Privacy Policy

Effective Date: July 11, 2026

Last Updated: July 11, 2026

1. Introduction

Welcome to TargetAYS ("TargetAYS", "we", "our", or "us").

TargetAYS is an AI-powered Software-as-a-Service (SaaS) platform that helps businesses create, manage, optimize, and analyze digital advertising campaigns across supported advertising platforms using artificial intelligence and automation technologies.

Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you access or use the TargetAYS website, applications, APIs, and related services (collectively, the "Services").

By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Service Operator

At the time of publication, TargetAYS is operated by an independent software project.

Legal Entity: To be updated after company registration.

Registered Address: To be updated.

Country of Registration: To be updated.

Privacy Contact: privacy@targetays.com

General Support: support@targetays.com

3. Scope of this Policy

This Privacy Policy applies to:

https://targetays.com
all TargetAYS web applications;
APIs provided by TargetAYS;
AI-powered features;
integrations with third-party platforms;
customer support communications;
future mobile applications published under the TargetAYS brand.

This Policy does not apply to third-party websites, services, or applications that are not operated by TargetAYS.

4. Definitions

For the purposes of this Privacy Policy:

Account means a registered user profile within TargetAYS.

Advertising Platform means any third-party advertising network connected by the User, including Meta Ads, Google Ads, TikTok Ads, LinkedIn Ads, or other supported services.

AI Services means artificial intelligence models used to generate recommendations, campaign structures, advertising content, analyses, or other outputs.

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, or analysis.

Services means all software, websites, APIs, dashboards, integrations, and related functionality provided by TargetAYS.

User means any individual or organization accessing or using the Services.

5. Information We Collect

5.1 Account Information

When you register or authenticate, we may collect:

Full name
Email address
Profile image
Authentication provider
User identifier
Account creation date
Language preferences
Time zone
Account settings

If you sign in using Google or another identity provider, we receive only the information that you explicitly authorize.

5.2 Advertising Account Information

When you connect advertising platforms, we may access information necessary to provide our Services, including:

advertising account identifiers;
business account identifiers;
advertising campaign metadata;
advertising objectives;
audience settings;
campaign budgets;
campaign performance statistics;
advertising creatives;
conversion metrics;
page identifiers;
Instagram professional account information (where authorized).

We only access data required to deliver the functionality you request.

5.3 Business Information

You may voluntarily provide:

company name;
business description;
website address;
landing pages;
product information;
services;
marketing goals;
target regions;
target audiences;
advertising budgets;
preferred languages.

5.4 AI Conversations

To provide AI-assisted functionality, we process information submitted through chats and AI tools, including:

prompts;
questions;
uploaded descriptions;
campaign objectives;
generated recommendations;
AI-generated advertising creatives;
optimization requests.

These conversations are processed solely for providing and improving the requested functionality, subject to applicable agreements with our service providers.

5.5 Technical Information

We automatically collect technical information necessary to operate and secure the Services, including:

IP address;
browser type;
operating system;
device information;
screen resolution;
approximate geographic region derived from IP;
log records;
session identifiers;
cookies and similar technologies;
diagnostic information.

5.6 Payment Information

If paid subscriptions become available, payment information will be processed by an authorized payment provider.

TargetAYS does not store complete payment card numbers.

Payment processing details will be described in the applicable payment provider's privacy documentation.

6. Information We Do Not Intentionally Collect

Unless explicitly required for providing the Services, we do not intentionally collect:

government-issued identification numbers;
biometric information;
medical records;
precise geolocation;
payment card security codes;
passwords for third-party advertising platforms;
special categories of personal data as defined under applicable privacy laws.

Users should avoid submitting unnecessary sensitive information through AI conversations or project descriptions.

7. How We Use Your Information

We process Personal Data for the following purposes:

creating and managing user accounts;
authenticating users;
connecting advertising platforms;
generating AI-powered campaign recommendations;
creating advertising structures;
monitoring campaign performance;
generating reports and analytics;
improving the quality of our Services;
preventing fraud and abuse;
detecting security incidents;
complying with legal obligations;
communicating service updates;
responding to support requests;
maintaining system reliability and performance.

We process Personal Data only where there is an appropriate legal basis under applicable law.

8. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your Personal Data only where we have a valid legal basis under applicable law.

