Privacy Policy

This is the same substantive policy published at https://dashboard.stemlabs.site/privacy for our authenticated dashboard. Here it is offered on stemlabs.site for transparency and links from our company site. Browsing this marketing domain may involve minimal technical data (see your browser settings); the sections below govern how we access and use advertising and monetisation data through our internal tools.

1. Introduction

We operate the StemLabs Dashboard, an internal analytics platform for our publishing operations and associated developer applications registered with third-party advertising networks including Meta (Facebook), Google, TikTok, and others.

This Privacy Policy explains how we collect, use, store, and protect information accessed through those platform APIs when operating our internal tools and services. By using our applications or granting API access to our services, you agree to the practices described in this policy.

2. Contact information

3. Data we access via third-party APIs

Our applications access the following categories of data through authorized API connections:

4. How we use accessed data

Data accessed through third-party APIs is used exclusively for:

• Internal analytics: Generating performance dashboards for our own advertising campaigns and monetized applications.
• Campaign optimization: Identifying high-performing campaigns, ad sets, and creatives to inform budget allocation decisions.
• ROAS & profitability reporting: Blending ad spend data with ad revenue data to compute profit and return on ad spend.
• Automated campaign management: Pausing underperforming campaigns or adjusting budgets via API based on performance thresholds.

We do not sell, license, share, or transfer any data obtained through these APIs to any third party. Data is used solely for internal business operations of StemLabs Dashboard and related StemLabs-managed integrations.

5. Data storage & security

• All API data is stored in a private PostgreSQL database hosted on our internal infrastructure.
• The database is not publicly accessible; access is restricted to authenticated internal systems only.
• API credentials and access tokens are stored with encryption at rest and are never exposed in logs or public repositories.
• We use HTTPS/TLS for all data transmission between our systems and third-party APIs.
• Access to the analytics platform is restricted to authorised StemLabs personnel.

6. Data retention

Aggregate ad metrics are retained for up to 2 years to support historical trend analysis. API credentials and access tokens are retained only as long as the integration is active and are securely deleted upon deactivation.

Data accessed from Meta APIs is not retained beyond 90 days in raw form; only aggregated summaries are kept long-term, in accordance with Meta Platform Terms.

7. Third-party platform compliance

Our use of third-party APIs complies with the respective platform terms:

• Meta Platform Terms & Developer Policies
• Google APIs Terms of Service
• TikTok for Business API Terms
• AppsFlyer API Terms

Data obtained from Meta APIs is used solely in compliance with Meta's Platform Policy, including restrictions on data use, transfer, and storage.

8. Cookies & tracking

The StemLabs Dashboard uses session cookies solely for authentication purposes. We do not use third-party tracking cookies, analytics SDKs, or advertising pixels on our internal dashboard. No user behavioral data is collected from visitors to that authenticated platform through cross-site trackers described here.

9. Your rights

If you are a user who has granted API access to our applications, you may revoke that access at any time through the respective platform's settings:

• Meta: Business Settings → System Users → Remove token, or revoke app access via Facebook Settings → Apps and Websites.
• Google: Google Account → Security → Third-party apps with account access.
• TikTok: TikTok Ads Manager → Account Settings → API Management.

To request deletion of any data we hold, contact us at [email protected]. We will respond within 30 days.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact us

For privacy-related questions or requests:

Google Ads API disclosure for our own accounts: Google Ads API integration.