This notice is for AdFlowHQ account holders (publishers). It explains the personal data processed for your account.

Data categories

• Account: email, bcrypt password hash, account information.
• Technical logs: sha256 IP digest, user-agent hash, timestamps.
• Ad data: sites, zones, creatives, click URLs, campaigns.
• Report data: requests, impressions, clicks, conversions.
• Security logs: audit log, abuse flags, API key last-use hash.

Purposes

Providing the service, authentication, measurement and reporting, security and abuse prevention, and required communications (verification, password reset).

Retention

Kept while your account is active and as needed for the purposes above; detailed events are aggregated into daily statistics.

Sharing

Not sold and not shared with advertising third parties; processors are used only as needed to operate the service.

Consent records

Your acceptance of the Terms, Acceptable Use Policy and Privacy Notice at sign-up is recorded — type, document version, time and a hashed IP / user-agent — as proof of consent.

Your rights (KVKK / GDPR)

Access, correction, deletion, restriction, objection and withdrawal of consent, subject to applicable law. Requests can be made through your account or to the operator.

Controller

Data controller: the operator of the AdFlowHQ service.

This is an informational notice and does not constitute legal or financial advice. For binding regulatory specifics (effective date, controller legal identity, jurisdiction) confirm with qualified legal counsel.