Privacy policy

Effective date: November 6, 2026

1. General provisions

This Privacy Policy (the “Policy”) explains which personal data USTATS receives through its website, cloud platform and connected integrations, for what purposes it uses that data, with whom it shares it, how it stores and deletes it, and what rights users have. The main connectable sources of advertising statistics for the USTATS Analytics module are Google Ads and Meta Ads (advertising on Facebook and Instagram). Both integrations are used primarily to display and analyze advertising campaign performance.

In this Policy, USTATS means ТОВ «ЮСТАТС УКРАЇНА», whose address and contact details are provided in Section 15.

2. The role of USTATS in data processing

USTATS may act in two roles:

• Data controller — independently determines the purposes and means of processing the information required for registration, subscription payments, support, security and the operation of its own website.
• Data processor on behalf of a customer — processes customer databases, correspondence, employee data, deals and other information that an organization adds to the Service or connects through integrations, in accordance with its instructions and the applicable agreement.

Organizations using USTATS are responsible for choosing a lawful basis for processing the data of their customers and employees, providing the necessary notices and respecting their rights. Where required, the parties enter into a separate data processing agreement.

3. What data we process and where we get it

The specific scope depends on the modules used and the services connected.

If payment is made through an external payment provider, bank card details may be processed directly by that provider. The information available to USTATS depends on the payment method and the actual integration.

4. Purposes and legal bases for processing

Where the EU General Data Protection Regulation (GDPR) applies, USTATS relies on the legal bases provided by law depending on the specific operation:

Permission to access a third-party account via OAuth does not replace a legal basis for processing personal data where such a basis is required by law.

USTATS uses data only for the stated purposes and does not process information received through third-party platform APIs in ways that are incompatible with the granted permissions and the rules of those platforms.

5. Google Ads and Meta Ads (Facebook/Instagram) as sources of advertising analytics

USTATS Analytics allows the user to connect Google Ads and Meta Ads ad accounts in order to receive statistics, combine metrics in reports and compare the performance of advertising campaigns. Both platforms are treated as equivalent sources of analytics data. Connecting one of them is not required in order to connect the other.

5.1. What data we receive

After authorization by the user, USTATS may receive data from each platform within the scope of the granted permissions and the capabilities of the respective API:

The available fields depend on the ad account settings, the selected permissions, attribution methods and API limitations. Metrics from different platforms may be calculated differently; USTATS does not guarantee that they will fully match. If lead or conversion data contains personal information, such information is processed only to the extent necessary for the permitted features.

Connecting an ad account does not automatically grant access to personal correspondence, email, files or other information outside the granted permissions. In particular, connecting Google Ads does not by itself grant access to Gmail or Google Drive, and connecting Meta Ads does not grant access to personal Facebook or Instagram messages.

5.2. How we connect and use data

Access is granted by the user or an authorized administrator through the authorization and permission management mechanism provided by the platform. USTATS requests only the permissions necessary for the selected features that are actually provided.

Data from both advertising platforms is used for the same purposes: identifying accessible ad accounts; receiving and updating statistics; visualizing metrics in USTATS; building summary reports, comparisons and calculations; and displaying historical trends where such storage is permitted.

USTATS does not use data received from Google Ads or Meta Ads to run advertising on the user’s behalf on its own initiative, for unauthorized targeting, for reselling data or for purposes unrelated to the stated analytics features. Any additional actions with ad accounts are possible only where the relevant feature exists, the necessary permissions have been granted and separate notice of such use has been given.

5.3. Storage, protection and sharing

Data received from Google Ads and Meta Ads may be stored in USTATS systems to display reports, update metrics and retain historical analytics. Retention periods and deletion rules are described in Section 10. Access tokens and other authorization data are protected by access controls and other applicable security measures.

Access to the data is granted only to authorized users of the organization and to those service providers whose involvement is necessary for the permitted features, subject to contractual, technical and legal restrictions. Data is not sold to brokers or resellers. Advertising data is not automatically shared with external AI providers; such sharing is possible only within a permitted feature and in compliance with the requirements of the respective platform and applicable law.

5.4. Google and Meta rules

• Google Ads: data received through Google APIs is processed in compliance with the applicable requirements of the Google API Services User Data Policy, including the Limited Use requirements where they apply to the specific API and permissions. This covers purposes of use, data transfers, employee access and restrictions on use for training generalized AI models.
• Meta Ads (Facebook/Instagram): data received through the Meta platform is processed in compliance with the applicable Meta Platform Terms and Meta Developer Policies, including requirements regarding permitted purposes of use, data protection, restrictions on transfers and timely deletion where required.

