Book a demo

Privacy Policy

Last updated: 2026-10-12

1. Who we are

This Privacy Policy explains how Skalon (operated by Rapture Danışmanlık ve Teknoloji A.Ş., a company incorporated in Türkiye) ("we", "us", "our") collects, uses, and protects information when you visit skalon.ai or request a demo of our service, and when businesses use the Skalon application and connect their advertising and analytics accounts (section 3).

For any privacy-related questions, contact us at hello@skalon.ai.

2. Information we collect

When you submit a demo request through our website, we collect the information you provide in the form:

  • Full name
  • Work email address
  • Company name (and, if applicable, the agency you work with)
  • Monthly ad spend range
  • Phone number (optional)
  • Information about your current setup (optional)

We also automatically collect limited technical information when you visit our website, including IP address, browser type, device type, referring URL, and pages viewed. We use this only to keep the site secure and understand aggregate visitor patterns.

3. Skalon app — data from connected platforms (Google API Services)

When you use the Skalon application (app.skalon.ai) and connect an advertising or analytics account, we access that platform's official API with your authorization (OAuth 2.0). This section applies in particular to Google API Services.

  • Google scopes we request: Google Ads API (auth/adwords) and Google Analytics Data API (auth/analytics.readonly). We do not request access to Gmail, Drive, Contacts or any other Google data.
  • Data we access: performance metrics for the ad account and GA4 property you connect only — spend, impressions, clicks, conversions, conversion value, budgets and status at campaign, ad-group, ad and search-term level; session, conversion and revenue totals from GA4. In agency workspaces, access is limited to the account IDs configured for your brand: Skalon connects only those accounts and reads no data from any other account your Google identity can see. In a workspace you created by signing up yourself, Skalon lists the Google Ads accounts and GA4 properties your Google identity can access and connects all of them; you can disconnect any of them under Integrations.
  • Why: reporting, anomaly detection, wasted-spend and budget-pacing analysis and optimization recommendations inside the dashboard. Changes to Google Ads (budget, status) happen only in "full access" mode, either when you apply a change yourself in the app or when an automation rule that you created and switched on is triggered (automation is off by default and can only pause or lower a budget). Every change is recorded in the app's action history. In read-only mode no change is ever made.
  • Storage: access and refresh tokens are encrypted at rest; metrics are kept in a database dedicated to your brand for the retention period set in your settings.
  • Sharing: data obtained from Google APIs is never sold, never shared for advertising purposes, never used to train AI or machine-learning models, and is not read by humans except for security, legal obligations or support you request. To operate the service it is shared only with the following infrastructure providers, acting solely on our behalf and on our instructions:
    • Supabase — database: Google Ads and Analytics metrics and your encrypted access tokens are stored here
    • Vercel — application hosting and server-side processing: processes the data and delivers it to your browser; does not retain it
    • Resend — transactional email: only the metrics contained in the summary emails you choose to receive (spend, conversions, ROAS)
    • Sentry — error monitoring: technical error records and an anonymous user identifier; email addresses, brand data and access tokens are stripped before the record is sent, and session replay is disabled
    The following are part of the service but receive no data from Google APIs: PostHog (product usage analytics — automatic screen capture is disabled, so no ad data, including campaign names, is sent) and iyzico (payments). Apart from these, Google user data is disclosed to no one; the only exceptions are a legal obligation (court order, official request) and your own explicit request.
  • Agency access: Skalon is a tool for agencies. Your brand's Google data is visible to the agency users you authorize to act on your behalf. You can withdraw that authorization at any time, which ends their access to your brand immediately.
  • Where it is stored: depending on your brand's configuration, your data is held either in our European Union region or on our own servers in Türkiye. The location that applies to your brand is shown in the app under Settings → Account → Data and Privacy, and in the manifest of any export you download.
  • Revocation: you can disconnect an account at any time in the app (Integrations → Disconnect); this does not revoke Skalon's authorization at Google. To revoke it, remove Skalon at myaccount.google.com/permissions; after that, Skalon can no longer retrieve any data from your Google account.

Skalon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The same principles apply to the TikTok Marketing API, Adjust and RTB House: only the accounts you authorize, used only to provide Skalon's features to your business, encrypted credentials, configurable retention and disconnection in the app at any time. The Meta Marketing API is described separately below.

Meta (Facebook) Marketing API

When a business connects Meta ad accounts to Skalon through Facebook Login for Business, it chooses which business portfolio and ad accounts to share. For those ad accounts Skalon reads, with the ads_read permission: ad account details (ID, name, currency, time zone, status); campaign, ad set and ad structure and settings (for example names, status, objective, budgets, schedule, optimisation goal, bid strategy, learning-phase status, the catalogue, pixel or app linked to a campaign, the ad set's targeting settings as returned by Meta, and creative details such as format, title, body text and image or thumbnail links); and performance metrics from the Ads Insights API at campaign, ad set and ad level, by day (for example spend, impressions, reach, frequency, clicks, link clicks, conversions and conversion value, on-site and app events such as add-to-cart or purchase, and video views). Skalon also reads the list of permissions granted to it. With public_profile, Skalon reads the name and ID of the Meta identity that authorised the connection; the name is shown only on the connection card on Skalon's Integrations page.

