Privacy Policy

Effective date: 16 July 2026

This policy explains what data Deioio ("we", "us") processes when you use our websites and services, including this site, our campaign measurement and invite pages, and the Deioio dashboard for platform customers.

1. Data we collect

On measurement and invite pages (pages that welcome visitors arriving from a campaign and offer an invite to a community), we automatically collect:

• Technical visit data: IP address, browser user agent, referring page URL and the address of the page you visited.
• Advertising click identifiers appended by the ad platform that delivered your click (for example gclid, fbclid or ttclid).
• Coarse location: the country derived from your IP address. We do not collect precise location.
• A first-party attribution cookie ("mip_s") containing a random identifier, kept for up to 7 days, used solely to recognise a returning visit within the same campaign flow.

In the Deioio dashboard, platform customers provide account and configuration data (login identity, community identifiers, ad platform credentials) needed to operate the service.

We do not collect names, email addresses, phone numbers or message content from visitors of measurement pages, and we do not read the content of any community.

2. How we use data

• Attribution: matching a community join back to the advertising click that caused it.
• Conversion reporting: reporting a confirmed join event, together with the click identifier for that click, to the ad platform that delivered it (Meta, TikTok or Google) through their official server-side conversion interfaces.
• Fraud prevention and service protection: rate limiting and detecting non-human traffic.
• Service operation: aggregate statistics, debugging and reliability.

3. Sharing

We share conversion events (join confirmations with their click identifier) only with the ad platform from which the click originated. We use infrastructure providers (hosting, content delivery) that process data on our behalf. We do not sell personal data, and we do not share it with any other third party except where required by law.

4. Retention

Raw visit and click records are retained for up to 90 days and then deleted. Aggregated, non-identifying statistics may be kept longer. The attribution cookie expires after at most 7 days.

5. Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Ad platform credentials supplied by platform customers are stored encrypted.

6. Your rights

Subject to the law that applies to you, you may request access to, correction of, or deletion of your personal data, or object to its processing. Contact us at [email protected] and we will respond within a reasonable period. You can also clear or block cookies in your browser at any time; the measurement pages remain fully usable without cookies.

7. Children

Our services are not directed at children and we do not knowingly collect data from children.

8. Changes

We will post any changes to this policy on this page with an updated effective date.

9. Contact

Privacy questions: [email protected]