Privacy Policy

Who we are

The data controller is ADBU (Istanbul), info@adbu.io. You can reach us about anything in this policy at info@adbu.io.

What we process and why

• Contact details: name, work e-mail, phone or WhatsApp number, company name and website, ad budget band and your message, when you request an audit, contact us or sign up. Used to reply, prepare the audit and run the service.
• Website data: the public pages of your website, crawled to prepare the audit, write SEO content and set up conversion tracking.
• Google Ads data: campaigns, keywords, search terms, spend, conversions and account settings from the Google Ads account you link, plus Search Console, Analytics or Merchant Center if you connect them. Used to build, optimize and report on your campaigns.
• Account and usage data: your adbu.io login, the pages you open in the dashboard and basic device and browser information, used to keep the service working and secure.
• Billing data: invoicing details for your company. Card payments, where offered, are handled by the payment provider and card numbers never reach us.

The legal bases are the contract with you (or steps before it, such as the free audit you asked for), our legitimate interest in running and improving the service, and your consent where the law requires it, for example for marketing e-mails.

Google user data

When you connect Google services we request only the scopes needed for the features you enable, use the data only to deliver those features to you, and never sell it or use it for advertising to you. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time from your Google account or from the dashboard.

Who we share data with

We do not sell personal data. We share it only with the providers we need to run the service (our sub-processors), each under a contract that limits what they may do with it:

• Railway (application and database hosting).
• Vercel (hosting of the adbu.io website and dashboard).
• Google (Google Ads, Search Console, Analytics and Merchant Center APIs, and Google Workspace for our e-mail).
• Anthropic (AI models used to draft campaign structures, ad copy, SEO content and report text from your website and Google Ads data).
• Resend (transactional e-mail such as reports, alerts and account e-mails).

Some of these providers process data in the United States or the European Union. Where data leaves Türkiye or the EU we rely on the provider's standard contractual terms and, where required, your explicit consent. We will update this list before adding a sub-processor and tell active clients by e-mail. We may also disclose data where the law requires it.

How long we keep it

Lead and audit data is kept for 12 months after our last contact if you do not become a client. Client data is kept for the length of the service and deleted within 90 days after it ends, except invoices and records we must keep under Turkish tax and commercial law (10 years). Google Ads data lives in your own Google account; we keep only the copies needed for reports and delete them on the same schedule.

Security

Traffic to adbu.io is encrypted (TLS). Data at rest is stored with encryption on our hosting provider. Access is limited to the team members who work on your account, protected by strong authentication. Details are on the Security page.

Your rights

You can ask what personal data we hold about you, have it corrected or deleted, object to or restrict its processing, receive a copy in a portable format, and withdraw consent at any time. You can unsubscribe from marketing e-mails with the link in each e-mail. Send requests to info@adbu.io; we answer within 30 days. If you are in the EU or UK you may also complain to your local data protection authority.

KVKK notice (Türkiye)

This section is the information notice (aydınlatma metni) required by the Turkish Personal Data Protection Law No. 6698 (KVKK). Data controller (veri sorumlusu): ADBU (Istanbul), info@adbu.io.

• Data processed: identity and contact data (name, e-mail, phone), company and website data, Google Ads account data, dashboard usage data and billing data, as listed above.
• Purposes: preparing the audit you requested, performing the service contract, invoicing, keeping the platform secure, and, with your consent, sending marketing e-mails.
• Legal grounds (KVKK Article 5): the establishment and performance of a contract, the fulfilment of our legal obligations, our legitimate interests provided your rights are not harmed, and your explicit consent where required, including for transfers abroad under Article 9.
• Collection method: through the forms on adbu.io, your dashboard account, e-mail and messaging, and the Google APIs you connect.
• Transfers: to the sub-processors listed above, some of which are located outside Türkiye, and to public authorities where the law requires it.
• Your rights under Article 11: to learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties it is transferred to, request correction, deletion or destruction, request that these actions are notified to third parties, object to results produced by automated analysis, and claim compensation for damage caused by unlawful processing.

To use these rights, write to info@adbu.io with your identity details. We respond within 30 days, free of charge unless the law allows a fee. You may apply to the Personal Data Protection Board (KVKK Kurulu) if you do not receive a satisfactory answer.

Children

adbu.io is a business service and is not directed at children under 16. We do not knowingly collect their data.

Changes

We may update this policy. The date at the top shows the current version, and active clients are told by e-mail about material changes before they take effect.