Google and Meta therefore play the same role in USTATS analytics, but the applicable requirements for obtaining and processing data are determined separately by the rules of each provider.

5.5. Disconnecting integrations and deleting data

The user may disconnect Google Ads or Meta Ads in the USTATS settings, where this option is available, or revoke the granted permissions in the access settings of their Google or Meta account. After permission is revoked, USTATS stops receiving new data on that basis. Previously stored information is deleted or retained in accordance with Section 10, the applicable legal bases and the mandatory requirements of the respective platform; if the provider’s rules require earlier deletion, those requirements apply.

Requests to delete data received from Google Ads or Meta Ads can be sent to a single address: ustats.analitics@gmail.com.

6. Other third-party integrations

In addition to Google Ads and Meta Ads, USTATS may support connections to CRM systems, communication channels and other business services. When they are used, the Service receives information only within the granted permissions, such as customer contacts, messages, and information about deals and tasks. This data is processed to operate the relevant modules within this Policy and the rules of the connected services.

7. Artificial intelligence features

When AI features are used, USTATS may process the information necessary to respond to the user’s request and to prepare analytics, summaries and recommendations. If an external AI provider is involved in fulfilling the request, data may be shared only where there is an appropriate legal basis and in compliance with the rules of the connected platforms. This applies equally to Google Ads and Meta Ads data: connecting an ad account does not by itself constitute consent to sharing its data with an AI provider or to training AI models.

Users should not submit unnecessary confidential or sensitive personal data to AI features. The terms of use of data by external AI providers and the actual sharing settings must correspond to the description of USTATS features and the agreements concluded.

8. Who we share data with and international processing

To the extent necessary for the operation of the Service, information may be shared with:

• hosting and technical infrastructure providers;
• security and technical support providers;
• payment providers;
• permitted integration providers;
• AI service providers, where the feature is enabled and sharing is permitted;
• public authorities, where there is a legal basis.

Service providers must process data for the agreed purposes, applying the necessary contractual and protective measures. USTATS does not sell personal data to data brokers, including information received through Google Ads and Meta Ads.

If data is transferred outside the European Economic Area and the transfer is subject to the GDPR, the safeguards provided by law apply, such as an adequacy decision or standard contractual clauses, depending on the country and the recipient.

9. Information security

USTATS applies security measures appropriate to the nature of the data and the risks: segregation of access rights, protection of data in transit and at rest, control of administrative access, authorization mechanisms and monitoring of security events.

The specific set of measures depends on the infrastructure used. No information system can guarantee absolute protection against all threats.

10. Retention periods and data deletion

Data is retained no longer than necessary to provide the services, ensure security and fulfill legal obligations.

After an account is closed or a justified deletion request is received, data is deleted or anonymized in accordance with the periods above. Exceptions are possible where retention is required by law, is necessary to establish or defend legal claims, or is permitted on another applicable basis. Deletion from backups may occur according to their established retention cycle.

11. User rights

Where provided for by applicable law, the user has the right to request access to their personal data, its rectification, erasure, restriction of processing or portability, to object to certain processing and to withdraw consent where processing is based on it. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Requests can be sent to ustats.analitics@gmail.com. To protect information, USTATS may ask for reasonable verification of identity. Where the GDPR applies, a response is provided without undue delay, as a rule within one month, with the possibility of extension in the cases provided by law.

Where USTATS acts as a processor on behalf of an organization, a request concerning the data of its customers or employees may need to be addressed to that organization as the data controller.

The user may also lodge a complaint with the competent personal data protection supervisory authority.

12. Cookies and similar technologies

USTATS may use strictly necessary cookies for signing in, security and maintaining the session. If optional analytics or other cookies are used, information about them and the user’s choice are provided in accordance with the applicable notice and consent requirements. See the Cookie Policy for details.

The user can manage cookies through browser settings and the available Service settings.

13. Children’s data

USTATS is intended for professional and commercial use and is not directed at children. Use of the Service is permitted subject to the applicable age and legal capacity requirements.

14. Updates to this Policy

USTATS may update this Policy when its features, data processing methods or legal requirements change. Notice of material changes is provided in the cases required by law.

If the stated purposes of using Google Ads or Meta Ads data change, users are provided with additional information and asked for new permissions or consent where required by the rules of the respective platform or by law.

15. Contact information

Data controller / Service provider: ТОВ «ЮСТАТС УКРАЇНА»
Registered address: Kyiv, Ukraine
Website: u-stats.net
Contact for personal data and deletion requests: ustats.analitics@gmail.com