This Privacy Policy explains how OperationKit collects, uses, shares, and protects information when you use our website and platform (the "Service").
OperationKit is a marketing operations platform. Users connect their Google Ads (and other ad) accounts so OperationKit can help run reporting, monitoring, and approved workflow actions — such as search-term cleanup and campaign management — on their behalf. Access is only used for features the user enables.
The Service is operated by Datapron Yazılım Reklam ve İnternet Hizmetleri A.Ş. ("Datapron", "we", "us", or "our"), the company behind OperationKit. By using the Service, you agree to the practices described in this policy.
Contents
1. Information we collect
We collect the following categories of information:
Information you provide
- Account information: name, work email, company, and role when you register or request access.
- Communications: messages you send us, including support requests and feedback.
- Billing information: where applicable, billing contact and transaction records (payment card details are handled by our payment processor, not stored by us).
Information we collect automatically
- Usage data: actions taken in the Service, agent run history, feature usage, and timestamps.
- Device and log data: IP address, browser type, device identifiers, and diagnostic logs.
- Cookies and similar technologies: used for authentication, preferences, and analytics. You can control cookies through your browser settings.
Information from connected platforms
When you connect a third-party platform (for example, Google Ads, Meta Ads, or an analytics tool), we access the data you authorize so your agents can perform their tasks. See Section 3.
2. How we use information
We use the information we collect to:
- Provide, operate, and maintain the Service and run the agents and workflows you configure;
- Authenticate users and secure accounts;
- Process transactions and manage subscriptions;
- Respond to your requests and provide customer support;
- Monitor, analyze, and improve performance, reliability, and features;
- Detect, prevent, and address security incidents, fraud, and abuse;
- Comply with legal obligations.
3. Connected platform data
OperationKit connects to third-party platforms only with your explicit authorization, through their official APIs. We access the specific data and permissions you grant during the connection process, for example advertising performance metrics, campaign data, and analytics.
We do not sell platform data, and we do not use it for advertising. Connected platform data is used solely to operate the agents and workflows you configure, and is processed on your behalf as your service provider (processor).
If you connect a Meta (Facebook or Instagram) product, our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including limitations on the use and transfer of such data. You can revoke access at any time from your account settings or from the connected platform's own settings.
4. Legal bases for processing
Where the GDPR or the Turkish Personal Data Protection Law (KVKK) applies, we process personal data on the following bases: performance of a contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating and securing the Service; and compliance with legal obligations.
5. How we share information
We share information only as described below:
- Service providers: infrastructure, hosting, analytics, and support vendors who process data on our behalf under contract.
- AI model providers: to generate agent outputs, as described in Section 6.
- Legal and safety: where required by law, legal process, or to protect the rights, property, or safety of Datapron, our users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.
We do not sell your personal data.
6. AI model providers
OperationKit uses third-party large language model providers to generate agent outputs. Content required to complete a task may be sent to these providers for processing. We select providers that offer enterprise data protections and, where available, configure them so that your content is not used to train their models. The provider used for a given task may vary based on performance and cost routing.
7. Data retention
We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter only as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it. See Section 9 for how to request deletion.
8. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Delete your personal data;
- Restrict or object to certain processing;
- Data portability;
- Withdraw consent at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.
9. How to delete your data
You can request deletion of your data at any time. Email [email protected] with the subject line "Data Deletion Request", or follow the step-by-step instructions on our User Data Deletion page.
If you connected OperationKit through Facebook or Instagram Login, you can also trigger a deletion request directly from Facebook: go to Settings & Privacy → Settings → Apps and Websites, remove OperationKit, and send a data deletion request. We will delete the associated data and provide a confirmation code and a status link, as described on our User Data Deletion page.
10. Security
We implement technical and organizational measures to protect personal data, including encryption in transit and at rest, tenant isolation, role-based access controls, and audit logging. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.
11. International data transfers
Your information may be processed in countries other than your own. Where we transfer personal data across borders, we rely on appropriate safeguards, such as standard contractual clauses, consistent with applicable law.
12. Children
The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.
14. Contact us
Datapron Yazılım Reklam ve İnternet Hizmetleri A.Ş.
Privacy inquiries: [email protected]
General: [email protected]