Depending on the circumstances, we rely on one or more of the following legal bases:

Performance of a Contract

We process your Personal Data when it is necessary to provide the Services you request, including:

creating and maintaining your account;
authenticating your identity;
connecting advertising platforms;
generating AI-powered advertising recommendations;
storing your projects and campaign settings;
providing customer support.

Legitimate Interests

We may process Personal Data where it is necessary for our legitimate business interests, including:

improving our Services;
maintaining platform security;
preventing fraud and abuse;
analyzing platform performance;
troubleshooting technical issues;
protecting our legal rights.

Before relying on legitimate interests, we consider the potential impact on your privacy and ensure that your rights are not overridden.

Consent

Where required by law, we rely on your consent, including for:

optional cookies;
marketing communications;
certain integrations;
additional permissions requested from third-party platforms.

You may withdraw your consent at any time where consent is the legal basis for processing.

Legal Obligations

We may process Personal Data when required to comply with applicable laws, court orders, governmental requests, or regulatory obligations.

9. Google Authentication

TargetAYS supports authentication using Google Sign-In.

When you choose to authenticate through Google, we may receive information that you explicitly authorize Google to share, such as:

your name;
email address;
profile image;
Google account identifier.

We use this information solely for:

authentication;
account creation;
account management;
preventing duplicate accounts.

TargetAYS does not access your Gmail, Google Drive, Google Photos, Google Calendar, Google Contacts, or other Google services unless you separately authorize additional permissions in the future.

You may revoke TargetAYS' access from your Google Account settings at any time.

10. Meta Platform Integration

Users may connect Meta services, including Facebook and Instagram professional accounts, to manage advertising campaigns.

Subject to your authorization, TargetAYS may access information such as:

advertising account identifiers;
campaign information;
advertising performance metrics;
business assets;
Instagram professional account information;
Facebook Pages associated with your advertising account.

We request only the permissions necessary to provide the features you choose to use.

TargetAYS does not publish advertisements or make changes to your advertising accounts without actions initiated through the Services.

You may disconnect your Meta account at any time through your account settings or directly through your Meta account permissions.

11. Artificial Intelligence Processing

TargetAYS uses artificial intelligence to assist users with creating, optimizing, and managing advertising campaigns.

Depending on the functionality being used, information submitted through the Services may be processed by trusted AI infrastructure providers.

AI processing may include:

campaign analysis;
advertising recommendations;
audience suggestions;
budget recommendations;
creative generation;
copywriting assistance;
optimization suggestions;
conversational assistance.

AI-generated content is intended to assist users and should not be considered legal, financial, or professional advice.

Users remain responsible for reviewing all generated content before publishing advertisements.

TargetAYS does not intentionally use customer advertising data to train public AI models without an appropriate legal basis or contractual authorization.

12. Cookies and Similar Technologies

TargetAYS uses cookies and similar technologies to improve functionality, security, and user experience.

Cookies may be categorized as:

Essential Cookies

These cookies are necessary for:

authentication;
maintaining login sessions;
protecting user accounts;
preventing fraudulent activity;
ensuring platform functionality.

These cookies cannot generally be disabled because they are necessary for the operation of the Services.

Functional Cookies

Functional cookies remember user preferences, including:

interface language;
theme preferences;
dashboard settings;
accessibility options.

Analytics Cookies

Analytics technologies help us understand:

feature usage;
platform performance;
service reliability;
user interaction patterns.

Analytics information is generally aggregated and does not directly identify individual users.

Future Marketing Cookies

If TargetAYS introduces marketing features in the future, additional cookie categories may be implemented.

Where required by law, users will be asked for consent before such cookies are activated.

13. Sharing of Information

TargetAYS does not sell Personal Data.

We may share information only when necessary to operate the Services.

Categories of recipients may include:

cloud hosting providers;
authentication providers;
AI infrastructure providers;
email delivery providers;
payment processors;
analytics providers;
customer support providers;
advertising platforms connected by the User;
legal authorities where required by law.

Every provider is expected to process Personal Data in accordance with applicable privacy requirements and contractual obligations.

14. International Data Transfers

Because TargetAYS operates internationally, Personal Data may be processed in countries outside your country of residence.

Where required by applicable law, we implement appropriate safeguards for international transfers, including contractual protections and other recognized transfer mechanisms.

