Privacy Policy

Last Updated: September 29, 2026

1. Introduction

Geniusko (prevádzkovaný spoločnosťou Zarabaj Online OÜ) ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, website, or applications (collectively, the 'Services').

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when using our Services, including but not limited to:

Name and contact information (email address, phone number)
Account login credentials
Payment and billing information
Profile information and preferences
Content you create, upload, or generate using our Services

2.2 Usage Information

We automatically collect certain information about your device and how you interact with our Services, including:

Device information (type, operating system, browser)
IP address and location data
Usage patterns and preferences
Log data and analytics information

Meta data (Facebook and Instagram)

When you connect your Meta advertising account with your consent via the official Facebook login, we access only the data needed for the service to work:

An access token for your Meta account, stored encrypted (AES-256) and used only server-side.
Your ad and campaign metrics (spend, clicks, conversions, ROAS, CPA, campaign and ad names).
The list of your ad accounts and Meta Business portfolios, so you can choose which one to manage.
The list of your Facebook Pages and their basic engagement (followers, posts).

We use this data solely so Geniusko can analyze, manage, and optimize your ads within the app. We never sell it or share it with third parties for marketing purposes.

You can disconnect your Meta account at any time in Settings, which immediately revokes permissions and deletes the stored token. See the Data Deletion page for more.

Google Ads data

When you connect your Google Ads account with your consent via official Google sign-in, we access only the data needed for the Kampane (Campaigns) feature:

An access token for your Google Ads account, stored encrypted (AES-256) and used only server-side. We do not send the token to the browser.
The list of Google Ads accounts you authorized, so you can choose which one to manage.
Your campaign metrics (spend, impressions, clicks, conversions, revenue, ROAS) and campaign status.
A Merchant Center ID if you enter one for Shopping or Performance Max campaigns, so we can confirm or create the link to Google Ads.

We use this data solely so Geniusko can show performance in Kampane, suggest keywords, and after your confirmation create, pause, resume, or change campaign budgets. We do not become your manager account (MCC), do not create Google Ads accounts for you, and do not take over billing. We never sell this data or share it with third parties for marketing purposes.

You can disconnect Google Ads at any time in Settings, which revokes access and deletes the stored token. You can also revoke Geniusko in your Google Account (Google Account → Security → Third-party access / myaccount.google.com/permissions). See the Data Deletion page for more.

Google Analytics data

When you connect Google Analytics with your consent via official Google sign-in, we access only the data needed to read traffic and conversions:

An access token for your Google account, stored encrypted (AES-256) and used only server-side. We do not send the token to the browser. The permission is read-only.
The list of Google Analytics properties that Google account can access, so you can choose which one Geniusko reads.
Sessions, conversions and revenue for the property you select.

We use this data solely so Geniusko can show what happens between an ad click and a purchase. We do not change the Analytics property, add people, or delete data in Google. We never sell this data or share it with third parties for marketing purposes.

You can disconnect Google Analytics at any time in Integrations, which deletes the stored token. You can also revoke Geniusko in your Google Account at myaccount.google.com/permissions. See the Data Deletion page for more.

YouTube data

When you connect YouTube with your consent through official Google sign-in, we access only the data needed to list your videos and to upload a video you choose to publish:

An access token for your Google account, stored encrypted (AES-256) and used only server-side. We do not send the token to the browser.
The list of YouTube channels on that Google account, so you can choose which channel Geniusko uses.
Titles, thumbnails and the list of videos on the channel you select.
The video and the text you choose to publish to that channel.

We use this data solely so Geniusko can show your videos in Campaigns and Posts, and upload a video after you confirm it. We do not delete the channel, change comments, or download other people's videos. We never sell this data or share it with third parties for marketing purposes.

You can disconnect YouTube at any time in Integrations, which deletes the stored token. Disconnecting in the app does not revoke your other Google permissions for Geniusko. You can revoke Geniusko in your Google Account at myaccount.google.com/permissions. See the Data Deletion page for more.

Google Search Console data

When you connect Search Console with your consent through official Google sign-in, we access only the data needed to answer questions in AI Chat about your own site:

An access token for your Google account, stored encrypted (AES-256) and used only server-side. We do not send the token to the browser. The permission is read-only.
The list of Search Console properties on that Google account, so you can choose which site Geniusko reads.
Search queries, pages, clicks, impressions, click-through rate and average position for the property you select.
The index status of a URL you ask about, when that URL belongs to the selected property.

We use this data solely so Geniusko can answer your questions in AI Chat about how your site appears in Google Search. We do not submit sitemaps, add or remove properties, or change anything in Search Console. We never sell this data or share it with third parties for marketing purposes.

You can disconnect Search Console at any time in Integrations, which deletes the stored token. Disconnecting in the app does not revoke your other Google permissions for Geniusko. You can revoke Geniusko in your Google Account at myaccount.google.com/permissions. See the Data Deletion page for more.

Google user data

Google user data from Google Ads, Google Analytics, YouTube, and Google Search Console is used only to provide or improve the user-facing features you asked for in Geniusko. Those features are visible in the app before you connect. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data. We do not transfer it to advertising platforms, data brokers, or information resellers. We do not use it to serve advertisements, including retargeting, personalized, or interest-based advertising. We do not use it to determine credit-worthiness or for lending purposes.

We do not use this Google user data, or data derived from it, to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. AI Chat answers from the connected account you are using. It does not train a model on that data.

We do not share this Google user data with business partners. The only processors that receive it are Supabase and Vercel, which host Geniusko so the feature you asked for can run, and only for that purpose. We also disclose it when the law requires it, for security (for example, investigating abuse), or as part of a merger, acquisition, or sale of assets after we obtain your explicit prior consent. People at Geniusko do not read this data unless you agree, it is necessary for security or to comply with the law, or the data is aggregated and used for internal operations.

