Privacy Policy

1. Data Controller

Bayri Digital (hereinafter “Bayri Digital” or“We”) is a Türkiye-based digital marketing agency. We are the data controller for the Ads Performance Panel platform served at app.bayridijital.pro.

Contact: info@bayridijital.pro

2. What Data Do We Process?

Our platform processes the following data categories:

• Account information: Name, surname, email, password hash, role.
• Ad data: Campaign, ad set, ad, spend, conversion and metric data fetched from Meta Ads and Google Ads accounts (with the customer's authorization).
• E-commerce data: Order and product data pulled from authorized Shopify, Ticimax, İkas, or Trendyol accounts.
• API tokens: OAuth tokens and API keys for third-party platform access (stored encrypted).
• Usage logs: Platform operation logs (audit log), access timestamps, IP address.
• Contact information: Email, phone provided for demo requests or support.

3. Why Do We Process This Data?

• To create and present advertising performance reports to customers.
• To produce AI-powered analytics and recommendations (negative keywords, budget optimization, audience suggestions).
• To provide tenant isolation for multi-brand management.
• To ensure account security via 2FA, audit log, and anomaly detection.
• For customer support and product improvement.

4. Google Ads API Data

Data pulled via Google Ads API is processed only to display in the customer's own reporting panel. This data:

• Is not shared with third parties, sold, or used for advertising purposes.
• Can only be viewed by authorized users of the customer.
• Is deleted within 7 days upon customer request.
• Is fetched read-only; no ad mutation/write operations are performed.
• Is used in compliance with the Google API Services User Data Policy (including Limited Use Requirements).

5. Data Storage and Security

• All data is stored in PostgreSQL databases located in the Türkiye / European Union region (Railway infrastructure).
• API tokens and sensitive fields are protected with AES encryption.
• HTTPS (TLS 1.3) is enforced.
• Regular backups and breach monitoring are in place.
• Only authorized Bayri Digital personnel can access the data.

6. Third-Party Services

Our service providers:

• Railway — Server and database hosting
• Anthropic Claude API — AI analysis and content generation (only anonymous metric summaries are sent, no personal data)
• Resend — Email notifications
• Meta Graph API — Meta Ads data access
• Google Ads API — Google Ads data access

7. KVKK & GDPR Rights

Under KVKK Article 11 and GDPR Articles 15-22, you have the following rights:

• Learn what personal data of yours is being processed
• Learn the purpose of processing
• Request correction, erasure, or destruction of data
• Object to processing
• Request data portability
• Claim damages in case of harm

To exercise these rights, send a written request to info@bayridijital.pro. Your requests are answered within 30 days at the latest.

8. Cookies

Only essential (session) cookies are used on the platform. We do not use third-party advertising cookies or analytics cookies that collect personal data.

9. Changes to This Policy

This privacy policy may be updated without prior notice. For significant changes, we notify registered users by email.