We use this data only to provide Skalon's features to that business: dashboards, reports, recommendations, the e-mail summaries and Slack report deliveries it chooses to receive, and report links it chooses to share. We do not sell it, use it for advertising or pool it across customers, and we do not send campaign names, creative content or metric values to any AI or language-model service. (If a business connects its own AI assistant to Skalon's MCP connector, the assistant receives only counts, such as the number of active campaigns, and links back to Skalon.) It is stored in that business's own workspace database; where this database is located is described under "Where it is stored" above. Raw daily metrics are deleted automatically after the workspace's retention period (90 days by default, adjustable in settings), and other records, such as campaign, ad set and ad settings, are kept until they are deleted on request as described below.

To stop access, remove Skalon from the business integrations in your Facebook or Meta Business settings. Workspace users with full access can also disconnect an ad account on Skalon's Integrations page; this stops Skalon reading it but does not remove Skalon's authorisation at Meta. To request deletion of Meta data, follow app.skalon.ai/legal/veri-silme (English section included), ask a workspace administrator to use "Tüm verilerimi sil" (Delete all my data) under Settings → Account → "Veri ve Gizlilik" (Data and Privacy) in Skalon, or write to hello@skalon.ai. Deletion requests received through Meta are recorded automatically and completed manually within 30 days.

4. Why we collect this information

We use the information you provide solely to:

  • Respond to your demo request and contact you
  • Qualify whether Skalon is a good fit for your needs
  • Improve our website and service offering

We do not sell your information, share it with advertisers, or use it for marketing communications outside of follow-up related to your specific demo request.

5. Legal basis for processing

We process your information based on:

  • KVKK (Turkish Personal Data Protection Law) — your explicit consent at form submission (Article 5/1), and our legitimate interest in responding to your inquiry (Article 5/2(f))
  • GDPR (for EU/EEA visitors, Article 6) — consent (Article 6(1)(a)) and legitimate interest (Article 6(1)(f))

6. Service providers (subprocessors)

We use the following service providers who may process your data on our behalf:

  • Supabase (demo request storage) — hosted in the EU (Frankfurt, eu-central-1), GDPR compliant
  • Resend (transactional email notifying us of your request) — US-based, GDPR compliant (DPA with standard contractual clauses)
  • Vercel (website hosting) — US-based, with EU data residency where applicable
  • Google Workspace (business email) — US-based, GDPR and KVKK compliant

These providers are bound by data processing agreements consistent with KVKK and GDPR requirements.

7. International data transfers

Demo request data is stored in the European Union (Frankfurt). Some of our service providers (email delivery, hosting, business email) operate in the United States; where data reaches them, we rely on standard contractual clauses and provider compliance certifications, and — for transfers subject to Turkish law — the safeguards required under KVKK Article 9. For data in the Skalon application, see "Where it is stored" in section 3.

8. How long we keep your data

We retain demo request data for up to 24 months after your last interaction with us, after which it is deleted. You may request earlier deletion at any time (see Your Rights below). Data from platforms connected to the Skalon application is kept as described in section 3.

9. Your rights

Under KVKK (Article 11) and GDPR, you have the right to:

  • Learn whether your personal data is being processed
  • Request information about how it is being processed
  • Access your personal data
  • Request correction of incomplete or inaccurate data
  • Request deletion of your data
  • Object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise any of these rights, email us at hello@skalon.ai. We will respond within 30 days.

10. Cookies and third-party measurement

Essential cookies. Our website uses the cookies required for basic functionality. These are always active and do not require consent.

Measurement and advertising cookies (consent required). To understand whether our advertising works, we use:

  • Meta Pixel (Meta Platforms Ireland Ltd.)
  • Google Analytics 4 and the Google Ads conversion tag (Google Ireland Ltd.)

These tools receive the pages you view, the referring source, browser and device information, your IP address, and which step of our sign-up funnel you reached. They do not receive any content you submit in the demo request form, and they are not used to build profiles about you beyond advertising measurement.

These cookies only run with your explicit consent. If you choose "Decline" in the cookie banner, the scripts are never loaded — not a single request is made to Meta or Google. To change your decision, clear this site's data in your browser and the banner will ask again.

These transfers are international transfers of personal data and, under Turkish data protection law (KVKK Art. 9) and the GDPR, are made on the basis of your explicit consent.

11. Changes to this policy

We may update this policy from time to time. We will post any changes on this page and update the "Last updated" date. Material changes will be communicated via email if you have submitted a demo request within the last 12 months.

12. Contact

For any questions about this Privacy Policy or your personal data, contact:

Skalon — operated by Rapture Danışmanlık ve Teknoloji A.Ş.
Archerson Köşkü, Zühtüpaşa Mah., Şefik Bey Sk. No: 3, 34724 Kadıköy / İstanbul, Türkiye
Email: hello@skalon.ai