1. About the Operator
This service, "AdPorta" (the "Service"), is operated by AdPorta ("we" or "us").
2. Information We Collect
The Service collects the following information.
- Registration information such as name, company name, and email address
- Service usage history and log data
- Google Analytics 4 analytics data (only when a provider has authorized the connection)
- Payment information (managed by Stripe; we do not retain card numbers)
3. Purpose of Use
- Providing and improving the Service
- Matching advertisers with media operators
- Analyzing and providing advertising performance using GA4 data
- Billing and payment processing
- Sending important notices
4. Use of Google APIs
The Service uses the Google Analytics Data API when a media operator (Provider) connects Google Analytics 4. The data obtained is limited to the following.
- Pageviews (PV)
- Unique users (UU)
- Visitor attributes (gender, age, device)
- Repeat visit rate
Data obtained is presented, as ad space information, only to the advertiser matched through the Service. It is never sold, provided, or transferred to any other third party. Use of information obtained from Google APIs complies with Google's API Services User Data Policy.
Sharing, Transfer, and Disclosure of Google User Data
- Advertisers: Within a partnership established through application and review, advertisers can view PV, UU, and attribute data for the relevant ad space.
- Subcontractors (data processors): Server hosting (Heroku / AWS) and analytics infrastructure. All are permitted only to process data under contract with us and are prohibited from independent use.
- We do not share, sell, or disclose data to any party other than those listed above, except when required to provide information to authorities under law.
5. Provision to Third Parties
We do not provide collected personal information to third parties except in the following cases.
- When the user has consented
- When required by law
- When providing to subcontractors necessary for the Service (Stripe, Google, etc.)
6. Data Storage and Deletion
Data obtained from Google APIs is stored in AdPorta's database. It is deleted upon disconnection or account deletion. Users may request account deletion at any time.
7. Cookies and Analytics Tools
The Service uses cookies for session management.
8. Protection of Personal and Sensitive Data
We implement the following technical and organizational measures to protect personal and sensitive data, including data obtained from Google APIs.
- Encrypted communication: All communications are encrypted via TLS (HTTPS); no data is sent or received in plain text.
- Access control: Google API tokens (OAuth 2.0) are stored encrypted in the database. Access is limited to the minimum staff necessary to provide the Service.
- Encryption at rest: Server and database storage are encrypted.
- Minimal scope: We request only the minimum Google OAuth scopes necessary for the Service.
- Security monitoring: We monitor for unauthorized access or unusual activity and respond promptly to any incident.
- Data minimization: Data no longer needed to provide the Service is promptly deleted.
9. Contact
For questions about privacy, please contact us at the address below.
Email：support@adporta.net
10. Changes to This Policy
We may revise this policy as necessary. Significant changes will be announced on the Service.