1. Information we collect

We collect the following categories of information:

• Account details. When you sign in with Google, we receive your email address, first and last name, profile picture, and your Google account identifier. We use these to create and secure your account.
• Profile preferences. Settings you choose, such as your timezone, language, theme, and whether you want summary emails.
• Billing information. If you subscribe to a paid plan, we store your subscription status and the customer and subscription identifiers from our payment provider. We never see or store your full card details. Payments are handled entirely by Stripe.
• Content you create. The apps, ads, creatives, links, and metadata you upload to run on the exchange.
• Usage and performance data. Aggregated metrics about your ads, such as impressions, clicks, and how many ads you have served. These counts are not tied to the identity of the people who saw the ads.
• Technical data. To keep the ad-serving endpoints safe from abuse, we briefly process the IP address of requests for rate limiting. These are held only transiently and are not stored in our database or linked to your account. We also use cookies and analytics as described in our Cookies policy.

2. How we use your information

We use your information to operate the ad exchange, run the fair-ranking and ad-serving systems, process subscriptions, send you service and summary emails you have opted into, keep the platform secure and free from abuse, provide support, and meet our legal obligations.

3. How we share your information

We do not sell your personal data. We share it only with the service providers that help us run Appaloo, and only as needed:

• Google: sign-in (single sign-on) and, with your consent, website analytics.
• Stripe: payment and subscription processing.
• Resend: delivery of transactional and summary emails. Your email address and the contents of those emails are processed to send them.
• Cloud infrastructure: our hosting, database, cache, and file storage providers (including Amazon S3 for ad media) store data on our behalf.

We may also disclose information where required by law or to protect the rights, safety, and integrity of Appaloo and its members.

4. Data retention

We keep your account information for as long as your account is active. Aggregated ad metrics may be retained to provide historical reporting. When you close your account we delete or anonymize your personal data, except where we need to keep it to meet legal, accounting, or security obligations. Transient technical data such as rate-limit records expires automatically within hours.

5. Your rights and choices

You can view and update most of your personal data directly in your account settings, including your name, timezone, language, and email preferences. Depending on where you live, you may also have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can close your account at any time, and you can manage analytics cookies through the consent banner. To exercise any of these rights, contact us using the details below.

6. Security

We use industry-standard measures to protect your data, including encrypted connections, single-use tokens for ad interactions, and restricted access to production systems. No system is perfectly secure, but we work to keep your information safe and will notify you of a breach where required by law.

7. International transfers

Appaloo and our service providers may process your information in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards to protect it.

8. Children

Appaloo is a tool for developers and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will remove it.

9. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, notify you. Continuing to use Appaloo after changes take effect means you accept the updated policy.

10. Contact

Questions about your privacy or this policy? Reach us at hello@appaloo.io.