Privacy Policy

1. Introduction

ElseandIF ("we", "us", or "our"), the company behind NoAdCode, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the NoAdCode platform, website (noadcode.com), WordPress plugin, and related services.

Data Fiduciary: ElseandIF
Registered Address: B4-201, Nyati Evara, Nyati Estate Road, Undri, Pune, Maharashtra, India
Contact: privacy@noadcode.com

2. Personal Data We Collect

We collect the following categories of personal data:

2.1 Information You Provide

• Account Information: Name, email address (collected via Google OAuth authentication)
• Business Information: Company name, website domain names
• Payment Information: Billing details processed securely through Razorpay (we do not store full card numbers)
• Communication Data: Emails, support requests, and feedback you send us

2.2 Information Collected Automatically

• Technical Data: IP address, browser type, device information, operating system
• WordPress Environment: WordPress version, PHP version, plugin version
• Usage Data: API call counts, ad impressions, error logs, response times
• Google Ad Manager Data: Network codes, ad unit configurations (accessed via OAuth with your explicit consent)

2.3 Google Ad Manager Access

To use NoAdCode, you grant admin access to parambhatia51@gmail.com in your Google Ad Manager account. This allows us to manage ad units and access reporting data on your behalf. You can revoke this access at any time by removing parambhatia51@gmail.com from your GAM account's user management.

3. Purpose of Data Collection

We process your personal data for the following purposes:

• Service Provision: To provide, maintain, and improve NoAdCode services
• Authentication: To verify your identity and manage your account
• Google Ad Manager Integration: To fetch and manage ad units, networks, and reporting data
• Billing: To process payments and manage subscriptions via Razorpay
• Communication: To send service updates, security alerts, and support responses
• Analytics: To understand usage patterns and improve our services
• Security: To detect and prevent fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. Legal Basis for Processing (DPDPA Compliance)

Under the Digital Personal Data Protection Act, 2023, we process your data based on:

• Consent: You provide explicit consent when creating an account and connecting Google Ad Manager
• Contractual Necessity: Processing required to fulfill our service agreement with you
• Legitimate Uses: As permitted under Section 7 of DPDPA for service provision
• Legal Obligations: To comply with applicable Indian laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Google: Via Google Ad Manager API for ad management functionality (when you grant admin access to parambhatia51@gmail.com)
• Razorpay: For secure payment processing (PCI-DSS compliant)
• Supabase: Our database provider for secure data storage
• Vercel: Our hosting provider for application deployment
• Legal Authorities: When required by law, court order, or government regulation

All third-party processors are contractually obligated to protect your data and use it only for specified purposes.

6. Data Retention

We retain your personal data for the following periods:

• Account Data: Until you delete your account or request deletion
• OAuth Tokens: Until you remove parambhatia51@gmail.com from your Google Ad Manager account admin access
• Usage Logs: 12 months from collection
• Billing Records: 7 years (as required by Indian tax laws)
• Audit Logs: 3 years for security and compliance purposes

7. Your Rights Under DPDPA

As a Data Principal under the DPDPA, you have the following rights:

• Right to Access: Request information about your personal data we process
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Withdraw Consent: Withdraw consent at any time (may affect service availability)
• Right to Grievance Redressal: Lodge complaints about data processing
• Right to Nominate: Nominate another person to exercise your rights

To exercise these rights, contact us at privacy@noadcode.com.

8. Data Security Measures

We implement robust security measures including:

• Encryption: All data transmitted via TLS/HTTPS; sensitive data encrypted at rest using AES-256
• Access Controls: Role-based access controls and multi-factor authentication
• Token Security: OAuth tokens encrypted with field-level encryption
• Infrastructure: Hosted on SOC 2 compliant infrastructure (Vercel, Supabase)
• Monitoring: Continuous security monitoring and audit logging

For detailed security information, see our Data Security page.

9. Cross-Border Data Transfers

Your data may be transferred to and processed in countries outside India, including the United States (where our infrastructure providers operate). We ensure appropriate safeguards are in place as required by DPDPA, including contractual protections with our service providers.

10. Children's Privacy

NoAdCode services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and security
• Analytics Cookies: To understand how you use our services (Google Analytics)
• Preference Cookies: To remember your settings
• Advertising/Marketing Cookies: To measure advertising effectiveness and build custom audiences

11.1 Meta (Facebook) Pixel

We use Meta Pixel (formerly Facebook Pixel) on our website. Meta Pixel is a piece of code that allows us to:

• Measure advertising effectiveness: Track conversions from Meta ads and understand which ads drive results
• Build custom audiences: Create targeted advertising audiences based on website visitors
• Optimize ad delivery: Show ads to people who are more likely to be interested in our services
• Retargeting: Show relevant ads to people who have previously visited our website

When you visit our website, Meta Pixel may collect information about your browsing behavior, including pages visited, actions taken, and device information. This data is shared with Meta Platforms, Inc. and may be used for targeted advertising on Facebook, Instagram, and other Meta platforms.

Opting Out: You can opt out of personalized advertising by:

• Adjusting your ad preferences in your Facebook settings at facebook.com/settings/?tab=ads
• Using the Digital Advertising Alliance's opt-out tool at optout.aboutads.info
• Managing cookie preferences through your browser settings

For more information about Meta's data practices, please visit Meta's Privacy Policy.

12. Grievance Redressal

For any privacy-related concerns or complaints, contact our Grievance Officer:

We will acknowledge your complaint within 2 working days and resolve it within 10 business days. If unsatisfied with our resolution, you may approach the Data Protection Board of India.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Your continued use of NoAdCode after changes constitutes acceptance of the updated policy.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts in Pune, Maharashtra, India.

15. Contact Us

For questions about this Privacy Policy or our data practices, contact us at: