Privacy Policy

Last Updated: February 1, 2026 | Effective Date: February 1, 2026

GSTATIAC Inc. ("GSTATIAC," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our advertising platform and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

1. Information We Collect

We collect several types of information from and about users of our Services:

1.1 Information You Provide Directly

1.2 Information Collected Automatically

1.3 Information from Third-Party Sources

2. How We Use Your Information

We use the collected information for various purposes:

2.1 To Provide and Improve Our Services

2.2 For Communication

2.3 For Analytics and Business Operations

2.4 For Security and Fraud Prevention

2.5 For Legal Compliance

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Service Providers

We share information with third-party vendors who perform services on our behalf:

These service providers are bound by contractual obligations to keep your information confidential and use it only for the purposes we specify.

4.2 With Advertising Platforms

We share necessary information with advertising platforms (Google Ads, Facebook Ads, TikTok Ads, etc.) to create and manage your campaigns. This includes:

Each platform has its own privacy policy governing how they handle this data.

4.3 For Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your personal information.

4.4 For Legal Reasons

We may disclose your information if required to do so by law or if we believe such action is necessary to:

4.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

4.6 Aggregated or De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you, such as industry benchmarks, usage statistics, or market trends.

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Type Retention Period
Account Information Until account deletion + 30 days
Campaign Data Until account deletion or 3 years after campaign end
Billing Records 7 years (for tax and legal compliance)
Support Communications 5 years after last communication
Platform Connection Tokens Until you disconnect the platform or delete account
Usage Logs 90 days
Security Logs 1 year

After the retention period, we will securely delete or anonymize your information.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you and to receive it in a structured, commonly used format.

6.2 Correction

You can update your account information at any time through your account settings. You also have the right to request correction of inaccurate information.

6.3 Deletion

You can delete your account at any time. Upon deletion, we will permanently delete your data according to our retention schedule, except where we must retain it for legal compliance.

6.4 Objection and Restriction

You have the right to object to or request restriction of certain processing activities, including marketing communications and automated decision-making.

6.5 Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

6.6 Opt-Out of Marketing

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or updating your preferences in account settings.

6.7 Do Not Track

Some browsers include a "Do Not Track" (DNT) feature. Our Services do not currently respond to DNT signals.

6.8 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

6.9 How to Exercise Your Rights

To exercise any of these rights, please:

We will respond to your request within 30 days (or as required by applicable law).

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our Services.

7.1 Types of Cookies We Use

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. However, disabling cookies may affect the functionality of our Services. You can manage cookie preferences through our cookie consent banner or your browser settings.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction.

For EEA users, we use approved data transfer mechanisms, including:

9. Children's Privacy

Our Services are not intended for children under the age of 16 (or under 13 in the United States). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at [email protected], and we will delete it.

10. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

However, no security system is impenetrable. We cannot guarantee the absolute security of your information. If you have reason to believe your account security has been compromised, please contact us immediately at [email protected].

11. Third-Party Links and Services

Our Services may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

Your continued use of our Services after any changes constitutes your acceptance of the new Privacy Policy.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you are in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

This Privacy Policy is effective as of February 1, 2026. By using GSTATIAC's Services, you acknowledge that you have read and understood this Privacy Policy.