Hesabınız yok mu? Kayıt olun.
Giriş yaparak Kullanım Şartları'nı kabul edersiniz.
Last updated: 9 October 2026
For the purposes of the UK GDPR and the EU GDPR (together, "GDPR"), the data controller for personal data processed through the Poyais One platform is Poyais LTD (Companies House No. 14711536), 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
We process the following categories of personal data:
• Identity and contact data: first name, last name, email address
• Account data: password (stored encrypted), company name, website
• Security data: IP address, browser and device information, session logs
• Marketing integration data: performance metrics from your connected Google Ads, Meta and GA4 accounts (accessed only through the OAuth permissions you grant)
• Support data: information you submit via support or contact requests
• Shared report viewer data: if an agency using Poyais One shares a performance report with you, the email address the agency registered for you, one-time verification codes or your personal report link, and your report access log (date, IP address, action)
We process your personal data for the following purposes and legal bases under Article 6 GDPR:
• Performance of a contract (Art. 6(1)(b)): account creation, authentication, and providing the core platform service
• Legitimate interests (Art. 6(1)(f)): generating AI-powered performance reports and analytics, fraud prevention, and improving the platform
• Legal obligation (Art. 6(1)(c)): complying with applicable law and responding to lawful requests from authorities
• Consent (Art. 6(1)(a)): non-essential cookies and analytics. On the website this is given through our cookie banner; inside the platform it is given at sign-up through the text next to the Privacy Notice checkbox. You may withdraw it at any time via the banner or by writing to hello@poyaisone.com
Personal data may be shared with:
• Infrastructure and service providers who process data on our behalf under contract (hosting, email delivery, payment processing)
• Third-party platforms you personally connect (Google, Meta), strictly within the scope of the access you authorise
• Competent public authorities, where legally required
We never sell personal data to third parties for marketing purposes.
Some of our service providers (including Google and Meta) process data outside the UK/EEA, including in the United States. Where this occurs, we rely on appropriate safeguards such as the providers' own compliance with the EU-U.S. Data Privacy Framework and its UK Extension, or Standard Contractual Clauses and the UK International Data Transfer Addendum, as applicable to each provider.
Personal data is retained for as long as your account remains active. If you delete your account, your personal data is permanently deleted within 30 days, except where retention is required by law. Unverified accounts that have never been activated are automatically deleted after 30 days. For shared report viewers, verification codes are deleted after 1 day and access logs after 1 year; your viewer record is deleted when the agency removes your access.
Under Articles 15-22 GDPR, you have the right to:
• Access the personal data we hold about you
• Request rectification of inaccurate data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time, without affecting prior processing
• Lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office)
To exercise any of these rights, contact us at hello@poyaisone.com.
For any questions regarding this notice or your personal data:
Email: hello@poyaisone.com
Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom