1. Who we are
GccFY ("we") runs this website and the ads library. For any privacy question, write to contact@gccfy.com.
2. What we collect
- Account data: your email address, your name if you give it, your language, and a protected (hashed) form of your password. We never store the password itself.
- Usage data: how many searches and pages you used each day, the ads you saved, and your settings.
- Technical data: IP address, country, browser type, and the devices signed in to your account.
- Billing data: Paddle, the merchant of record for our orders, handles the checkout and the invoices; we receive from it the subscription and order references, the amounts and the email used for the order. We never see or store card numbers.
- Messages: what you send us through the contact form or by email.
3. Why we use it
- To provide the service and your plan (contract).
- To keep the service secure and prevent abuse (legitimate interest).
- To send you account and billing emails: confirmation, password reset, receipts (contract).
- To send product news only if you agreed (consent). You can withdraw it at any time in your Account page.
4. Who processes data for us
- Cloudflare: hosting, database, protection against attacks, and visit statistics without cookies (Cloudflare Web Analytics: no personal data, no tracking across sites).
- Paddle: checkout, payment, invoices and taxes, as the merchant of record for our orders.
- Brevo: sending our emails.
We do not sell personal data and we show no advertising.
5. The ads in the library
The ads we show are public ads published by advertisers and made available by Meta's Ad Library for transparency. If you are an advertiser and want something corrected or removed, write to us.
6. How long we keep it
- Account data: while your account exists. When you delete your account, your personal data is removed; payment records are kept as the law requires.
- Sign-in and security logs: up to 12 months.
- An address never confirmed is deleted after 14 days.
7. Your rights
You can see and correct your data in your Account page, delete your account there, and ask us for a copy of your data or for its deletion by email. Depending on where you live you may also object to or restrict some processing and complain to your data protection authority.
8. Security
Connections are encrypted, passwords are hashed with a secret key, sessions can be ended from your Account page, and access to the systems is limited.
9. International transfers
Our providers may process data in several countries. We rely on their standard contractual safeguards.
10. Children
The service is for businesses and professionals. It is not directed to children under 16.
11. Changes
We may update this policy. The date at the top shows the latest version.