Effective date: June 25, 2026
This Privacy Policy explains how Inside.ad (“we”, “us”, “our”) process personal data when you use our website, platform, and related
services (the “Service”) and describes your rights under the EU General Data Protection Regulation (“GDPR”) and applicable EEA/UK data
protection laws.
1. Who we are and how to contact us
The data controller responsible for your personal data is:
Hivetech Ltd. (reg. no. 430193)
Email: compliance@inside.ad
2. Categories of personal data we collect
We may process the following categories of personal data when you use the Service:
- Account and contact data: userId, name, username, email address, password.
-
Profile and channel data: Telegram handle, channel name, channel URL, category, audience statistics, and basic
profile information.
- Transaction and billing data: payout details, transaction amounts, currencies, and tax-related information.
-
Usage and technical data: IP address, device identifiers, browser type, operating system, referral URLs, date and
time of access, views, clicks, campaign actions, and log data.
-
Campaign and content data: ad creatives, descriptions, links, targeting settings, campaign configuration,
performance metrics.
-
Communication data: messages you send to us (support tickets, inquiries), notifications you receive, and other
correspondence.
-
Verification and compliance data: identity documents, business registration details, tax numbers, anti-fraud and
anti-money-laundering checks, where required by law or platform policy.
We may also process non-identifiable or anonymised information that cannot reasonably be linked back to an individual (this is not
“personal data” under GDPR).
3. Where we obtain personal data
We collect personal data from several sources:
-
Directly from you: when you create an account, fill in your profile, register channels, create campaigns, request
payouts, or communicate with us.
-
Automatically: when you access or use the Service, through cookies, log files, analytics tools, and similar
technologies.
-
From third parties: payment processors, identity verification and fraud prevention providers, analytics providers,
and business partners who help us operate the Service.
-
From public sources: for example, public Telegram channel information or public corporate registries, where
relevant.
4. Purposes and lawful bases of processing
Under GDPR, we must identify a lawful basis for each purpose for which we process personal data. The table below summarises our main
processing activities, their purposes, and the legal bases we rely on.
| Purpose of processing |
Examples of processing activities |
Categories of data |
Legal basis under GDPR |
| Account registration and management |
Creating and managing user accounts, enabling log-in, maintaining user profiles |
Account and contact data |
Contractual necessity (Article 6(1)(b)) |
| Provision of the Service |
Operating the platform, enabling campaigns, connecting advertisers and publishers, providing dashboards and features |
Account data, profile and channel data, campaign and content data, usage and technical data |
Contractual necessity (Article 6(1)(b)); legitimate interests in operating a functional platform (Article 6(1)(f)) |
| Payments, payouts, and billing |
Processing payments and payouts, invoicing, handling refunds/chargebacks |
Transaction and billing data, account data |
Contractual necessity (Article 6(1)(b)); legal obligation for accounting and tax (Article 6(1)(c)) |
| Fraud prevention and security |
Monitoring for suspicious activity, preventing abuse, securing accounts and systems |
Usage and technical data, transaction data, verification data |
Legitimate interests in preventing fraud and securing the Service (Article 6(1)(f)); legal obligations where applicable
(Article 6(1)(c))
|
| Customer support and communication |
Responding to inquiries, sending service messages, incident notices, policy updates |
Account and contact data, communication data |
Contractual necessity (Article 6(1)(b)); legitimate interests in supporting users (Article 6(1)(f)) |
| Service improvement and analytics |
Measuring performance, aggregating statistics, improving features and user experience |
Usage and technical data, campaign and content data |
Legitimate interests in improving the Service (Article 6(1)(f)); consent where required for analytics cookies (Article
6(1)(a))
|
| Marketing communications |
Sending newsletters, product updates, promotional messages (where permitted) |
Account and contact data, usage data (for segmentation) |
Consent for email marketing (Article 6(1)(a)); legitimate interests for limited B2B communications where allowed (Article
6(1)(f))
|
| Legal compliance |
Fulfilling tax, accounting, AML, and other legal obligations; responding to lawful requests |
Transaction data, verification data, account data |
Legal obligation (Article 6(1)(c)) |
| Enforcement of rights |
Enforcing our Terms of Use, defending legal claims, preventing misuse |
Any relevant data required for the case |
Legitimate interests in protecting our business and rights (Article 6(1)(f)) |
Where we rely on legitimate interests, we balance our interests against your fundamental rights and freedoms and only proceed where
those interests are not overridden.
