This policy explains how sku.ad (“sku.ad,” “we,” “us,” or “our”) handles information when brands, agencies, and their authorized users use our website and product workspace.
1. Scope
This policy applies to sku.ad and the authenticated workspace at app.sku.ad. It covers information provided directly by users, created through use of the service, and received from services a user chooses to connect.
Each customer is responsible for ensuring that its use of sku.ad, including any advertising or commerce data it connects, is lawful and authorized.
2. Data we process
Account and organization data
We process information such as name, email address, authentication status, organization membership, role, brand relationships, invitations, and account preferences.
Product and business data
We process product catalogs, SKU and product-group information, category data, campaign structures, creative metadata, reporting records, investment, attributable costs, revenue, and related performance measurements submitted by or made available to an authorized customer.
Connected-service data
When an authorized user connects a third-party platform, including Meta, we process the account and asset identifiers, permissions, catalogs, advertising entities, performance data, and OAuth credentials required to provide the requested service. Access credentials are handled server-side and are not exposed to the browser.
Technical data
We may process IP address, browser and device information, timestamps, security events, request metadata, essential cookies, and diagnostic records needed to operate, protect, and troubleshoot the service.
3. How we use data
- Provide, secure, maintain, and improve sku.ad.
- Authenticate users and enforce organization, brand, and permission boundaries.
- Connect authorized third-party accounts and perform requested product, reporting, and advertising workflows.
- Generate product-level views of investment, costs, revenue, and promotion performance.
- Prevent abuse, investigate errors, meet legal obligations, and maintain audit records.
- Respond to support, privacy, and data-deletion requests.
We do not sell personal information. We do not use customer advertising data to create unrelated advertising profiles.
4. When data is shared
We may share limited information with infrastructure, authentication, storage, analytics, support, and connected-platform providers only as needed to operate the service. We may also disclose information when required by law, to protect rights and safety, or as part of a business reorganization subject to appropriate safeguards.
Information sent to a connected platform is also governed by that platform's terms and privacy practices. sku.ad only initiates connected-platform actions requested or configured by an authorized user.
5. Retention and deletion
We retain information for as long as needed to provide the service, maintain security and auditability, resolve disputes, comply with law, and enforce agreements. Retention periods depend on the type of record and the customer's relationship with sku.ad.
When data is no longer required, we delete or anonymize it subject to technical backup cycles, legal holds, and records that must be retained for security or compliance. Instructions for requesting deletion are available on our Data Deletion page.
6. Security
We use technical and organizational safeguards designed for the nature of the service. These include encrypted transport, server-side secret handling, encrypted storage for connected-platform credentials, access controls, tenant isolation, audit logging, and restricted production data access.
No online service can guarantee absolute security. Users must protect their login credentials and promptly notify us of suspected unauthorized access.
7. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or receive certain personal information, or to object to specific processing. You may also disconnect a third-party account or ask an organization administrator to remove your access.
We may need to verify identity, authority, and organization membership before fulfilling a request. Some information may be retained where legally permitted or required.
8. Contact and changes
For privacy questions or requests, email aliberkcanc@gmail.com. Please do not send passwords, access tokens, or other secrets by email.
We may update this policy as the service or legal requirements change. We will publish the updated date on this page and provide additional notice when required.