Hesabınız yok mu? Kayıt olun.
Giriş yaparak Kullanım Şartları'nı kabul edersiniz.
Last updated: 24 October 2026
When you use the Poyais One platform provided by Poyais LTD, the following data may be collected:
• Account information: First name, last name, email address and password (stored encrypted).
• Integration data: Advertising, analytics and commerce performance metrics from the accounts you connect (Google Ads, Meta Ads, Google Analytics 4, ChatGPT Ads, Criteo, RTB House, Shopify and Adjust included).
• Usage data: In-platform page views, clicks and feature usage.
• Technical data: IP address, browser type, operating system and device information.
• Communication data: Information submitted through support requests and contact forms.
Collected data is used for the following purposes:
• Delivering and improving platform services.
• Generating and sending weekly AI reports.
• Anomaly detection and notification delivery.
• Technical support and customer service.
• Identifying and preventing security vulnerabilities.
• Fulfilling legal obligations.
The security of your data is one of our top priorities:
• All data is transmitted with SSL/TLS encryption.
• Platform integrations are secured via OAuth 2.0 protocol.
• Passwords are stored as Argon2 hashes.
• Third-party access tokens and integration credentials are encrypted at rest using symmetric (Fernet/AES) encryption.
• Our servers are hosted in secure data centers; the database is stored on an encrypted disk volume (LUKS2, AES-256), and backups are GPG-encrypted before they leave the server.
• Regular security audits are conducted.
Your personal data is not shared with third parties except in the following cases:
• Legal obligation: When required by court order or legal regulation.
• Service providers: Technical infrastructure and processing providers necessary to operate the platform (Hetzner: hosting, Resend: transactional email, Stripe: payment processing (your card details are processed only by Stripe and are not stored by us), Cloudflare: bot protection, and the large language model provider used by the platform's analysis and reporting features included). These providers process your data solely for service delivery purposes.
• Business transfer: Users will be notified in advance in the event of a company merger or acquisition.
The sale of data for advertising purposes is strictly prohibited.
Poyais One accesses data from your Google Analytics 4 and Google Ads accounts through Google's official APIs, and only after you explicitly grant access through Google's OAuth 2.0 consent screen.
Scopes requested and the reason for each:
• analytics.readonly — read-only access to your Google Analytics 4 reporting data (sessions, conversions, channel, audience and page breakdowns), used to display dashboards, generate weekly reports and detect anomalies.
• adwords — access to your Google Ads campaign, ad group, keyword, ad and creative performance data, used to display dashboards, generate reports and produce optimization recommendations. Any change to your Google Ads account is made only when you explicitly approve and initiate it within the platform; the platform makes no automated changes without your action.
How this data is handled:
• OAuth access and refresh tokens are stored encrypted at rest and are used solely to retrieve data on your behalf.
• Google user data is retrieved and displayed only to the authenticated users of the account that connected the integration, and is isolated from other customers of the platform.
• Google user data is never sold, never used for advertising or audience targeting, and never used to train artificial intelligence or machine learning models, including any third-party model.
• Google user data is not read by humans except with your explicit consent, where required for security purposes or to resolve a support request you have raised, or where required by law.
• You may revoke access at any time by disconnecting the integration within the platform or through your Google Account permissions page at https://myaccount.google.com/permissions. Upon revocation, the stored tokens are deleted.
Poyais One's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you use the Poyais One Assistant, the following data is processed:
• Chat records: Your conversations with the Assistant (your questions and its answers) are stored in your browser and on our servers (up to 60 conversations per user and client account). To recall earlier conversations, the Assistant searches only your own chats; it does not access your teammates' chats. When you delete a conversation, its server copy is deleted too.
• Brand memory: When you tell the Assistant about your business, goals, rules, brand terms or preferences, this information is stored for the relevant client account. It is derived only from what you write to the Assistant; nothing is saved automatically from pages, files or platform data. Shared facts are used by the Assistant of team members on that client account; personal preferences are visible only to you. You can view and delete what is saved under Settings > Memory.
• AI processing: Your questions, memory entries and the platform, task and issue data needed to answer are sent to the models of our AI provider, Anthropic, to generate the response. Poyais One does not use this data to train models.
• Generation and review of optimization recommendations: To generate recommendations in the Optimizations section and check their accuracy, campaign, ad and product names, performance metrics (such as spend, ROAS and conversions) and site purchase-funnel summaries are sent to the models of Anthropic, OpenAI and Google (Gemini). No personal data (names, email addresses, customer details) is sent. You see a single recommendation; review results are kept as an internal record and are not used by these providers to train models.
• Jira and Trello: If you connect these integrations, the Assistant reads your tasks, cards and issues read-only, solely to answer your question. Jira credentials are stored encrypted and deleted when you disconnect.
• Confirmed actions: The Assistant never creates, pauses or rebudgets campaigns on its own; it applies a change only within your permissions and only after you explicitly confirm it on screen. Changes made are kept in an activity log so the Assistant knows what changed and when.
These records are deleted within the period stated in Section 8 if your account is deleted.
Poyais LTD is established in the United Kingdom and its servers are located in the European Union (Germany). Some of our service providers may process data outside the United Kingdom and the European Economic Area. Where such transfers occur, they are carried out on the basis of an adequacy decision or appropriate safeguards, including Standard Contractual Clauses or the UK International Data Transfer Addendum, in accordance with applicable data protection legislation.
Your data is retained for as long as your account is active. If you delete your account:
• Your personal data will be permanently deleted from our systems within 30 days.
• Data that must be retained under legal obligations will be kept for the period specified in the relevant legislation.
• Anonymised statistical data may be retained.
Under the UK GDPR and the EU GDPR, you have the following rights in relation to your personal data:
• The right to be informed about how your data is processed.
• The right of access to your personal data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure ("right to be forgotten").
• The right to restrict processing.
• The right to data portability.
• The right to object to processing.
• The right to withdraw consent at any time, where processing is based on consent.
• The right not to be subject to a decision based solely on automated processing which produces legal or similarly significant effects.
• The right to lodge a complaint with a supervisory authority, including the Information Commissioner's Office (ICO) in the United Kingdom.
To exercise these rights, please send an email to hello@poyaisone.com. We will respond within 30 days.
The platform uses cookies for session management and to improve the user experience. On the website, analytics cookies (Google Analytics) run only with your consent in the cookie banner; when you sign up for the platform, the text next to the GDPR Privacy Notice checkbox asks for your consent to analytics cookies to measure and improve the service, so no separate cookie banner is shown inside the platform; you can withdraw your consent at any time. For detailed information about cookie usage, please review our Cookie Policy.
This privacy policy may be updated from time to time. Significant changes will be notified by email. You can always review the current policy on this page. Last updated: 24 October 2026
For questions about our privacy policy:
Email: hello@poyaisone.com
Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom