MyAdsby PeacomPrivacy Policy
Effective date: 31 October 2026 · Last updated: 1 November 2026 (customer lists keep contact details)
MyAds (the "Platform", available at myads.kampe.id) is a self-service advertising platform owned and operated by Peacom ("Peacom", "we", "us"). It lets businesses plan, create and manage advertising campaigns on Meta (Facebook, Instagram, Messenger, WhatsApp), Google Ads and TikTok from one place.
This policy explains what personal data we process when you use MyAds, why, who we share it with and what choices you have. It applies to people who use MyAds for a business ("Users") and to people whose data a business brings into MyAds, for example in a customer list.
Peacom provides the platform; each business runs its own campaigns. The businesses using MyAds decide what to advertise, to whom and with which data. For the customer data a business uploads and the campaigns it runs, that business is responsible as the data controller, and Peacom processes that data on its behalf to provide the Platform. See also our Terms of Service.
1. Data we collect
1.1 Your account
- Name, email address and password (stored only as a secure hash), or the ID of the Google, Facebook or TikTok account you sign in with, with the name and email that service shares.
- Your role in each business (manager or marketing executive), invitations, and when you last signed in.
- If you turn on two-step sign-in: an encrypted authenticator secret and hashed backup codes.
1.2 Your business
- Business name, market, legal name, tax code, address, website and contact details, and the registration documents you upload for verification.
- Brand kits and product information (names, descriptions, prices, logos, photos), uploaded images and videos, and the business memory used by the AI assistant.
- Wallet balance and transaction records, when used.
1.3 Connected advertising accounts
When you connect Meta, Google Ads or TikTok, those services give MyAds an access token for your advertising accounts. We store these tokens encrypted and use them only to do what you ask in MyAds: list your ad accounts, create and change campaigns, upload audiences, read results, posts and lead forms. Through these connections we receive data such as ad account names and settings, campaigns, ads and their results, Page and TikTok account posts you choose to advertise, Pixels and conversion settings, audiences, and leads submitted through your own lead forms.
1.4 Customer lists uploaded by a business
A business can upload a list of its own customers (names, email addresses, phone numbers or mobile advertising IDs) to reach them with ads and messages. MyAds keeps these contact details in the business's list so the business's team can see and use them (for example to send WhatsApp messages through Peacom's messaging platform), and sends the advertising platforms only one-way SHA-256 hashes of emails and phone numbers. Mobile advertising IDs are stored encrypted and, where the platform requires it, sent as provided. The uploaded file itself is not kept. The business confirms it has the people's consent before uploading, and can delete a list at any time.
1.5 Profiling data
Peacom maintains its own audience data set ("Profiling data"), grouped into interest and behaviour segments. Businesses that Peacom has allowed can combine segments into audiences and use them in campaigns on Meta, Google and TikTok. Businesses only ever see rounded counts, never individual people. When an audience is used in a campaign, the matching identifiers are sent to the advertising platform as hashed values (or mobile advertising IDs where required), so the platform can match them with its own users. Peacom is responsible for having a lawful basis and the necessary consents for this data.
1.6 Use of the Platform
- A session cookie that keeps you signed in, and your browser's local storage for preferences (language, open panels, form drafts).
- Technical logs: IP address, browser, pages and actions, errors and timestamps, used for security, sign-in limits and troubleshooting.
- Messages you send to the AI assistant and the answers it gives.
2. How we use data
- To provide MyAds: create and manage campaigns and audiences on the advertising platforms you connect, show results, and run the features you choose.
- To verify businesses, keep accounts secure, prevent abuse and enforce our Terms.
- To run the AI features you use (campaign drafting, ad texts, analysis, images and videos).
- To send service emails: confirmations, invitations, password resets, approvals and security notices.
- To meet legal obligations and resolve disputes.
We do not sell personal data of Users. We do not use the data of one business to target ads for another business, except as described for Profiling data in section 1.5.
3. Data from Google, Meta and TikTok
Data we receive through the Google, Meta and TikTok APIs is used only to provide the features you use in MyAds, and is handled according to each platform's terms and policies.