5. Cookies and similar technologies
We use cookies and similar technologies to:
- enable core functionality (e.g., login sessions, security);
- remember preferences and settings;
- measure usage and performance of the Service;
- support optional analytics and, where applicable, marketing.
Where required by law, we will ask for your consent before using non-essential cookies (for example through a cookie banner). You can
withdraw your consent at any time by adjusting your cookie settings in your browser or in our cookie management tool.
6. Recipients of personal data
We may share personal data with:
-
Service providers / processors: payment processors, analytics and logging providers, email and communication
platforms, fraud detection and security services. These providers act on our instructions under data processing agreements.
-
Other users: where necessary to deliver the Service (e.g., limited data shown between advertisers and publishers to
complete campaigns).
-
Professional advisers: lawyers, accountants, auditors, and other professional service providers where necessary for
our legitimate interests and legal obligations.
- Authorities and law enforcement: when required by law or to protect our rights, users, or the public.
-
Group companies or business transferees: in connection with a merger, acquisition, restructuring, or sale of
assets, where permitted by law.
We do not sell your personal data for independent third-party marketing.
7. International data transfers
Your personal data may be transferred to and processed in countries outside the EEA/UK that may not provide the same level of data
protection as your home country. When we transfer personal data to such countries, we rely on appropriate safeguards such as:
- an adequacy decision by the European Commission; or
- standard contractual clauses (SCCs) approved by the European Commission or the UK authorities; or
- other lawful transfer mechanisms under GDPR.
8. Data retention
We keep personal data for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is
required or permitted by law. In general:
- account and profile data are retained while your account is active and for a limited period afterward;
- transaction and billing data may be kept for up to 7–10 years to comply with tax and accounting obligations;
- logs and security-related data may be retained for a shorter period, unless needed for investigations;
- communications and support tickets may be retained for a reasonable period to document our interactions and to improve support.
When personal data is no longer needed, we will delete or anonymise it, unless we must keep it for legal reasons.
9. Your data protection rights
If you are in the EEA, UK, or Switzerland, you have the following rights under GDPR, subject to conditions and legal limitations:
- Right of access: to obtain confirmation whether we process your personal data and to receive a copy.
- Right to rectification: to have inaccurate or incomplete personal data corrected.
-
Right to erasure (“right to be forgotten”): to request deletion of your personal data in certain circumstances.
- Right to restriction of processing: to request that we limit processing in specific cases.
-
Right to data portability: to receive certain personal data in a structured, commonly used, machine-readable
format and to transmit it to another controller.
- Right to object: to object to processing based on legitimate interests or direct marketing, including profiling.
-
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time (this does not
affect the lawfulness of processing before withdrawal).
You also have the right to lodge a complaint with a supervisory authority, in particular in the EEA/UK country where you live, where you
work, or where you believe an infringement has occurred.
To exercise any of these rights, contact us using the details in Section 1. We may need to verify your identity before responding.
10. Children’s data
Our Service is intended for adults (18+) and is not directed at children. We do not knowingly collect personal data from children. If we
become aware that we have collected personal data from a child, we will take reasonable steps to delete it.
11. Automated decision-making
We may use limited profiling and automated processing, for example:
- fraud detection or abuse prevention systems;
- risk scoring and security monitoring;
- basic segmentation for service communications or marketing (where allowed).
We do not make decisions producing legal or similarly significant effects solely based on automated processing without human
involvement, unless we are legally allowed to do so and provide the necessary safeguards.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on our website and indicate the effective date.
Where required by law, we will inform you of material changes and, if necessary, seek your consent. Your continued use of the Service
after the updated policy takes effect means you acknowledge the changes.
13. How to contact your supervisory authority
If you believe that we have not handled your personal data in accordance with GDPR, you can lodge a complaint with your local
supervisory authority. A list of EU data protection authorities is available from the European Data Protection Board and related
sources.