Privacy Policy

1.Who we are

AdPlan is a product of Dimetech Group Ltd (“Dimetech”, “we”, “us” or “our”), a company registered in Kenya with offices at Karen Office Park, Hemingways Block, Nairobi, Kenya. This Privacy Policy explains how we collect, use, share and protect personal information when you use the AdPlan website, marketplace and related services (together, the “Platform”).

Dimetech is the data controller for the personal information described in this policy. It applies to advertisers, marketing agencies, media owners, creators and anyone else who visits or uses the Platform. We handle personal information in line with the Data Protection Act, 2019 of Kenya and any other data protection law that applies to you.

2.Information we collect

Information you give us:

• Account details, such as your name, email address, phone number, job title, password and the organisation you represent.
• Business information, such as company and billing details and, for media owners, the inventory, locations, formats, pricing and audience information you list, and the bank account you want payouts sent to.
• Campaign information, such as briefs, objectives, budgets, target audiences, the plans, booking requests and bookings you create, and the creative and proof of delivery you upload.
• Communications, such as messages sent through the Platform, support requests and your notification preferences.

Information we collect automatically:

• Usage information, such as the pages you view, the searches you run, the features you use and when you visit.
• Device information, such as your IP address, browser type, operating system and approximate location based on your IP address.
• Information from cookies and similar technologies, as described below.

Information from others:

• Other users, for example when an organisation invites you to its workspace or an agency adds you to a campaign.
• Our payment provider, Paystack, which tells us whether a payment succeeded and gives us a reference for it. Card and other payment details are entered on Paystack’s own checkout and are not stored by us.
• Social media platforms, if you choose to connect an account, for example as a creator. We receive the profile and audience information that platform shares with your permission.
• YouTube, if you choose to link your YouTube channel, as described in “YouTube and Google user data” below.

3.How we use your information

We use personal information to:

• create and manage your account and workspace, and provide the Platform;
• show listings, build media plans and connect buyers with media owners;
• process booking requests, invoices, payments, escrow releases, refunds and payouts, and keep records of them;
• review proof of delivery and help resolve disputes between buyers and media owners;
• send service messages by email, SMS or browser notification, such as booking updates, payment confirmations and security notices;
• send insights and product updates where you have agreed to receive them or the law otherwise allows;
• provide support and respond to your questions;
• understand how the Platform is used so we can improve it;
• keep the Platform secure and prevent fraud and misuse; and
• meet our legal, tax and accounting obligations and enforce our terms.

4.Our legal bases

We use personal information only where the law allows it. We rely on one or more of the following:

• Contract: to provide the Platform and the services you ask for, including bookings and payments.
• Legitimate interests: to run, secure and improve the Platform and to tell business customers about relevant services, where those interests are not outweighed by your rights.
• Consent: for example, for marketing messages, browser notifications and connecting a social media account. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or disclose information, such as financial records.

5.How we share information

We do not sell your personal information. We share it only as described below:

• With other users, as needed for the marketplace to work. When you send a booking request or confirm a booking, the media owner or buyer involved sees the relevant contact, campaign and invoice details. Media owner profiles and listings are visible to buyers on the Platform.
• With service providers that help us run the Platform, including hosting, email, SMS, payment (Paystack) and customer support providers. They may use the information only to provide services to us.
• With professional advisers, such as lawyers, auditors and insurers, where needed.
• With authorities or other parties where the law requires it, or where it is necessary to protect the rights, safety or property of Dimetech, our users or others.
• As part of a business transaction, such as a merger, acquisition or sale of assets, in which case your information stays protected by this policy or equivalent safeguards.

6.YouTube and Google user data

Creators and media owners can link a YouTube channel to their AdPlan profile so that buyers can see the channel’s reach and audience when planning a campaign. AdPlan uses YouTube API Services to do this. This section explains how we access, use, store, share and delete the information Google shares with us when you link a channel.

By linking a YouTube channel, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google’s handling of your information is described in the Google Privacy Policy (https://policies.google.com/privacy).

