Privacy Policy
Last updated: 19 October 2026
This Privacy Policy explains how PubMonetX Ai ("PubMonetX", "we", "us") collects, uses and shares information when you visit this website, use our publisher dashboard, or when our advertising technology runs on the websites of our publisher partners.
1. Information We Collect
When you use this website
- What you send us through a form (demo or contact): your name, email address, website, a rough monthly pageview band, your message, the page you sent it from and any campaign tags in the link you followed (such as utm_source).
- The ads.txt checker: the domain you type in. Our server fetches that domain's public ads.txt or app-ads.txt file. The result is kept in memory for up to 10 minutes so repeat checks are quick, and is not stored after that.
- Your IP address is used for a short time to limit how often the forms and the checker can be used (rate limiting). It is not saved with your enquiry.
- Standard server logs kept by our hosting provider (such as the time of a request and the page requested).
This website sets no analytics or preference cookies and runs no advertising trackers. It does load the Inter typeface from Google Fonts and partner logos from Google's favicon service, so your browser requests those files from Google's servers, which see your IP address and the usual request details. Google's own privacy policy applies to those requests.
When you use the publisher dashboard
- Account and login information, and the sites and payment details you give us.
When you connect an ad account
- If you sign in with Google Ads, Meta, Snapchat or TikTok in the dashboard: the names, IDs, currencies and time zones of your ad accounts, and each day's spend, impressions and clicks for your campaigns, ad groups and ads. Section 11 explains exactly how we handle it.
Through our advertising services on partner sites
- Pseudonymous identifiers (cookie IDs, device identifiers) where user consent permits.
- Contextual data: page URL, ad slot, browser, device type, approximate location derived from IP address.
- Auction data: bids, prices, viewability and performance measurements.
2. How We Use Information
- To reply to your enquiry and arrange your audit or demo.
- To provide, operate and improve our monetization services.
- To serve, measure and optimize advertising on partner properties.
- To detect and prevent invalid traffic, fraud and policy violations.
- To communicate with publishers about their accounts, payments and reports.
- To comply with legal obligations.
We do not add enquiry contacts to a newsletter, and we do not sell personal information.
3. Legal Bases (GDPR)
Where the GDPR applies, we rely on: steps you ask us to take before a contract (replying to your enquiry), consent (collected via our partners' consent management platforms under the IAB TCF), legitimate interests (such as fraud prevention, security and service improvement), performance of a contract (for dashboard users) and legal obligations.
4. Sharing
We share information with:
- Demand and advertising partners (for example Google Ad Manager / Ad Exchange and header bidding partners) to run ad auctions, subject to applicable consent.
- Service providers that host our website and email, and process payments, under data processing agreements. Enquiries sent through this website are stored on our web server and emailed to our team.
- Google, which serves the typeface and partner logo files described above.
- Authorities where required by law.
Data from ad accounts you connect, including Google user data, is shared only as section 11 describes.
5. International Transfers
Data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. How Long We Keep It
- Enquiries: until the enquiry is handled and for as long as we need them to follow up. If no business relationship follows, we delete them when they are no longer needed, and always when you ask.
- Auction and reporting data: as long as needed for billing, discrepancy resolution and fraud prevention, typically no longer than 25 months, after which it is deleted or aggregated.
- Account data: for the life of the account plus statutory retention periods.
- Data from ad accounts you connect: see section 11.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to opt out of "sharing" for cross-context behavioral advertising. To use any of these rights, email [email protected] with "Privacy" in the subject. You may also lodge a complaint with your supervisory authority.
8. Cookies
See our Cookie Policy for details on the cookies and similar technologies we and our partners use.
9. Children
Our services are not directed to children and we do not knowingly collect personal data from children. Our technology supports child-directed treatment flags (e.g. COPPA tagging) where publishers require it.
10. Security
We use technical and organizational measures including encryption in transit, access controls, and audit logging to protect data. No system is perfectly secure; please report security concerns to [email protected].
11. Ad Accounts You Connect, Including Google User Data
Publishers can connect their Google Ads, Meta, Snapchat or TikTok ad accounts to the dashboard by signing in on that platform's own page. We never see your password.
- What we read: the names, IDs, currencies and time zones of the ad accounts you choose, and each day's spend, impressions and clicks for your campaigns, ad groups and ads. Nothing else.
- What we do with it: we show your ad spend next to the revenue your sites earn, in your own dashboard, so you can see your cost, profit and return. We refresh these reports about once an hour. That is the only use.
- We only read: we never create, change, pause or pay for ads. Google Ads' sign-in screen asks for full access because Google offers no read-only option for its Ads API; we still only read the reports listed above.
- Storage and security: the sign-in token each platform gives us is stored encrypted (AES-256-GCM) and used only by our server to fetch your reports. Our staff do not look at your ad data except when you ask us for help, to keep the service secure, or when the law requires it.
- Sharing: we share this data only with the parties listed under “Who we share Google user data with” below. We do not sell it, use it to target ads, send it to AI services or use it to train AI models.
- Removing access and deleting your data: disconnect an account in the dashboard at any time (Media buying → the integration → Remove, and tick “also delete the spend already imported”). We then delete its stored reports and its sign-in token, revoke the token with the platform where possible, and stop reading. You can also remove our access directly: for Google at myaccount.google.com/permissions, for Meta at Facebook → Settings → Business integrations, for Snapchat at accounts.snapchat.com (connected apps). Or ask us to delete everything at [email protected]. Campaign ID numbers already added to Google Ad Manager as report labels (see below) are not removed automatically; tell us and we will remove them.
Who we share Google user data with
“Google user data” here means what we receive from the Google Ads API when you connect a Google Ads account: the account details and report figures listed above, and the sign-in token Google gives us. We share, transfer or disclose it only with the parties below, and only for the reason given:
- You and the people on your PubMonetX account. The reports appear only in the dashboard of the publisher account that connected the Google Ads account, to that account's logins. PubMonetX staff see them only in the cases listed under “Storage and security” above.
- Google Ad Manager (Google LLC). To label your revenue reports, our server sends the ID numbers of your Google Ads campaigns, ad groups and ads to the Google Ad Manager network that serves the ads on your sites. Ad Manager can then report how much each campaign earned, and your dashboard shows that next to what the campaign cost. Only these ID numbers are sent: no account names, spend, clicks, e-mail addresses or sign-in tokens.
- Our service providers. Hostinger International Ltd. runs the servers and the database where the dashboard stores this data. Cloudflare, Inc. carries the traffic between your browser, our servers and Google, encrypted with HTTPS. If e-mail summaries are switched on for your account, they go to you through our e-mail service provider. These providers handle the data only on our instructions, under their data processing terms, and may not use it for any purpose of their own.
- Authorities, when the law requires it. If a court order or other legal demand requires us to disclose this data, we share only what is demanded and, where the law allows, tell you first.
- A new owner of our business. If PubMonetX is merged with or sold to another company, this data moves to the new owner only after we have asked you and you have explicitly agreed.
We share it with no one else. We do not sell or rent it, and we do not give it to advertisers, data brokers, analytics companies, AI services or any other third party for their own use.
PubMonetX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
12. Changes and Contact
We will post updates to this policy on this page. Questions: [email protected].