Privacy Policy

Last updated: October 17, 2026

1. Who we are

pushmoreads is operated by Elias Roitinger (sole proprietorship), Niederndorf 7, 4675 Weibern, Austria (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at hello@pushmoreads.com.

2. What data we collect

• Account data — your name, email address and, if you sign in with Facebook, your public profile picture and Facebook user ID.
• Meta connection data — an access token for the ad accounts you explicitly connect, plus metadata about those accounts, campaigns, ad sets and Pages (names, IDs, status, performance metrics).
• Content — the ad creatives (images, videos), ad copy and launch settings you upload or configure.
• Cloud storage imports — only if you connect Google Drive or choose files from Dropbox: an access token for Google Drive (removed when you disconnect) and the files you pick, which we download to prepare your ads. We do not browse or store anything else from your cloud storage.
• Billing data — your subscription plan, billing name and address, VAT ID if you enter one, and a Stripe customer reference. Card details are processed by Stripe and never touch our servers. VAT IDs are checked against the EU VIES system.
• Emails — we send you emails about your account and trial: email confirmation codes, getting-started tips, reminders before your trial ends and, as an existing customer, occasional offers for pushmoreads. Links in these emails carry a campaign tag so we can see which emails are useful; we do not track whether you open them. If you reply, we read your reply; replies and bounce notices pause or stop these emails. Every non-essential email has an unsubscribe link. This rests on our contract with you and, for tips and offers, on our legitimate interest in direct marketing to existing customers (Art. 6(1)(f) GDPR, § 174(4) Austrian TKG 2021).
• Technical data — a session cookie and server logs (IP address, timestamps, requested URLs) kept for security and debugging.
• Usage measurement — which screens are opened and which key steps are completed (for example signing in, starting a checkout or launching ads), measured by Rybbit, open-source analytics we host ourselves on our own EU servers. No cookies, no IP address, no third party. Once you are signed in, these measurements are linked to your account ID so we can see where people get stuck; they never contain your ad copy, your name or your email address. We may also record session replays of the app’s interface to find usability problems: everything you type is masked, and names and email addresses are hidden in your browser before anything is sent. This rests on our legitimate interest in improving the product (Art. 6(1)(f) GDPR); you can object at any time by writing to us, and we will exclude your account.
• Ad measurement (only with your consent) — if you accepted advertising cookies on our website (pushmoreads.com), we tell Google Ads once that your new account was created, so we can see which of our ads bring sign-ups. This sends the Google Ads click identifier stored by the website and your email address, which your browser converts into an irreversible SHA-256 hash before sending (Google “enhanced conversions”). We also keep the click identifier with your account to report later whether a trial became a paid subscription. Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the website’s cookie settings. Without that consent nothing is sent to Google.

3. Why we process it (legal bases)

We process your data to provide the service you signed up for — publishing ads to your Meta ad accounts, storing your creatives and settings, and billing your subscription (Art. 6(1)(b) GDPR, performance of a contract). We keep security logs and prevent abuse based on our legitimate interests (Art. 6(1)(f) GDPR), and we comply with legal obligations such as tax record-keeping (Art. 6(1)(c) GDPR). Where we rely on consent, you can withdraw it at any time.

4. Who we share it with

• Meta Platforms — creatives, ad copy and launch settings are transmitted to the Meta Marketing API when you publish, only for the ad accounts you connected and only when you trigger a launch or refresh.
• Stripe — for subscription payments, as an independent payment processor.
• Google Ireland Ltd. — Google Ads conversion measurement, only with your consent (see above); Google may transfer data to the United States.
• Google Drive and Dropbox — only if you connect them to import files.
• Hetzner Online GmbH (Germany/Finland, EU) — hosting of our servers and email, under a data processing agreement.

We do not sell your personal data, run third-party advertising trackers without your consent, or read your Meta account beyond the ad accounts you explicitly connect. Our use of data received from Meta Platforms complies with Meta’s Platform Terms and Developer Policies, including the Limited Use requirements.

5. International transfers

Where data is transferred outside the EU/EEA (for example to Meta, Google, Dropbox or Stripe in the United States), we rely on the recipients’ certification under the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

6. How long we keep it

Your account data, creatives and settings are kept while your account exists and deleted when you delete your account. Meta access tokens expire automatically and are replaced on each login; expired tokens are automatically removed from our systems. Email confirmation codes are single-use and short-lived. Billing records are retained as long as tax law requires.

7. Your rights

Under the GDPR (and similar laws such as the CCPA), you have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent. EU/EEA residents can lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at) or their local supervisory authority. To exercise any of these rights, email hello@pushmoreads.com — we respond within 30 days.

8. Data Deletion Instructions

You can delete your account and all associated data (creatives, settings, Meta access tokens, billing references) in any of these ways:

• In the app: open Settings → Delete account & data and confirm. Deletion is immediate; any active subscription is cancelled first.
• Via Facebook: in your Facebook settings (Settings & Privacy → Settings → Business Integrations), remove pushmoreads and choose to delete the data the app holds. Facebook notifies us and we delete automatically; you receive a confirmation code and a status link.
• By email: write to hello@pushmoreads.com from the address on your account with the subject line “Delete my data”. We confirm and complete deletion within 30 days.

Disconnecting pushmoreads from your Facebook settings without requesting deletion separately revokes our access to your Meta data at any time.

9. Cookies

A single first-party session cookie keeps you signed in. It is strictly necessary for the service. The app shows no cookie banner of its own: it follows the choice you made on our website, and only if you accepted advertising cookies there does it load Google’s tag, which reads and may set Google’s advertising cookies (such as_gcl_aw and _gcl_au) for the measurement described above.

10. Security

All traffic is encrypted in transit (HTTPS). Access tokens are stored server-side, encrypted at rest (AES-256), never exposed to other users, and redacted from logs. Cached advertising data is segregated per user account. We follow industry-standard practices to protect our infrastructure.

11. Children

pushmoreads is a business tool for advertisers and is not directed at children. You must be at least 18 years old (or the age of majority in your jurisdiction) to use it.

12. Changes

We will announce material changes to this policy by email or in-app notice before they take effect. The date above always reflects the current version.