Privacy Policy

1. Data Controller

The controller of your personal data is BuyReadySite (hereinafter "we", "us", "our"), the owner and operator of the PromoPilot platform.

Contact us:

• Telegram: @buyreadysite
• Contact form: Contact page

2. What data we collect

2.1. Account data

• Email address
• Full name
• Password (stored encrypted with bcrypt)
• Phone number (when verified via Telegram, optional)

2.2. Technical data

• IP address
• Browser User-Agent
• Session cookies
• Date and time of access

2.3. Project and promotion data

• URLs of promoted sites
• Keywords and anchors
• Link placement results on platforms
• Cascade campaign reports

2.4. Payment data

• Transaction and balance history
• We do NOT store card data — all payments are processed through secure payment providers

2.5. Google API data (when integrated)

When connecting Google Search Console / Google Analytics we receive:

• List of domains in Search Console (read-only)
• List of Google Analytics properties (read-only)
• Email, name and Google account photo (for identification)
• OAuth tokens (stored encrypted)

3. How we use data

• Providing cascade link building services
• Processing payments and managing balance
• Campaign and publication status notifications
• Improving platform functionality and user experience
• Fraud and abuse prevention
• Fulfillment of legal obligations

4. Legal basis for processing (GDPR)

We process your data on the following grounds:

• Performance of contract — processing is necessary for providing our services (Art. 6(1)(b) GDPR)
• Legitimate interest — ensuring security and fraud prevention (Art. 6(1)(f) GDPR)
• Consent — for marketing communications and analytics (Art. 6(1)(a) GDPR)
• Legal obligation — storage of financial records (Art. 6(1)(c) GDPR)

5. Cookies and analytics

We use the following types of cookies:

You can disable cookies in your browser settings, but some platform features may become unavailable.

6. Data sharing with third parties

We do NOT sell your personal data. We may share data with:

• Payment providers — for processing transactions
• Google (Analytics, Search Console) — within connected integrations
• Hosting providers — for storage and processing (EU servers)
• Law enforcement — only when required by law

7. Data storage and security

• Servers are located in the European Union
• All connections are protected with SSL/TLS encryption (HSTS)
• Passwords are hashed with bcrypt algorithm
• CSRF protection is applied to all forms
• Content Security Policy (CSP) prevents XSS attacks
• Two-factor authentication (2FA) is available for accounts

8. Data retention periods

• Account data — while account is active + 30 days after deletion
• Financial records — 3 years (legal requirement)
• Security logs — 90 days
• Campaign reports — while account is active

9. Your rights (GDPR)

If you are in the EU/EEA, you have the following rights:

To exercise your rights, contact us via contact form or Telegram.

10. California Residents' Rights (CCPA)

If you reside in California, you have additional rights:

• Right to know what data is collected about you
• Right to delete your data
• Right to opt out of data selling (we do NOT sell data)
• Right to non-discrimination for exercising your rights

11. Children

PromoPilot is not intended for persons under 16 years of age. We do not knowingly collect children's data. If you believe a child has provided us with data, contact us for its deletion.

12. Policy changes

We may update this policy. All changes are published on this page with the update date. Material changes will be accompanied by a notification upon login.