Privacy Policy

How VL Media collects, uses, and protects your data

Last updated: 9 August 2026

This Privacy Policy explains how VL Media (“VL Media”, “we”, “us”, or “our”) collects, uses, stores, and protects information when you use the VL Media Dashboard (the “Service”) and our website at vlmedia.rs. VL Media is a digital marketing agency that manages advertising and search campaigns on behalf of its clients. By using the Service, you agree to the practices described in this policy.

1. Who We Are

VL Media is a small digital marketing agency based in Serbia. We operate the VL Media Dashboard, an internal platform through which our team manages client advertising campaigns and through which clients can view the performance of their own accounts. If you have any questions about this policy, you can reach us at info@vlmedia.rs.

2. Information We Collect

We collect only the information we need to provide our marketing services and to operate the VL Media Dashboard:

Account information

Name — used to identify you within the dashboard.
Email address — used to create your account, authenticate you, and communicate with you.

Campaign and advertising account data

When you connect an advertising or analytics account, we access campaign and account data through official APIs, using access that you explicitly authorize via OAuth. This may include:

Data from the Google Ads API — campaigns, ad groups, keywords, budgets, and performance metrics.
Data from the Meta Ads API — campaigns, ad sets, ads, and performance metrics for your Meta advertising accounts.
Data from the Google Search Console API — search performance data such as clicks, impressions, and queries for your verified properties.

Authorization tokens

When you grant access through OAuth, we store the resulting access and refresh tokens so the Service can retrieve your campaign data on your behalf. These tokens are stored in encrypted form and are never shared with anyone outside the operation of the Service.

3. How We Use Your Information

We use the information we collect solely to operate and improve our services, specifically to:

Create and manage your account and authenticate your access to the dashboard.
Retrieve, display, and analyze the performance of your advertising and search campaigns.
Create, manage, and optimize campaigns on your behalf (for accounts where you have authorized this).
Generate reports and performance dashboards for you and for our internal campaign management.
Communicate with you about your account, campaigns, and support requests.

We do not use your data for advertising to you, we do not sell your data, and we do not use it for any purpose unrelated to providing our services.

4. Google API Services — Limited Use Disclosure

VL Media’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access data from Google Ads and Google Search Console only to provide and improve the features you request, we do not transfer this data except as necessary to provide those features or as required by law, we do not use it for advertising, and we do not allow humans to read it unless we have your consent, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized.

5. How We Store and Protect Your Information

Your data is stored in a Supabase PostgreSQL database hosted in the European Union, in the Supabase West EU (Paris) region (eu-west-3). We apply the following safeguards:

Encryption in transit — all data is transferred over encrypted HTTPS/TLS connections.
Encryption at rest — the database is encrypted, and OAuth access and refresh tokens are stored as encrypted values.
Access controls — access to stored data is restricted to authorized VL Media personnel who need it to operate the Service.

While no method of storage or transmission is completely secure, we take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse.

6. How We Share Information

We do not sell, rent, or trade your personal data. We share information only where it is necessary to operate the Service, namely with:

The platform providers themselves — Google (Google Ads, Google Search Console) and Meta — when we send requests to their APIs to manage or read your campaign data, as directed by you. These providers may process data outside the European Union in accordance with their own policies and transfer safeguards.
Our infrastructure provider — Supabase, which hosts the database that stores your data on our behalf in the EU (Paris) region.
Legal authorities — where we are required to disclose information to comply with applicable law or a valid legal request.

These providers process data only as needed to deliver the Service and are not permitted to use it for their own unrelated purposes.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you close your account or request deletion, we delete your personal data and revoke and delete the associated OAuth tokens, except where we are required to retain certain information to comply with legal obligations.

8. Your Rights and Choices

You have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your data and your account.
Revoke access to your connected Google or Meta accounts at any time.

To request deletion of your data, email us at info@vlmedia.rs from the address associated with your account. We will delete your personal data and connected-account tokens promptly, and confirm once the deletion is complete.

9. Revoking Access to Connected Accounts

You can disconnect your accounts from within the VL Media Dashboard, or directly through the providers at any time:

Google: myaccount.google.com/permissions
Meta: through your Business account’s Business Integrations / connected apps settings.

Revoking access immediately stops the Service from retrieving new data from those accounts.

10. Children’s Privacy

The Service is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be communicated to account holders where appropriate.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@vlmedia.rs.