Legal

Privacy Policy

Last updated: 2026-04-24

Summary

We collect the minimum data required to respond to your application, operate our managed service, and measure the effectiveness of our advertising. We do not sell, rent, or trade your personal data. You can request access, correction, or deletion at any time by emailing privacy@blackeasyads.com; we reply within 30 days.

Who we are

"EasyAds" (also known as BlackEasyAds, and referred to in this policy as "we", "us", or "our") operates the website blackeasyads.com and the related intake and service delivery on Telegram. We are the data controller for personal data collected through our website and channels.

What personal data we collect

We collect the following categories of personal data:

  • Application data: the answers you submit in the eligibility form on /apply, including preferred service path, monthly ad spend band, current pain, account history, current ad operator, current infrastructure spend, urgency, country, Telegram handle, email address, and phone number (with country code).
  • Communication data: messages you send to us by Telegram, email, WhatsApp, or any other channel we operate, and our responses.
  • Attribution and technical data: UTM parameters, HTTP referer, landing page URL, country derived from IP address, user agent, and timestamp of submission.
  • Analytics and advertising data: anonymized pageview and interaction events fired by the Meta Pixel (e.g. PageView, FormStart, FormStepView, FormComplete, Lead). These events may include a hashed identifier that Meta uses to measure campaign performance and build audiences.

We do not collect sensitive personal data (health, political, religious, biometric, etc.) and we do not knowingly collect data from anyone under 18.

Why we collect it and the legal basis

  • To respond to your application and qualify fit. Legal basis: performance of a contract (or steps to enter into one) at your request.
  • To operate the service after you sign — run campaigns, manage ad accounts, report on performance. Legal basis: performance of a contract.
  • To improve our website, copy, and targeting using aggregated, anonymized patterns. Legal basis: our legitimate interest in running a functional business.
  • To comply with tax, accounting, and anti-fraud obligations. Legal basis: compliance with a legal obligation.

We do not sell personal data. We do not share it with data brokers. We do not use your data to train third-party AI models.

Who we share it with

We share personal data only with the service providers (data processors) required to operate the service:

  • Vercel Inc. — website hosting and serverless execution of the application endpoint.
  • Telegram FZ-LLC — delivery of intake notifications to our internal Sales Rep chat and, where applicable, messages to you.
  • Meta Platforms, Inc. — analytics and advertising events via the Meta Pixel and, where enabled, the Conversions API.
  • Google LLC — Google Fonts for typography; Google Analytics if and when enabled.
  • Payment processor and accounting provider — only if you become a paying customer and only to the extent required to invoice and settle payments.

Each provider receives only the data they need to perform their function. Where required, we enter into Data Processing Agreements that mirror the protections in this policy.

International data transfers

Our processors operate globally. When your personal data is transferred outside your country of residence, we rely on the safeguards provided by each processor (for example, Standard Contractual Clauses with EU-based data subjects or equivalent frameworks). You can request the list of current processors and their locations by contacting privacy@blackeasyads.com.

Cookies and tracking technologies

We use a small number of cookies and similar technologies:

  • Meta Pixel (_fbp, _fbc) — measures ad performance and builds audiences. You can block these via your browser settings, a privacy-focused browser, or an ad blocker.
  • Google Analytics (if enabled) — aggregate pageview and session analytics.

Blocking these has no impact on your ability to submit the application form or receive a reply.

Your rights

Depending on your jurisdiction, you have some or all of the following rights regarding your personal data:

  • Access — receive a copy of the data we hold on you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — restrict how we process your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on our legitimate interest.
  • Withdraw consent — where processing is based on consent, you can withdraw at any time.
  • Lodge a complaint with a supervisory authority.

To exercise any of these, email privacy@blackeasyads.com. We reply within 30 days. We may ask for reasonable verification of your identity before acting on a request.

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money. Some of the analytics and advertising cookies we use may qualify as "sharing" under the CPRA. To opt out, enable the "Global Privacy Control" signal in your browser or email privacy@blackeasyads.com.

Data retention

Applications that do not become customers: retained for 12 months then deleted, unless you explicitly ask us to keep the record (for example, because you plan to re-engage). Active customer data: retained for the duration of the contract plus 24 months after termination, for tax, audit, and dispute resolution purposes. Analytics events are retained per the provider's defaults (typically 2 years for Meta).

Security

Data in transit is encrypted via TLS 1.2+. Access to your data within our systems is restricted to team members who need it to deliver the service and is protected by multi-factor authentication. Secrets (API keys, tokens) are stored in environment variables at our hosting provider, never in source code. If a breach occurs that affects your personal data, we will notify you and the relevant authorities within 72 hours of becoming aware.

Children

Our service is strictly business-to-business and directed at adults aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact privacy@blackeasyads.com and we will delete it.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the change. Material changes that affect how we handle your data will be notified via Telegram and email to active customers before taking effect.

Contact

Privacy questions: privacy@blackeasyads.com

General contact: hello@blackeasyads.com

Telegram: @Blackeasyads