Privacy Policy
Last updated: 12 August 2026
This Privacy Policy explains how LTD KMTAGENCY, operating KissMyTraffic Agency (“the service”), processes information when authorized users access the service.
1. Information we process
Depending on how the service is used, we may process:
- work email address, organization and role information;
- authentication and session data;
- technical logs such as timestamps and error records;
- identifiers of advertising accounts a user has authorized;
- campaign, ad group and ad identifiers and their settings;
- aggregated reporting metrics such as spend, impressions, clicks and conversions;
- workspace configuration and audit events.
2. Data we do not process
The service does not collect, request or process personal data of end users of third-party advertising platforms. Reporting data is aggregated at campaign, ad group or ad level and does not identify individuals.
3. Third-party platform data
When a user authorizes an advertising platform integration, we receive an access token and the advertising data permitted by the scopes that user approved. We never ask users for third-party platform passwords: authorization always happens through the platform’s own official flow, and the user can revoke it at any time from the platform’s interface.
4. How information is used
To authenticate users, provide account and campaign management functionality, display reporting data, maintain the integrations the user enabled, keep security and audit logs, and respond to support requests. Information is not used for advertising, profiling or any purpose unrelated to operating the service.
5. Sharing
We do not sell personal information and do not share it with data brokers, advertising networks or analytics vendors. Data may be shared with service providers strictly as necessary to operate, secure and support the service, or where required by law.
6. Storage and security
Access tokens are stored server-side and are used only to make requests to the corresponding platform API on behalf of the accounts the user authorized. Access to production systems is limited to authorized personnel.
7. Retention and deletion
Information is retained only as long as reasonably necessary for the service and for security, legal and contractual requirements. Tokens are removed when an advertising account is disconnected or authorization is revoked. Users may request deletion of their data at any time — see Data Deletion.
8. Changes
If the scope of the service changes, this policy is updated and the date at the top of the page revised.