Privacy Policy

This policy applies to every person who can access Geniusko, including a person who no longer has an account. The right to ask for deletion is not limited to current customers.

We collect information you give us and information the software needs in order to run:

• Name and contact information, such as an email address.
• Account login credentials.
• Profile information and preferences.
• Content you create, upload, or generate in the software.
• Device type, operating system, browser, IP address, and log data.

When a business connects its Meta advertising account through official Facebook Login, we process only the Platform Data needed to provide the software:

• An access token for the Meta account, stored encrypted with AES-256 and used only on our servers.
• Ad and campaign metrics, including spend, clicks, conversions, ROAS, CPA, and campaign and ad names.
• The list of ad accounts and Meta Business portfolios, so the business can choose which one to manage.
• The list of Facebook Pages and basic Page information such as followers and posts.

We use this Platform Data only so Geniusko can analyze, manage, and optimize that business's own ads, at its direction. We act as a Tech Provider under the Meta Platform Terms: we process Platform Data on behalf of the business that connected the account and for that business's purpose only. We do not use it for our own purposes or for another client. Platform Data of one business is stored separately from that of every other business. We do not sell it. We do not share it with third parties for their marketing. We do not use it to build profiles of people who are not the connecting business.

We share Platform Data only with the business it belongs to, with the hosting providers named in section 6 that run the software for us, with a service provider the business itself directs us to share with, or where the law requires it. We never share Meta user IDs, access tokens, or app secrets with anyone else. We do not ask for or store Facebook passwords.

You can disconnect Meta in the software at any time. Disconnecting revokes the permission and deletes the stored token. You can also remove Geniusko in Facebook under Settings and privacy, Settings, Security and login, Business integrations. Full deletion steps are on the data deletion page.

The same rules apply when a business connects another account it owns. We request only the data the feature needs, we store the access token encrypted, and we use it only to provide that feature.

• Google Ads, Google Analytics, YouTube, and Search Console: read the authorized account, and change a Google Ads campaign only after the business confirms. We do not become the manager account.
• TikTok: profile, stats, and the posts the business chooses to publish.
• Etsy, when a shop is connected: read-only shop and receipt data used to show that shop's own aggregated revenue and order counts. We do not request buyer email. We do not scrape Etsy.
• Competition Analysis reads only public ads in Meta's Ad Library. It does not use private data from a connected shop.

Google user data received from Google APIs is used only to provide the user-facing feature the business asked for. Our use and transfer of that information adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, transfer it to advertising platforms or data brokers, or use it to train generalized AI models. YouTube features are subject to the YouTube Terms of Service and the Google Privacy Policy.

The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

We use information to provide and secure the software, to answer support requests, to send administrative messages, and to comply with the law. We rely on the contract, a legal duty, legitimate interests such as security, and consent where we ask for it.

If a business uses conversion measurement, it may send its own visitors' data to Meta through Geniusko, for example a hashed email, an IP address, and events such as PageView or Purchase. For that data the business is the controller and Geniusko OÜprocesses it only on the business's instructions. The business is responsible for its visitors' consent and its own privacy notice.

We share information with service providers who host and run the software, including Supabase and Vercel, and with Meta, Google, TikTok, or Etsy when the business has connected that service and the feature requires the call. We also share information when the law requires it, or as part of a merger or sale of assets. We do not sell personal information.

We keep an access token and the data copied for a connection while that connection stays on and the account stays open. We delete the token and the Platform Data we stored for an account when the business disconnects the integration, deletes the account, or asks us to delete the data, when a person whose data it is asks us to delete it, when the data is no longer needed to provide the software, when we stop operating the software, or when Meta asks us to delete it to protect its users. We keep data longer only where the law requires it, and in that case we keep proof of the legal requirement. If we stop using a service provider, that provider must stop processing and delete the Platform Data it holds.

Access tokens are encrypted with AES-256 and used only on our servers. We protect data in transit and at rest. No method of storage is perfectly secure.

If you find a security vulnerability in Geniusko, email info@geniusko.eu with the subject "Security vulnerability report". We acknowledge reports and fix confirmed issues promptly.

This website, geniusko.eu, does not use advertising pixels, analytics tools, or tracking cookies.

You may ask to access, correct, restrict, or delete your information, and you may ask for a copy. Every user of Geniusko can ask, including a person who no longer has an account. The steps are:

1. In the software, disconnect the Meta account and delete the Geniusko account, or
2. Email info@geniusko.eu from the address on the account and ask us to delete the data. We confirm and complete deletion within 30 days.

The same steps are written on the data deletion page. If you are in the European Economic Area or the United Kingdom, you may also complain to a supervisory authority. In Estonia that authority is the Estonian Data Protection Inspectorate.

The software is not for children under 13. We do not knowingly collect their personal information. If we learn that we have, we delete it.

Information may be stored and processed in countries other than the country where you live, including where our hosting providers operate.

We may update this policy. The new text will be posted on this page with a new date.

Geniusko OÜ

Registry code 17603636

Pärnu mnt 186, Tallinn, 11314, Estonia

info@geniusko.eu