Data we access. Linking a channel is optional, and we ask for read-only access. With your permission, Google shares:

• your channel’s name, ID, description, profile image and public URL;
• channel statistics, such as subscriber, video and view counts;
• your videos’ titles, thumbnails, publish dates and public statistics, such as views, likes and comments; and
• channel analytics, such as views, watch time and audience breakdowns by age group, gender and country. These are totals for your audience as a whole and do not identify individual viewers.

We cannot upload, edit or delete videos, post comments, or change anything on your channel. We do not access your Gmail, Google Drive, contacts, calendar or any other Google data.

How we use it. We use this information only to show your channel and audience on your AdPlan profile and listings, to help buyers find channels that match their campaigns, and to report on campaigns booked with you. We do not use YouTube or Google user data for advertising targeting, we do not sell it, and we do not use it to develop, improve or train generalised artificial intelligence or machine learning models.

How we share it. Your channel name, profile image, statistics and audience breakdowns are shown to buyers on the Platform as part of your profile and listings. We do not otherwise share YouTube or Google user data with third parties, except with the service providers that host and run the Platform on our behalf, where the law requires it, or with your consent.

How we store and protect it. This information is stored with your account on our servers, encrypted in transit, and access to it is limited to the staff and systems that need it to run the Platform. We refresh it from YouTube regularly and do not keep data from YouTube API Services for longer than 30 days without refreshing it.

Cookies. We collect this information from YouTube on our servers. We do not use YouTube API Services to place, read or store cookies or similar technologies on your device. The cookies we use for the Platform itself are described in “Cookies and similar technologies” below.

Disconnecting and deletion. You can unlink your channel at any time by emailing support@adplan.ke, and you can remove AdPlan’s access to your Google account at any time from Google’s security settings page (https://myaccount.google.com/permissions). When you unlink your channel or remove our access, we stop collecting information from it and delete the YouTube data we hold for you within 7 days, unless we must keep it to meet a legal obligation. Our Data Deletion page (https://adplan.ke/data-deletion/) explains how to delete your whole account.

AdPlan’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

7.Cookies and similar technologies

We use cookies and similar technologies, such as your browser’s local storage, to keep you signed in, remember your preferences, and understand how the Platform is used. Some are essential for the Platform to work; others are used only where the law allows or with your consent.

You can control cookies through your browser settings. If you block essential cookies, parts of the Platform may not work properly.

8.International transfers

Some of our service providers process personal information outside Kenya. When we transfer information across borders, we do so only where the Data Protection Act, 2019 allows it, and we take steps to keep it protected, for example through contractual safeguards.

9.How long we keep information

We keep personal information while your account is active and for as long as we need it for the purposes in this policy. Records of bookings, invoices and payments are kept for as long as tax and accounting law requires. When we no longer need information, we delete or anonymise it.

10.How we protect information

We use technical and organisational measures designed to protect personal information from loss, misuse and unauthorised access, including encryption in transit, encryption of sensitive credentials at rest, access controls and regular reviews of our practices. No system is completely secure, so please keep your password safe and tell us straight away if you think your account has been compromised.

11.Your rights

Under the Data Protection Act, 2019 and other laws that may apply to you, you have the right to:

• be told how your personal information is used;
• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• ask us to delete information that is false, misleading or no longer needed;
• object to the processing of your information, including for direct marketing;
• receive a copy of your information in a portable format; and
• withdraw your consent where we rely on it.

To exercise these rights, email us at support@adplan.ke. Our Data Deletion page (https://adplan.ke/data-deletion/) explains step by step how to have your account and personal information deleted. We may need to verify your identity before we respond. If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner in Kenya, or to the data protection authority where you live.

12.Messages and notifications

If you subscribe to AdPlan updates, we will send you insights and product news. You can unsubscribe at any time using the link in our emails or by contacting us. You can turn browser notifications off in your account or browser settings. We will still send service messages about your account, bookings and payments.

13.Children’s privacy

The Platform is designed for businesses and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.

14.Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will let you know through the Platform or by email. The date at the top of this page shows when the policy was last updated.

15.Contact us

If you have questions about this Privacy Policy or how we handle personal information, email us at support@adplan.ke or write to Dimetech Group Ltd, Karen Office Park, Hemingways Block, Nairobi, Kenya.