Privacy Policy

Zaturn AI Limited ("Zaturn", "we", "us" or "our") is committed to protecting and respecting your personal information and your privacy.

This privacy policy (together with our Terms and Conditions and any other documents referred to it) describes how we will collect, store and use personal information through our website at www.zaturn.ai ("Website"). This privacy policy also sets out your rights in relation to the personal information which we hold about you.

Please read this privacy policy carefully to understand our practices regarding your personal information and how we will treat it.

1. About Us

1.1 Zaturn AI Limited is a company registered in Gibraltar (registration number 125605), whose registered office is at 244 Main Street, Gibraltar GX11 1AA.

1.2 We will only process personal information in accordance with the Gibraltar General Data Protection Regulation (Gibraltar GDPR), the Data Protection Act 2004, the Privacy and Electronic Communications (EC Directive) Regulations and any other applicable privacy laws.

1.3 If you have any questions in relation to this privacy policy or how we collect, use or store your personal information, you can contact us by emailing hello@zaturn.ai

2. Which Personal Information Will We Collect?

We may collect and process any of the following information about you:

2.1 Information you give us. You may give us information about yourself by using the online forms provided on the Website or by corresponding with us by phone, e-mail or otherwise. This includes, without limitation, information you provide when you sign-up and register to use the Website, subscribe to our services, ask a question via the Website, participate in discussion boards or other social media functions on the Website and/or when you report a problem with the Website or our services.

The information you give us may include:

• Your name
• Your job title
• Your business address
• Your telephone number and email address
• Your business bank or building society account details and credit or debit card information
• Your IP Address

2.2 Information we collect about you. Each time you visit our Website we will automatically collect the following information:

• Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our Website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number

2.3 Information we receive from other sources. This includes information we receive about you if you use any of the other websites we operate or the other services we provide. We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies) and may receive information about you from them.

3. Cookies

3.1 Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

3.2 For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

4. How Will We Use Your Personal Information?

4.1 We will use the personal information we hold about you in the following ways:

• To carry out our obligations arising from any contracts entered into between you and us and to provide you with information, products and services that you request from us
• To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about
• To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you (subject to your consent where required)
• To notify you about changes to our service
• To ensure that content from our Website is presented in the most effective manner for you and for your computer
• To administer our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
• To improve our Website to ensure that content is presented in the most effective manner for you and for your computer
• To allow you to participate in interactive features of our service, when you choose to do so
• As part of our efforts to keep our Website safe and secure
• To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you
• To make suggestions and recommendations to you and other users of our Website about goods or services that may interest you or them

5. Legal Basis for Processing

5.1 We will only process your personal data where we have a lawful basis to do so. The lawful bases we rely on are:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: The processing is necessary for us to comply with the law
• Legitimate interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

6. Disclosure of Your Information

6.1 We may share your personal information with:

• Any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries
• Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you
• Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others
• Analytics and search engine providers that assist us in the improvement and optimisation of our Website

6.2 We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our rights, property, or safety, or those of our customers or others.

7. Where We Store Your Personal Data

7.1 The data that we collect from you may be transferred to, and stored at, a destination outside Gibraltar or the European Economic Area ("EEA"). It may also be processed by staff operating outside Gibraltar or the EEA who work for us or for one of our suppliers.

7.2 Where we transfer your personal data outside Gibraltar or the EEA, we will ensure that it is protected in a manner that is consistent with how your personal data will be protected by us. This can be done in a number of ways, for instance by ensuring that the country in which your personal data will be processed has been deemed "adequate" by the relevant authority, or by using contracts in a form approved by the relevant authority.