We keep this data while the integration stays connected and you keep your Geniusko account. When you disconnect the integration in the app, or when you delete your account, we delete the stored access token and the Google data we copied. You can also ask us to delete it by emailing info@geniusko.com.

Access tokens are encrypted with AES-256 and used only on our servers. We do not send them to your browser. We protect this data in transit and at rest.

Geniusko uses YouTube API Services. By using the YouTube features you agree to be bound by the YouTube Terms of Service. How Google handles data is described in the Google Privacy Policy. Besides the deletion steps above, you can revoke Geniusko's access to your data on the Google security settings page. Questions or complaints about these privacy practices: info@geniusko.com.

TikTok data

When you connect your TikTok account with your consent via official TikTok Login Kit, we access only the data needed for organic posts and stats in Príspevky (Posts):

An access token for your TikTok account, stored encrypted (AES-256) and used only server-side. We do not send the token to the browser.
Your account identifier (open_id), display name, username and avatar so we know which account is connected.
Account-level statistics TikTok shares with your consent (for example follower count, video count and total likes).
The list of your public videos and their metrics (views, likes, comments, shares) so we can show them in Posts.
The video or photo and caption you choose to publish to your TikTok account through Geniusko (Content Posting API).

We use this data solely so Geniusko can connect TikTok, schedule and publish organic posts to your account, and show their results. We do not process it for any purpose other than what TikTok Developer Services allow. We never sell it, share it with third parties for marketing, or use it to build profiles of other TikTok users.

You can disconnect TikTok at any time in Integrations, which revokes access and deletes the stored token. You can also revoke Geniusko in the TikTok app (connected apps permissions). See the Data Deletion page for more.

Conversion tracking for clients (CAPI)

If you are our client and use conversion tracking, through Geniusko you send data about your visitors to Meta (for example a hashed email and phone, IP address, the _fbp/_fbc cookies and events such as PageView, Lead or Purchase). With respect to this data you are the controller and we process it as a processor on your instructions. The sub-processors involved in this processing are Meta Platforms, Supabase and Vercel. As the controller, you are responsible for obtaining your visitors' consent and for disclosing this processing.

Public advertising data and connected integrations

Competition Analysis

Our Competition Analysis feature analyzes only publicly available advertising data from Meta's Ad Library (Facebook and Instagram), ads that anyone can view directly on Meta's own sites. It uses no private data and does not access data from any connected e-commerce or analytics integration.

Connected e-commerce and analytics integrations

When you connect an external service with your consent, we access it read-only and only for the data needed to show your own results in your own dashboard, primarily aggregated revenue totals and order counts. We do not collect or store buyers' personal data. We never sell this data, share it with third parties, or use it for competitive analysis or benchmarking of other sellers.

Etsy integration

If you connect your own Etsy shop, Geniusko (Zarabaj Online OÜ) is the application developer. We use Etsy's official OAuth sign-in and request only two read-only scopes: shops_r (to identify the shop you own) and transactions_r (to read that shop's receipts). We do not request buyer_email or any other buyer contact field. From your receipts we store only aggregated daily revenue and order counts in your own dashboard, so you can compare them with your Meta ad spend. We do not store buyer names, addresses or emails. We do not send Etsy buyer data to Meta or any advertising platform. We never sell Etsy data, share it with third parties, scrape etsy.com, or use Etsy data to analyze other sellers. If you paste one of your listing URLs into Products, we may load that listing's public title, description, price and images through Etsy's official public listing API, not by scraping. Our Competition Analysis feature is unrelated to Etsy and uses only the public Meta Ad Library. You can disconnect Etsy at any time in Integrations, which revokes access and deletes the stored token.

The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

3. How We Use Your Information

We may use the information we collect for various purposes, including:

Providing, maintaining, and improving our Services
Processing transactions and managing your account
Responding to your inquiries and providing customer support
Sending you technical notices, updates, and administrative messages
Personalizing your experience and delivering content relevant to your interests
Monitoring and analyzing usage and trends to improve our Services
Protecting the security and integrity of our Services
Complying with legal obligations

Personalizing your experience and monitoring usage in this list describe Geniusko's own product. They do not apply to Google user data. Google user data is used only as described in the Google user data section above.

We use personal data to perform the contract, to meet a legal duty, for legitimate interests such as security and fraud prevention, and, where we ask, with your consent.

Payments are processed by Stripe.

4. Data Sharing and Disclosure

We may share your information with:

Service Providers: Third-party vendors who perform services on our behalf
Business Partners: Companies we collaborate with to offer integrated or co-branded services
Legal Authorities: When required by law, legal process, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for their marketing purposes.

This section does not allow Google user data to be shared with business partners or used for advertising. Who receives Google user data, and how long we keep it, is stated in the Google user data section.

5. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We keep personal data while the account is open, and longer only for invoices, disputes, and what the law requires.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

Accessing, correcting, or deleting your personal information
Restricting or objecting to our use of your information
Requesting a copy of your information in a portable format
Withdrawing consent where processing is based on consent

To exercise these rights, please contact us using the information provided at the end of this Privacy Policy.

If you are in the European Economic Area or the United Kingdom, you may lodge a complaint with a supervisory authority if you believe our processing of your information violates applicable law.

7. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information.

8. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than the one in which you reside.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: info@geniusko.com

Zarabaj Online OÜ
Tartu mnt 67/1, Tallinn, 10115, Estonia
Reg. č.: 16824097 · IČ DPH: EE102701456