By using the Services, you acknowledge that your information may be transferred and processed internationally.

15. Data Retention

We retain Personal Data only for as long as necessary to:

provide the Services;
maintain user accounts;
comply with legal obligations;
resolve disputes;
enforce agreements;
improve platform security.

When information is no longer required, we will delete, anonymize, or securely archive it in accordance with applicable laws.

Retention periods may vary depending on the category of information and legal requirements.

16. Security Measures

TargetAYS implements commercially reasonable technical and organizational measures to protect Personal Data, including:

encrypted HTTPS communications;
secure authentication;
encrypted storage where appropriate;
role-based access controls;
infrastructure monitoring;
logging of security events;
regular software updates;
vulnerability management;
backup and disaster recovery procedures.

Although we strive to protect Personal Data, no internet-based service can guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials.

17. Your Privacy Rights

Depending on your country or region, you may have legal rights regarding your Personal Data.

These rights may include:

the right to access your Personal Data;
the right to correct inaccurate or incomplete information;
the right to request deletion of your Personal Data;
the right to restrict certain processing activities;
the right to object to specific processing operations;
the right to data portability where applicable;
the right to withdraw consent where processing is based on consent;
the right to lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact us using the information provided in the Contact Information section below.

We may request additional information to verify your identity before responding to a request.

18. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Subject to applicable law, you may have the right to:

know what categories of Personal Data we collect;
request access to Personal Data;
request deletion of Personal Data;
request correction of inaccurate Personal Data;
obtain information about disclosures of Personal Data;
limit the use of certain sensitive Personal Data where applicable.

TargetAYS does not sell Personal Data and does not share Personal Data for cross-context behavioral advertising as those terms are defined under applicable California law.

We will not discriminate against you for exercising your privacy rights.

19. Data Deletion

You may request deletion of your account and Personal Data at any time.

When an account deletion request is completed:

your account will be deactivated;
Personal Data associated with the account will be deleted or anonymized where reasonably possible;
connected advertising platform authorizations may be revoked;
AI conversation history may be removed;
active sessions will be terminated.

Certain information may be retained where required to:

comply with legal obligations;
resolve disputes;
prevent fraud;
enforce agreements;
maintain security logs.

Detailed deletion instructions are available in the Data Deletion Policy published on our website.

20. Third-Party Services

The Services may rely on trusted third-party providers.

Depending on the functionality used, these providers may include services for:

cloud infrastructure;
authentication;
AI processing;
email delivery;
payment processing;
analytics;
customer support.

Each provider processes data under its own applicable privacy terms and contractual commitments.

Current subprocessors are listed separately in the Subprocessors List available on our website.

21. Children's Privacy

TargetAYS is intended for use by businesses and individuals who are at least 16 years of age, or the minimum age required by applicable law in their jurisdiction.

We do not knowingly collect Personal Data from children.

If we become aware that Personal Data has been collected from a child in violation of applicable law, we will take reasonable steps to delete that information.

Parents or legal guardians who believe that a child has provided Personal Data may contact us for assistance.

22. Automated Decision-Making

TargetAYS uses artificial intelligence and automation to generate recommendations and assist users.

However:

users remain responsible for all advertising decisions;
AI-generated content should always be reviewed before publication;
TargetAYS does not make legally binding decisions on behalf of users;
TargetAYS does not guarantee advertising performance, approval by advertising platforms, or business results.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When material changes are made, we will:

update the "Last Updated" date;
publish the revised version on our website;
notify users where required by applicable law.

Continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.

24. Contact Information

If you have questions regarding this Privacy Policy or our privacy practices, please contact us.

TargetAYS

Website: https://targetays.com

General Support: support@targetays.com

Privacy: privacy@targetays.com

Legal: legal@targetays.com

Data Protection Officer: To be appointed.

Legal Entity: To be added after company registration.

Registered Address: To be added after company registration.

Country of Registration: To be added after company registration.

25. Related Legal Documents

This Privacy Policy should be read together with the following documents, where applicable:

Terms of Service
Cookie Policy
AI Usage Policy
Acceptable Use Policy
Refund & Cancellation Policy
Security Policy
Data Deletion Policy
Subprocessors List
GDPR Notice

These documents form part of the overall legal framework governing the use of the TargetAYS Services.