Privacy Policy

Who we are

Verion Ads operates Verion Ads (verionads.com), an advertising network that connects advertisers and publishers. For the personal data described here, Verion Ads is the data controller.

This policy applies to our website, member area, mobile app, publisher tags and APIs. It is written to meet the EU General Data Protection Regulation (GDPR) and the Saudi Personal Data Protection Law (PDPL).

Data we collect

We only collect what we need to provide and secure the service:

• Account data — name, email, password (stored as a one-way hash), language, phone or WhatsApp number when you add one.
• Billing data — orders, invoices, VAT details and payment status. Card details are entered on the payment provider's page and never stored by us.
• Advertising and publishing data — websites, creatives, campaigns, zones, credits and delivery statistics.
• Technical and usage data — IP address, browser, device, pages visited, ad impressions and clicks, used for delivery, reporting and fraud prevention.
• Verification data — identity documents you upload for KYC, kept on private storage and only visible to authorised staff.
• Communications — support tickets, disputes, and messages you send to us or through the platform.

How we use data and our legal bases

• To provide the service (contract) — create your account, run campaigns, credit earnings, process orders and issue invoices.
• To keep the network safe (legitimate interest) — detect invalid traffic, bots, multi-account abuse and payment fraud.
• To improve the platform (consent / legitimate interest) — aggregated analytics about how features are used.
• To communicate (contract / consent) — service emails, security alerts and, only if you opt in, marketing messages.
• To meet legal duties (legal obligation) — tax and accounting records, lawful requests from authorities.

Cookies and similar technologies

Strictly necessary cookies keep you signed in, protect forms against forgery and remember your language. Optional cookies are only set after you agree in the cookie banner:

You can change or withdraw your choice at any time from the "Manage cookie preferences" link. Withdrawing consent does not affect processing that happened before.

Who we share data with

We share data only with service providers that process it on our behalf under contract, and only as far as needed:

• Payment providers (such as Moyasar, PayPal and Tuwaiq Pay) to take payments.
• Messaging and email providers (such as Twilio and our SMTP provider) to send notifications you asked for.
• Hosting, backup and security providers that run our infrastructure.
• Analytics and advertising measurement tools — only when you have accepted those cookie categories.
• Authorities or courts when the law requires it, or to protect the rights and safety of our users.

Advertisers receive aggregated campaign statistics. They do not receive the personal data of visitors or publishers.

International transfers

Some providers may process data outside your country. When that happens we rely on adequacy decisions, standard contractual clauses or other safeguards recognised by GDPR and PDPL.

How long we keep data

• Account data — while your account is active, then deleted or anonymised after closure unless the law requires longer.
• Invoices and payment records — for the period required by tax law.
• Delivery and fraud logs — for a limited period, then aggregated or deleted.
• Cookie consent records — 365 days, to prove the choice you made.

How we protect data

• TLS encryption on every page and API call.
• Passwords stored with one-way hashing; optional two-factor authentication for staff.
• KYC documents on private storage that is never served from a public URL.
• Role-based staff access with a full admin activity log.
• Encrypted secrets, regular backups and tested recovery procedures.

Your rights

Depending on where you live, you can ask us to:

Send your request to support@verionads.com. We reply within 30 days and may ask you to confirm your identity first.

You also have the right to complain to a data protection authority — in Saudi Arabia, the Saudi Data & AI Authority (SDAIA); in the EU, your local supervisory authority.

Children

The platform is not intended for anyone under 18. We do not knowingly collect personal data from children, and we delete it if we learn that we have.

Changes to this policy

We will post any update on this page and change the "last updated" date. Significant changes are announced in the member area or by email before they take effect.