3.1 Google user data
MyAds accesses Google user data only when you choose to, in two places:
| When | What MyAds receives (Google permissions) | What MyAds does with it |
|---|---|---|
| Sign in with Google | Your Google account ID, name, email address and whether Google verified it (openid, email, profile). | Creates or signs you in to your MyAds account and shows your name. The email is your account email. |
| Connect Google Ads (Business Accounts) | Access to the Google Ads accounts you can manage (https://www.googleapis.com/auth/adwords), and, when you send customer lists, to Google's Data Manager for those accounts. | Lists your Google Ads accounts; creates, changes, pauses and reports on the campaigns, ads, keywords, budgets and audiences you set up in MyAds; uploads the customer lists you choose; shows results in MyAds. |
- Storage and protection: the access and refresh tokens Google gives MyAds are stored encrypted (AES-256) on Peacom's servers and are never shown to anyone. Campaign settings and results read from Google Ads are stored to show your reports.
- Sharing: we do not sell Google user data or share it with third parties, except as needed to provide MyAds to you (for example our hosting and network provider), to comply with law, or with your consent. Other members of your business see your business's campaigns and results according to their role, never your Google sign-in data.
- No other use: we do not use Google user data for advertising to you, to build profiles, for credit or lending decisions, or to train AI models. People at Peacom do not read it, except with your permission, for security, or to comply with law.
- Retention and deletion: MyAds keeps no token from Sign in with Google, only your Google account ID, which is removed when you unlink Google in My profile. The Google Ads tokens are deleted when you disconnect Google Ads in MyAds. All Google user data is deleted when your account is deleted (section 8). You can also remove MyAds' access at any time at myaccount.google.com/permissions.
MyAds' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3.2 Meta and TikTok data
When you connect Meta or TikTok, or sign in with Facebook or TikTok, MyAds receives what you allow: your name and account ID (and, from Facebook, your email if you share it), and access to the ad accounts, Pages, TikTok accounts, pixels, audiences, posts and lead forms you manage. MyAds uses this only to run and report on the campaigns you set up, stores the tokens encrypted, and deletes them when you disconnect or unlink.
4. Who we share data with
| Recipient | Why |
|---|---|
| Meta, Google and TikTok | To create and run your campaigns and audiences on the accounts you connect, and to sign you in when you choose to sign in with them. |
| AI service providers (for example BytePlus for text, CocoStudio for images and videos) | To generate texts, analyses, images and videos you ask for. We send only what the task needs. |
| Cloudflare | Secure delivery of the website (network transport and protection), and the "verify you are human" check (Turnstile) on sign-up, password reset and repeated sign-in attempts. Account data is not cached. |
| Email delivery provider | To send service emails. |
| Members of your business | People you invite see the business's campaigns, audiences and settings according to their role. |
| Authorities | When required by law or to protect rights and safety. |
Service providers act on our instructions and may only use the data to provide their services.
5. Where data is stored and how long
MyAds runs on servers operated by Peacom. Some providers above may process data in other countries; we use them with appropriate safeguards. We keep data while your account or business is active and as needed to provide the service. Customer lists (contact details and hashes) are kept while the list exists and are removed when the business deletes the list. Uploaded registration documents are kept for the verification and legal record-keeping period. When an account is closed, we delete or anonymise its data within 90 days, unless we must keep it longer by law.
6. Security
We protect data with encrypted connections (HTTPS), encryption of advertising tokens and authenticator secrets, password hashing, customer lists visible only to the business that uploaded them and sent to advertising platforms only as hashes, role-based access within businesses, sign-in rate limits and optional two-step sign-in. No system is perfectly secure; please keep your password and devices safe and tell us about any suspected misuse.
7. Your rights and choices
Depending on where you live (including under Vietnam's personal data protection law and Indonesia's Personal Data Protection Law), you may have the right to access, correct, delete or receive a copy of your personal data, to withdraw consent, and to object to or restrict certain processing. You can:
- Edit your name, password and sign-in methods in My profile, and disconnect ad platforms in Business Accounts at any time.
- Delete customer lists and audiences in Audiences.
- Contact us to exercise any other right (section 9). We may need to verify your identity.
If your data was uploaded by a business (for example in a customer list), please contact that business first; we will help them respond.
8. Data deletion
To delete your MyAds account and its data, or data we received from Facebook, Google or TikTok when you signed in or connected an account, contact us (section 9) from the email address of your account and ask for deletion. We confirm and complete the request within 30 days. You can also remove MyAds' access at any time in your Facebook, Google or TikTok account settings.
9. Contact
Peacom, owner of MyAds. Contact: [email protected].
10. Children
MyAds is for businesses and is not intended for anyone under 18.
11. Changes
We may update this policy. We will post the new version here with a new date and, for important changes, tell Users in MyAds or by email.