1. Scope and commitment
This Policy describes how Noctra collects, uses, and protects information when you access the platform, create an account, integrate marketing services, and use tracking resources.
We do not sell personal data. We process data only to deliver the contracted service, maintain operational security, and comply with legal obligations.
2. Data we collect
Account data: name, email, password hash, and email verification status.
Usage and tracking data: IP, user agent, visited URLs, click/pageview/sale events, campaign parameters (such as UTM and gclid), device data, and event timestamps.
Billing data: plan, subscription status, customer/subscription identifiers in payment providers, and payment attempt records.
Integration data: identifiers and channel settings such as Telegram and OneSignal, including registered devices for notifications.
3. Processing purposes
We use data to authenticate users, enable features according to plan, consolidate performance metrics, send alerts, provide support, and prevent abuse/fraud.
We also use technical information for platform stability, event auditing, and continuous improvement of the experience.
4. Sharing and processors
We may share data with providers necessary for operation, such as hosting services, transactional email, payment processing, and notifications.
This sharing occurs only to the extent necessary to deliver the service and with compatible security controls.
4.1 Google data and Google Ads integration
When you connect your Google account, we process only the data necessary for integration authentication and sending conversion events to your Google Ads account.
Data obtained via Google Ads APIs is used exclusively to upload conversions and corresponding conversion adjustments to the account configured by the user.
We do not use Google Ads account data for sale, our own ad profiling, or any purpose unrelated to technical integration operation.
The use and transfer of this information follows the Google API Services User Data Policy, including applicable limited-use requirements.
5. Retention and security
We retain data for the period necessary for account operation, legal compliance, and protection against misuse of the platform.
We adopt technical and organizational measures to reduce the risk of unauthorized access, loss, or unauthorized data changes.
6. User rights
You may request update, correction, or deletion of personal data when applicable, as well as clarifications about processing and retention.
Requests can be made through official support channels listed on the platform.