Privacy Policy

1. Who we are

Context Buyer is a B2B software tool for advertising agencies and performance marketers. It helps manage contextual advertising workflows (briefs, semantics, creatives, campaign drafts) for multiple client projects. It is not a consumer social app.

2. Data we collect

• Account data: email address, password hash, organization name, role.
• Project / brief data: website URL, geo, budget plan, USPs, audience notes, negative keywords and related marketing inputs you enter.
• Advertising platform OAuth: when you connect Yandex Direct or Google Ads, we receive access and refresh tokens and account identifiers needed to call those APIs on your behalf.
• Operational data: campaign drafts, sync and reporting snapshots, agent task status, audit events of write actions, aggregated LLM usage metrics (not full secrets).
• Technical logs: request metadata such as timestamps and request IDs. We do not intentionally log raw OAuth tokens or API keys.

3. How we use data

We use this information only to:

• authenticate users and isolate data by organization / project;
• run the product pipeline (semantics, creatives, drafts, reports);
• call Yandex Direct / Google Ads APIs after you connect a cabinet;
• provide support and improve reliability and security.

We do not sell personal data. We do not use Google user data for advertising to end consumers or for unrelated AI training outside operating this product for your organization.

4. Google user data (Limited Use)

If you authorize Google Ads OAuth, Context Buyer accesses Google Ads account data solely to provide the features you request (connect account, sync campaigns, reporting, paused campaign creation after explicit confirmation). Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Storage and security

OAuth tokens are stored encrypted at rest, scoped to a project. Access is restricted by authentication and project membership. Passwords are stored as irreversible hashes.

6. Sharing

We share data with subprocessors only as needed to run the service (hosting, database, email if used). Ad platform APIs receive requests using tokens you authorized. We do not share your Google or Yandex tokens with unrelated third parties.

7. Retention and deletion

We keep account and project data while your organization uses the product. You may request deletion of your account and associated project data by contacting us; we will delete or anonymize data except where retention is required by law or security logs.

8. Contact

Privacy questions: igor.mirkhanov@mail.ru