Privacy policy

Last updated: 28 October 2026

This policy explains what personal data Adkorly OÜ collects on adkorly.com and in the Adkorly app at app.adkorly.com, why we use it, who else handles it, how long we keep it, and what you can ask us to do with it.

1. Who we are

Adkorly OÜ is the controller of the personal data described in this policy.

• Adkorly OÜ, registry code 17631124
• Narva mnt 7a, Tallinn, Estonia
• hi@adkorly.com

Adkorly is a service for businesses: affiliates and agencies that run Snapchat ads. The people whose data we handle are mostly the contact people and app users at those businesses, and visitors to our website.

2. What we collect

2.1 Your app account

Our sign-in provider, Clerk, handles your login when you sign up or are invited to the app. We store your email address, your role, and which client company your login belongs to. Clerk also holds your name and profile picture if you add them, and the details it needs to keep your login secure.

If you sign in with Google, Google shares your name, email address and profile picture with Clerk.

To stop automated sign-ups, the sign-in pages run a bot check by Cloudflare, which looks at technical details of your browser and your IP address.

2.2 Billing details

We store the billing details entered for your company in the app: company name, registration number, VAT number, address and invoicing email address.

2.3 Wallet top-ups

You fund your ad accounts from a wallet in euros, topped up by bank transfer. We record each top-up: the amount, the payment reference, the dates, and which user requested it. Our bank statement also shows the payer’s name, account number and the reference used.

2.4 Ad accounts and campaigns

We create Snapchat ad accounts for you under Adkorly’s own Snapchat business account, and manage them through Snapchat’s Marketing API. Through it we receive and store data about those ad accounts: account names, campaigns, ads and their texts (headline, brand name, call to action, destination link), media file names, daily spend and performance figures, and Snapchat’s review results, including rejection reasons.

These are figures about ads, not about the people who see them. We receive no data about individual Snapchat users.

When an ad account is created, Snap receives your company name as the advertiser and, where Snap asks for them, your billing details.

2.5 Creatives

Videos and images uploaded for your campaigns are kept in private file storage and sent to Snapchat with your ads. With each file we store its name, type and size.

2.6 Requests and emails

When you ask for something in the app, such as new ad accounts, we receive your request with your email address, your company and the details you enter, for example the website, time zone, expected spend and notes. We also keep the emails you send us.

2.7 The contact form

The contact form on adkorly.com asks for your name, email address, company and message, and optionally your monthly ad spend. We store each message in our website’s database with the IP address it was sent from, and email it to our team. The IP address is removed from the stored message after 30 days.

Straycy, the tracking plugin that runs on our own website server, also saves a copy of each message. If you allowed marketing cookies, that copy also records how you reached us (see 2.8), so we can see which campaigns bring in enquiries.

2.8 Website visits

Our website asks before it sets any cookie that isn’t needed to run the site. What each cookie does and how long it lasts is listed in our cookie policy. You can change your choice any time under Cookie settings at the bottom of every page.

• Statistics, with your consent: Google Analytics, added through Google’s Site Kit plugin, shows us which pages are visited and how visitors found them. It only loads once you allow statistics cookies; before that, nothing is sent to Google. Google Analytics doesn’t log or store IP addresses.
• Marketing, with your consent: Straycy records how you reached us: the source and campaign (for example an ad or another website), the ad click ID, the page you landed on, your device type and browser, and a hashed (one-way scrambled) version of your IP address. It keeps this in our own cookies for 30 days and in our website’s database. Visits that don’t lead to a message are deleted after 30 days.

Like any website, ours is served by a hosting provider, Hostinger, which keeps technical logs of requests to the site, including IP addresses, to run and protect it.

3. Why we use it, and on what legal basis

• To provide the app and the ad accounts your company asks for (your account, billing details, top-ups, ad account and campaign data, creatives, requests): to perform our contract with your company (GDPR Article 6(1)(b)), and our legitimate interest in working with the people at our clients (Article 6(1)(f)).
• To keep accounting records and meet tax rules (billing details, top-ups, invoices): our legal obligations (Article 6(1)(c)).
• To answer messages and contact form enquiries: our legitimate interest in replying to people who contact us, or steps you ask for before a contract (Article 6(1)(f) and (b)).
• To keep the app and website secure and stop abuse (sign-in checks, logs, the contact form’s spam checks): our legitimate interest (Article 6(1)(f)).
• Website statistics and marketing measurement: your consent (Article 6(1)(a)), which you can withdraw any time under Cookie settings.

