Privacy Policy

Last updated: 3 August 2026 · Version 1.0

In short. We collect only what is needed to run the service: your email, your TikTok account links, your price and your payout details. All data is stored on servers located in the European Union (the Netherlands). We never sell your data and we do not use advertising or tracking cookies.

1. Who is responsible for your data

The data controller is Dmytro Korniienko, acting as a natural person (not a company). Contact for any privacy matter, including requests to exercise your rights:

Email: info@marketingbotapp.com

This policy explains how personal data is processed when you use the Promobot author portal at promoapp.marketing and the connected Telegram and Discord bots (together, the “Service”). It is written to meet Regulation (EU) 2016/679 (the “GDPR”).

2. What data we collect

Data	Why we need it	Legal basis
Email address	To create your account and sign you in with a one-time code. We send no marketing email unless you ask for it.	Performance of a contract (Art. 6(1)(b))
Display name	Shown to managers and in the community chat.	Performance of a contract
TikTok profile links and account labels	To verify that you own the accounts you post from and to match you to campaigns.	Performance of a contract
Your price per video	To calculate what you are paid.	Performance of a contract
Payout details (PayPal address, USDT wallet or card number)	To pay you. Visible only to you and to the managers who process your payment.	Performance of a contract
Screenshots you upload for verification	To confirm that the TikTok account is yours.	Performance of a contract
Links to the videos you publish	To confirm the work was delivered and to release payment.	Performance of a contract
Messages you send in chat or support	To answer you and to keep a record of the conversation.	Performance of a contract; legitimate interest in support quality (Art. 6(1)(f))
Telegram or Discord identifier, if you use those bots	To link your account across platforms and to send you notifications.	Performance of a contract
Technical logs (IP address, browser type, time of request)	Security, abuse prevention and troubleshooting. Kept for a short period.	Legitimate interest (Art. 6(1)(f))

We do not knowingly collect special categories of data (health, political opinions, biometrics and similar). Please do not send such data to us.

3. Where your data is stored

All personal data is stored on servers located in the European Union, in the Netherlands. Backups are kept on the same infrastructure. Data is not transferred outside the European Economic Area for storage.

Some third parties we rely on to deliver the Service may process limited data:

Email delivery — to send your one-time sign-in codes and notifications.
Telegram and Discord — only if you choose to use those platforms; their own privacy policies then apply to what happens inside their apps.
An AI assistant provider — support conversations may be processed by an AI model to draft an answer. Where such a provider is located outside the EEA, the transfer relies on the European Commission’s Standard Contractual Clauses.

4. How long we keep it

Account data — while your account exists, and up to 12 months after you ask us to delete it, only where we must keep records of completed payments.
Payment records — for as long as required by applicable accounting and tax law.
Support conversations — up to 24 months.
Technical logs — up to 90 days.
One-time sign-in codes — 15 minutes, then they expire and become unusable.

5. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased (“right to be forgotten”);
restrict or object to processing;
receive your data in a portable, machine-readable format;
withdraw consent at any time, where processing is based on consent;
lodge a complaint with a supervisory authority in your country of residence.

Write to info@marketingbotapp.com and we will respond within 30 days.

6. Security

The Service is served exclusively over HTTPS with a valid TLS certificate. Sign-in uses one-time codes sent to your email — there are no passwords to steal. Session cookies are marked Secure and HttpOnly, so they are never sent over an unencrypted connection and cannot be read by scripts. The site sets a strict Content Security Policy and other protective HTTP headers. Access to the database is limited to the operator.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

7. Cookies

We use only strictly necessary cookies — see the Cookie Policy. There are no advertising or analytics trackers on this site.

8. Children

The Service is not intended for anyone under 16. If you are under 16, please do not create an account.

9. Changes

If this policy changes materially, we will show a notice in the portal before the change takes effect. The version and date at the top always identify the current text.

10. Governing law and disputes

This policy is governed by Spanish law, without prejudice to the mandatory consumer protection rules of your country of residence. Any dispute shall be submitted to the competent courts of the city of Valencia, Spain.