Privacy Policy

ADSTIC INTERACTIVE LTD (АДСТИК ИНТЕРАКТИВ ЕООД) Company ID (EIK) 206749752, VAT No. BG206749752, registered office and address of management: 13 Yuri Venelin St., fl. 4, apt. 7, Odesos district, Varna 9000, Bulgaria Email: contact@adsticorb.com Last updated: 25 September 2026

1. Who processes your data

The controller of the personal data of Adstic Orb users is ADSTIC INTERACTIVE LTD. For anything concerning your personal data, write to us at contact@adsticorb.com.

This policy covers the data of people who use the platform or visit our website. When a trader uses Adstic for their site and collects data about their own customers, the trader is the controller of that data and we process it on their behalf. That is governed by the Data Processing Agreement.

2. What data we collect

— Account data: name, email, password (stored only in a protected, irreversible form), business name and type. — Payment data: which subscription you have and your payment history. Your card number is entered directly with Stripe and never reaches us. — Billing data, if you enter it: company name, company ID, VAT number, address. — Technical data: IP address, browser, device, date and time of actions, for security and to find errors. — Where you came from: an advertising campaign or a partner link, if you arrived through one. — The messages you send us through the contact form or by email.

3. Why we use it and on what legal basis

— To provide you with the platform, under our contract with you (Art. 6(1)(b) GDPR). — For invoicing and accounting, as required by law (Art. 6(1)(c)). — For security, preventing abuse and fixing errors, on the basis of legitimate interest (Art. 6(1)(f)). — To pay a commission to a partner who referred you, on the basis of legitimate interest. — For analytics and advertising measurement, only with your consent (Art. 6(1)(a)). — For marketing messages from us, only with your consent. You can unsubscribe from any such email.

4. Who we share data with

We use the following providers, who process data on our behalf and are bound by contract to do so:

— Supabase: database and account sign-in (servers in the EU, Ireland); — Vercel: hosting of the application; — Stripe: payments and subscriptions; — Resend: sending email; — Sentry: detecting technical errors; — Google: sign-in with a Google account, if you choose it, and Google Analytics, if you have consented; — Meta: Meta Pixel for advertising measurement, if you have consented; — Twilio: SMS reminders, if the trader has turned that feature on; — Cloudflare and Pollinations: generating images at your request; — Econt and Speedy: creating shipping labels, if the trader has connected their courier.

Some of these providers are in the United States. Where data is transferred outside the EU, this is done on the basis of a European Commission adequacy decision (the EU–US Data Privacy Framework) or standard contractual clauses.

We do not sell personal data.

5. How long we keep it

— Account data: for as long as the account exists. When you delete it, the data is deleted with it. — Invoices and accounting records: 10 years, as the Bulgarian Accountancy Act requires. — Technical error and security logs: up to 90 days.

6. Automated decision-making

We do not make decisions about you on a purely automated basis that have legal effects or similarly significant effects on you.

7. Your rights

You have the right to: — receive a copy of your data; — ask for inaccurate data to be corrected; — ask for erasure (you can also delete your account yourself from the settings); — restrict processing; — receive your data in a machine-readable format (portability); — object to processing based on legitimate interest; — withdraw consent at any time, without affecting processing already carried out.

To exercise your rights, write to contact@adsticorb.com. We reply within one month.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority in your own EU country.

8. Security

The connection to the site is encrypted. Passwords are stored in an irreversible form. Access to data is limited to the people who need it for their work.

9. Changes

When we change this policy, we will update the date above. For a material change we will notify you by email.