (facebook.com/privacy/policy). ADDSEY acts as a data processor for ad delivery; Meta acts as an independent data controller for platform-level data it collects about ad delivery and audience interactions. We retrieve aggregated, non-personally-identifiable performance metrics (spend, impressions, clicks) from Meta using the same API. We do not receive or store individual user data about the people who see or click your ads.

5. Third-Party Services

ADDSEY integrates with the following third-party services, each governed by their own privacy policies: • Meta Platforms (Facebook / Instagram) — ad delivery via the Meta Marketing API. • Google Ads — ad delivery via the Google Ads API. • TikTok for Business — ad delivery via the TikTok Marketing API. • X Ads (formerly Twitter Ads) — ad delivery via the X Ads API. • CoinGecko — live BTC/USD price feed. No personal data is sent to CoinGecko. • Vercel — hosting and serverless infrastructure. • Tawk.to — live chat support widget (may set its own session cookies). We are not responsible for the data practices of these third parties.

6. TikTok Data Usage & User Rights

ADDSEY integrates with the TikTok Marketing API to allow users to deploy ad campaigns on TikTok for Business. This section explains specifically how we handle data in connection with TikTok. What data we send to TikTok on your behalf: • Campaign name and objective. • Daily budget (in USD). • Ad creative URL (image or video hosted in your ADDSEY Media Library). • Your TikTok advertiser account ID, obtained from you via OAuth authorisation. What data we receive from TikTok: • Aggregated, non-personally-identifiable performance metrics: spend, impressions, and clicks at the campaign level. We do not receive personal data about the individual users who view or interact with your ads. How your TikTok OAuth tokens are stored: • When you connect your TikTok Ads account, we store your OAuth access token and refresh token in our database. These tokens are encrypted at rest using AES-256-GCM encryption prior to storage. Tokens are never logged or exposed to other users. How to disconnect TikTok: • You may disconnect your TikTok Ads account at any time from your Settings page → Connected Ad Accounts → TikTok → Disconnect. This immediately deletes your stored tokens from our database and prevents future campaign deployments to TikTok. How to request data deletion: • To request deletion of all data ADDSEY holds about you — including TikTok tokens, campaign data, and account information — email support@addsey.com with the subject line "Data Deletion Request". We will process your request within 30 days and confirm when deletion is complete. • Separately, you may also revoke ADDSEY's access to your TikTok account directly through: TikTok Business Center → My Account → App Authorizations. TikTok's own data practices: • TikTok processes data it collects about your ad delivery independently, under TikTok's Privacy Policy (tiktok.com/legal/privacy-policy-row). ADDSEY is a data processor for ad delivery; TikTok acts as an independent data controller for platform-level data.

7. Data Security

We implement industry-standard safeguards including: • TLS encryption for all data in transit. • Hashed (bcrypt) passwords — we never store plaintext credentials. • Role-based access controls limiting staff access to production data. • Automatic session expiry and secure, HttpOnly cookies. • No private key storage — we never request, receive, or store Bitcoin private keys. No system is perfectly secure. If you suspect unauthorized access to your account, contact us immediately at support@addsey.com.

8. Data Retention

We retain your account and campaign data for as long as your account is active or as needed to provide services. If you close your account, we delete or anonymize your personal data within 90 days, except where retention is required for legal, tax, or fraud-prevention purposes. Ad performance metrics (impressions, clicks, spend) associated with completed campaigns are retained for up to 24 months to support billing and audit purposes.

9. Your Rights

Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you. • Correct inaccurate data. • Request deletion of your data ("right to be forgotten"). • Restrict or object to certain processing. • Receive a portable copy of your data. To exercise any of these rights, email support@addsey.com. We will respond within 30 days.

10. Children's Privacy

ADDSEY is intended for users 18 years of age and older. We do not knowingly collect personal information from children. If you believe a child under 18 has created an account, please contact us so we can delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or by displaying a prominent notice in the dashboard. Continued use of ADDSEY after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us: Email: support@addsey.com Website: addsey.com