We don’t sell personal data, and we don’t make decisions about you based solely on automated processing.

4. Who else handles it

We use the providers below to run Adkorly. They handle personal data on our behalf, for the purposes in this policy.

Provider	What for	Personal data involved
Clerk	Sign-in and user accounts	Name, email address, profile picture, login details
Cloudflare (through Clerk)	Bot check on the sign-in pages	Browser details, IP address
Vercel	Hosting the app, its scheduled tasks and file storage	App data, creatives
Neon	The app’s database, in the EU (Frankfurt)	App data
Upstash	Short-term cache and rate limits	Internal user and company IDs, cached ad data
Resend	Sending emails from the app and the website	Email addresses, message contents
Hostinger	Hosting adkorly.com and its database	Website data, contact form messages, Straycy records, server logs
Google	Website statistics, with your consent	Usage data from the website

Some organisations receive data from us but decide for themselves how to use it, under their own privacy policies:

• Snap, for the ad accounts, ads and creatives we run for you, and the company and billing details described in 2.4.
• Google, if you sign in with your Google account.
• Our bank, for payments.

We also share data when the law requires it, and with our accountant and legal advisers, who are bound to confidentiality.

5. Transfers outside the EU

Some of these providers are based in the United States or elsewhere outside the European Economic Area, or may access data from there: Clerk, Cloudflare, Vercel, Upstash, Resend, Google and Snap.

Where personal data goes outside the European Economic Area, we rely on a European Commission adequacy decision, such as the EU-US Data Privacy Framework for certified US companies, or on the Commission’s standard contractual clauses. Ask us for a copy of the safeguards that apply.

6. How long we keep it

We keep personal data while we need it for the purposes in this policy. When you ask us to delete your data, we do, unless the law requires us to keep it.

• Billing details, top-up records and invoices: as long as Estonian accounting law requires, currently 7 years from the end of the financial year they belong to.
• Your app account, ad account and campaign data, creatives, requests and emails: until you ask us to delete them, or until we no longer need them. Data tied to payments also falls under the accounting rule above.
• Contact form messages: deleted from our website’s database automatically after 24 months, and their IP address after 30 days. Copies in our mailbox and in Straycy’s records stay until you ask us to delete them.
• Website visit records: visits that don’t lead to a message are deleted after 30 days.
• Cookies: as listed in the cookie policy.

7. Cookies

The website’s cookies are listed in the cookie policy, and you can change your choice any time under Cookie settings at the bottom of every page.

The app only uses cookies it needs to work: Clerk’s sign-in cookies, and two of its own that remember which ad account you last selected (kept for 1 year) and which notifications you’ve read (kept for 90 days).

8. Your rights

Under the GDPR you can ask us to:

• show you the personal data we hold about you, and give you a copy;
• correct it;
• delete it;
• limit how we use it;
• send it to you or another company in a machine-readable format;
• stop using it where we rely on our legitimate interests.

Where we rely on your consent, you can withdraw it any time, for the website under Cookie settings. Withdrawing doesn’t affect what we did before.

Some data we must keep by law, such as accounting records. If that applies, we’ll tell you. If your company is our client, some requests, such as closing its account, need to come from the company.

Write to hi@adkorly.com. We answer within one month, and may ask you to confirm who you are first.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or to the data protection authority where you live or work.

9. Security

Only Adkorly staff who need it can access personal data. Data travels encrypted (HTTPS), the access keys for our Snapchat connection are stored encrypted, and uploaded files sit in private storage.

10. Businesses only

Adkorly is for businesses, and our terms only allow business use. Our website and app aren’t meant for children, and we don’t knowingly collect their data.

11. Changes to this policy

When what we do changes, we update this page and the date at the top. If a change matters for app users, we also tell them by email or in the app.

12. Contact

Questions about this policy or your data: hi@adkorly.com, or Adkorly OÜ, Narva mnt 7a, Tallinn, Estonia.