Skip to content
EN
Menu

Legal

Privacy Policy

This policy explains what information raxads collects on raxads.com and in the client panel, why, and what rights you have.

This is a convenience translation. The Turkish text is the legally binding version and prevails in case of any conflict. This translation is a draft pending legal review. Read the Turkish original

In short

The legal notice on the processing of your personal data is in the KVKK Information Notice; for cookies, see the Cookie Policy.

  • We collect only the information needed to provide the service. We do not sell your information or use it for advertising purposes.
  • We use your Google Ads data only to show it to you in the panel and to manage and improve your ads.
  • Our panel database is in the European Union. Some of our service providers (Google, Anthropic, Cloudflare) are US companies.
  • Your Google Ads account is yours. You can remove our access in Google Ads at any time.

Who we are

raxads is a digital marketing agency that helps local businesses in Türkiye appear on Google Maps and in Google searches. This policy covers the raxads.com site and the client panel (raxads.com/panel). Our contact details are in the Contact and Imprint section.

What information we collect

Tracked WhatsApp link: when someone clicks the tracked WhatsApp link (raxads.com/w/…) on our clients' sites, we record only the click time and, if present, the Google ad click ID (gclid). We do not record the clicking person's IP address, browser information, number or message; the person is sent directly to WhatsApp.

  • When you visit the site, technical information: your IP address and browser information pass through our server provider Cloudflare to deliver the site to you and protect it against attacks. To limit abuse of our tools, we keep an irreversible digest (hash) of your IP address for 30 days; we do not store your IP address itself.
  • When you visit the site, what you type into tools: the business name and district you type into tools such as the Business Profile Review.
  • When you visit the site, what you write to us: when you write to us by WhatsApp or email, your name, your number or email address, and your message.
  • When you open a client panel account, account information: full name, email address, optional mobile phone. We do not store your password in plain form; we keep only its irreversible digest.
  • When you open a client panel account, session information: login time and shortened device/browser information (to show you your open sessions and let you close them).
  • When you open a client panel account, consent records: unalterable records showing that you read the information notice and consented to transfer abroad.
  • When you open a client panel account, business information: business name, website, phone, address, service area, services, working hours, monthly ad budget.
  • When you open a client panel account, activity records: who changed what, and when, in the panel and in your ad account (change log and audit record).

What we use the information for

  • Providing the service: running the panel, showing and reporting your ad and map performance.
  • Managing your ads: applying in your Google Ads account the changes you approve or that fall within limits you set.
  • Protecting your money: applying your rules such as the monthly budget cap and site check, and alerting you and our team when there is a problem.
  • Security: protecting your account, preventing abuse and fraud.
  • Communicating with you: account verification, password reset, service notifications. Marketing messages are sent only if you give separate consent.
  • Fulfilling our legal obligations.

Data we receive from your Google account

When you choose "Connect with Google" in the panel, Google asks whether you allow raxads to access your Google Ads accounts. If you allow it:

  • What we receive: we see the list and names of the Google Ads accounts you can access with your Google account. For the single account you select, we accept on your behalf the link invitation sent by our manager account.
  • Access token: we keep the short-lived access token issued by Google, encrypted, only while account selection is in progress, for at most 30 minutes, and then delete it. We do not request or store a long-lived refresh token. After linking, we access your account through Google Ads' own manager access.
  • Ad data: campaigns, budgets, spend, impressions, clicks, results (conversions), search terms, keywords, ad texts and call summaries (duration, area code) in your linked account.
  • What we use it for: only to provide this service to you: showing it in the panel, reporting, applying your rules, suggesting improvements, and making changes with your approval or within limits you set. Every change appears with its reason in the log in your panel and can be undone.
  • What we do not do: we do not sell your Google data; we do not use it for ad targeting, personal profiling, credit assessment or to serve another client; we do not give it to data brokers.
  • Who sees it: you and the people you invite to your panel. Our team sees it only for support, security or at your request, and every access is logged.
  • Who it is transferred to: only to the subprocessors needed to provide the service: Cloudflare for hosting, Anthropic for improvement suggestions (see below). To competent authorities where required by law.

Google API Services User Data Policy

raxads' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Use of artificial intelligence

We use Anthropic's Claude models to prepare campaign drafts, suggest weekly improvements and filter out searches unrelated to your business. For this work only the following is sent to Anthropic: your business information (name, category, services, area), the public text of your website, keywords and search terms, campaign metrics and ad texts. Your full name, email address, phone and password are not sent.

Under Anthropic's commercial terms, data sent through the API is not used to train its models. The AI cannot access your Google Ads account directly; it only produces suggestions. Suggestions are checked by code against rules and are applied only with your approval or within limits you set.

Who we share it with

Apart from these, we share your information with competent authorities and institutions only when required by law.

  • Cloudflare, Inc.: hosting, database, security, bot protection; all data on the site and in the panel (database in the EU); company in the US, database in the EU.
  • Google LLC: connecting to and managing your Google Ads account; Google Ads account and ad data; US.
  • Anthropic, PBC: AI suggestions; business, site text and ad data (no personal information); US.
  • Meta Platforms (WhatsApp): correspondence when you write to us on WhatsApp; number, name, messages; US / Ireland.
  • DataForSEO: map and keyword data; only business name and keyword, no personal data is sent; country to be confirmed with a lawyer.
  • Google LLC (Google Workspace): sending verification, password reset and notification emails; email address and email content; US.

Where the data is stored

The client panel database is on Cloudflare's servers within the European Union jurisdiction. Transfers to the US-based service providers in the list above are made to provide the service and with the safeguards required by law; details are in the KVKK Information Notice.

How long we keep it

  • Panel session: 30 days after last use.
  • Temporary access token during Google connection: at most 30 minutes.
  • IP digests (abuse limit): 30 days.
  • Account and business information: as long as your account remains open. When you close your account, your personal information is deleted or anonymised within 30 days.
  • Change log, consent and audit records: for the statutory limitation period, as evidence in possible disputes; personal fields in these records are anonymised when the account is closed.
  • WhatsApp correspondence: 12 months.

Security

  • All connections are encrypted (HTTPS).
  • Passwords are stored only as a strong one-way digest (PBKDF2); for session keys too, only the digest is kept.
  • Google's temporary access token is stored encrypted and deleted shortly.
  • The panel has role-based permissions (owner, manager, viewer); every action by our team is recorded unalterably.
  • Login and registration attempts are limited.

Your rights and removing access

Your rights under Article 11 of the KVKK (requesting information, correction, deletion, objection and others) and how to apply are set out in the KVKK Information Notice.

You can remove our Google Ads access at any time:

  • In Google Ads, remove the link to the raxads manager account under Admin › Access and security › Managers. After this we cannot receive data from or make changes to your account.
  • You can withdraw the permission you gave raxads on the Third-party access page of your Google account.
  • You can request deletion of the data we received from Google by writing to info@raxads.com; we delete it within 30 days.

Children

Our services are aimed at businesses; we do not allow persons under 18 to open an account and we do not knowingly collect information from children.

Changes to this policy

When we update the policy, we change the "Last updated" date on this page. We notify panel users of significant changes by email or in the panel; where necessary, we ask for your consent again.

Contact

For privacy questions, you can write to info@raxads.com. Our imprint details are in the Contact and Imprint section.