8. Data Retention

8.1 We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8.2 To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

9. Your Rights

9.1 Under data protection laws, you have the following rights:

• Right of access: You can ask for copies of your personal information
• Right to rectification: You can ask us to rectify inaccurate personal information
• Right to erasure: You can ask us to erase your personal information in certain circumstances
• Right to restriction of processing: You can ask us to restrict the processing of your personal information in certain circumstances
• Right to object to processing: You can object to the processing of your personal information in certain circumstances
• Right to data portability: You can ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances
• Right to withdraw consent: When we use consent as our lawful basis you can withdraw your consent at any time

9.2 If you wish to exercise any of these rights, please contact us at hello@zaturn.ai

9.3 You have the right to make a complaint at any time to the Gibraltar Regulatory Authority (GRA), the Gibraltar supervisory authority for data protection issues (www.gra.gi).

10. Security

10.1 We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

10.2 We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

11. Google API Data

Our Services integrate with Google APIs, including Google Analytics, Google Search Console, and the Google Ads API. When you connect your Google account, we may access the following data depending on which integrations you enable:

Google Analytics & Search Console (read-only):

• Website traffic and audience data from Google Analytics
• Search performance, keyword, and indexing data from Google Search Console

Google Ads (read and write):

• Google Ads account information including account name, ID, currency, and status
• Campaign, ad group, ad, and keyword data
• Campaign performance metrics including spend, clicks, impressions, conversions, CPA, and ROAS
• Audience and targeting information
• Ad creative content including headlines, descriptions, and image assets

When you connect your Google Ads account, our platform may create, edit, pause, resume, and manage advertising campaigns, ad groups, ads, and keywords on your behalf. All campaign creation actions require your explicit approval before execution. Campaigns are created in a paused state and are only activated with your direct confirmation.

We store OAuth tokens securely in our encrypted database to maintain your connection. Google Ads access tokens are refreshed automatically. We do not access, store, or process any data beyond what is necessary to provide advertising management features within the Zaturn platform.

We do not sell, share, or transfer your Google data to any third parties. Your Google data is used solely to provide marketing analytics, insights, and campaign management within your Zaturn dashboard.

You can disconnect your Google account at any time through the Integrations page in your Zaturn dashboard, which immediately revokes our access and deletes your stored tokens. Upon disconnection, we cease all API access to your Google Ads account within 3 business days of your request.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

12. Meta (Facebook & Instagram) API Data

Our Services integrate with Meta's Marketing API to help you create and manage advertising campaigns on Facebook and Instagram. When you connect your Meta account via Facebook Login, we access the following data:

Account Information:

• Your Facebook user ID, name, and email address
• Your Meta ad account names, IDs, currency settings, and account status
• Your Facebook Page names, IDs, and categories

Advertising Data (read and write):

• Campaign, ad set, ad, and ad creative data
• Campaign performance metrics including spend, impressions, clicks, conversions, CPA, and ROAS
• Audience targeting information including interests, demographics, and geographic data
• Ad creative content including primary text, headlines, descriptions, and image assets

When you connect your Meta Ads account, our platform may create, edit, pause, resume, and manage advertising campaigns, ad sets, ads, and ad creatives on your behalf. All campaign creation actions require your explicit approval before execution. Campaigns are created in a paused state and are only activated with your direct confirmation. Ads are published from your selected Facebook Page.

We store your Meta access tokens securely in our encrypted database. Meta access tokens have a maximum lifetime of 60 days, after which you will need to reconnect your account. We do not store your Facebook password.

We do not sell, share, or transfer your Meta advertising data to any third parties. Your Meta data is used solely to provide advertising management and analytics features within the Zaturn platform.

You can disconnect your Meta account at any time through the Integrations page in your Zaturn dashboard. Upon disconnection, we immediately revoke the stored access token, remove your Meta data from our systems, and cease all API access to your Meta ad accounts.

Data Deletion: If you wish to request deletion of all data associated with your Meta account, you can do so by emailing hello@zaturn.ai or by visiting the Data Deletion page linked in our Meta App settings. We will process deletion requests within 30 days.

Our use of Meta APIs complies with Meta's Platform Terms and Developer Policies.

13. Changes to This Policy

13.1 We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page with a new "Last Updated" date.

13.2 You are advised to review this privacy policy periodically for any changes.

14. Contact

If you have any questions about this privacy policy or our privacy practices, please contact us at: