AdsQuiz Privacy Policy

Processing of personal data of service users and quiz respondents

Effective 6 November 2026

Aiquiz OÜ · registry code 17473872 · Tallinn, Estonia

This Policy explains how Aiquiz OÜ processes personal data when people use adsquiz.io, app.adsquiz.io, quizzes and forms published through AdsQuiz, support, payments and integrations. It also explains the different roles of Aiquiz OÜ and an AdsQuiz customer in relation to quiz respondent data.

1 Controller and contact details

Where Aiquiz OÜ determines the purposes and means of processing data relating to website visitors and service users, the controller is:

Detail	Information
Company	Aiquiz OÜ
Registry code	17473872
Registered address	Kaupmehe tn 7-120, Kesklinna linnaosa, Tallinn, Harju maakond, 10114, Estonia
Service	AdsQuiz · https://adsquiz.io
Email	info@adsquiz.io

2 Scope and roles

2.1 AdsQuiz user data

Aiquiz OÜ is the controller of data relating to website visitors, account owners and team members, payers, partners, support contacts and recipients of our communications.

2.2 Quiz respondent data

The AdsQuiz customer determines the content and fields of a quiz, the purpose and legal basis of collection, retention and further use of responses. The customer is therefore the controller of respondent data and Aiquiz OÜ processes that data on the customer's behalf as a processor. Additional processor terms are included in the AdsQuiz Terms of Use.

2.3 Requests from respondents

If you completed a quiz created by an AdsQuiz customer, requests concerning the purpose of collection, correction, deletion or use of your answers should normally be sent first to the quiz owner. We assist customers with substantiated requests within our technical capabilities and legal obligations.

3 Data we process

3.1 Account data

• name and surname, if provided
• email, protected authentication data, profile settings, language, role and team permissions
• company name, country, time zone and identifiers from an available sign in provider

3.2 Payment and tax data

• plan, amount, currency, date, status and payment identifier, and subscription history
• payer name or business name, billing address, country, invoice details and tax number, if provided
• information needed to determine tax treatment and issue invoices

Full payment card details are processed by Stripe. Aiquiz OÜ does not store a full card number or security code.

3.3 Customer content and respondent data

• quiz texts, images, files, logic, settings and results
• responses, contact details, tags, scores, ratings and completion date and time
• UTM parameters, referral source, technical events and fields configured by the customer
• data sent through customer selected integrations, webhooks or APIs

3.4 Technical and usage data

• IP address, approximate country or region, time zone and language
• device type, browser, operating system, technical identifiers and security logs
• pages and functions used, session duration, errors and events
• referral URL, advertising parameters and analytics or attribution events after any required consent

3.5 Communications

We process messages, attachments, contact information and technical details provided through support, surveys or other correspondence.

4 Sources of data

• directly from the user during registration, payment, profile setup or contact
• automatically from the device, browser, cookies, local storage and service logs
• from Stripe, sign in providers, analytics, advertising, support and other connected services
• from an AdsQuiz customer who invited a person to a team or collected data through a quiz

5 Purposes and legal bases

5.1 Performance of a contract

We create accounts, provide authentication and AdsQuiz functions, store quizzes and responses, operate integrations, process subscriptions and payments, issue invoices and provide support.

5.2 Legal obligations

We process information for accounting and tax compliance, lawful authority requests, consumer and data protection duties and required documentation.

5.3 Legitimate interests

We process data for security, fraud and abuse prevention, diagnostics, stability, service improvement, legal claims and, where permitted, information to existing customers about similar features. These interests are balanced against the rights of affected individuals.

5.4 Consent

Consent is used for non essential analytics and advertising technologies, marketing communications where required, and other specifically described purposes. Consent may be withdrawn at any time with effect for the future.

6 Respondent data and sensitive data

The customer must tell respondents who it is, why data is collected, the applicable legal basis, recipients and retention period. The customer must collect only necessary data and correctly configure consent for marketing, cookies, pixels and transfers to third party systems.

The customer must not use AdsQuiz to collect special categories of personal data or criminal conviction data without an appropriate legal basis. The customer is responsible for explicit consent where required, transparency, minimisation, risk assessment and safeguards. Aiquiz OÜ may request evidence of lawfulness, suspend a quiz or remove unlawfully collected data.

7 Service providers and recipients

• DigitalOcean for the primary database, server infrastructure and backups in Frankfurt, Germany
• Amazon Web Services and Amazon S3 for images and files uploaded to quizzes in Europe Frankfurt, eu-central-1
• Cloudflare for DNS, CDN, attack protection and traffic management
• Stripe for payments, subscriptions, billing, tax calculations and fraud prevention
• Google for sign in, Google Analytics, Google Tag Manager and Google Sheets when used
• Meta Platforms and TikTok for advertising measurement and attribution after any required consent
• HelpCrunch for support and chat
• SendPulse for service and marketing emails
• FirstPromoter for the partner and referral programme
• Atlassian for internal task management, technical requests and workflows
• professional advisers, auditors, accountants, legal advisers and authorities where required by law

8 Customer selected integrations

Customers may send data to Google Sheets, CRM systems, Make, Apix-Drive, Telegram, webhooks, APIs and other systems. The transfer occurs on the customer's instruction. The customer is responsible for the recipient, legal basis, access settings and subsequent use by that third party.

9 Cookies and pixels

Essential technologies support authentication, security, user choices and service operation. Google Analytics, Meta Pixel and TikTok Pixel are blocked by the consent management mechanism until consent is obtained where required. Google Tag Manager manages tags, but non essential tags must not fire before the relevant choice. More information is provided in the Cookie Policy.

10 International transfers

The primary database, backups and S3 storage are located in Frankfurt, Germany. Some providers may have entities or support functions outside the EEA. Where required, transfers rely on an adequacy decision, European Commission Standard Contractual Clauses and supplementary technical and organisational measures.

11 Retention

• account data and content are retained while the account is active and as needed to provide the service
• after account deletion, active system data is deleted or anonymised within 30 days unless law or a dispute requires longer retention
• DigitalOcean backups are retained for up to 30 days and removed through scheduled rotation; residual copies may remain until that cycle ends
• accounting, payment and tax records are retained for at least seven years or longer where required by applicable law
• security logs, support records and consent evidence are retained only for a reasonably necessary period

12 Security

We use risk appropriate technical and organisational measures, including access control, permission separation, protected transmission, backups, logging and monitoring. No system is completely secure. Users are responsible for passwords, team permissions, API keys and secure integration settings.

13 Individual rights

Depending on the circumstances, a person may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent and complaint to a supervisory authority. Requests may be sent to info@adsquiz.io. Identity verification may be required. If a request concerns answers in a customer quiz, the requester should identify the quiz and normally contact its owner first.

14 Marketing and automated decisions

Marketing emails can be stopped through the unsubscribe link or by contacting us. This does not stop service, security or contractual messages. Aiquiz OÜ does not make solely automated decisions about users that produce legal or similarly significant effects unless separately disclosed. Customers are responsible for their own quiz logic, scoring and decisions based on answers.

15 Children

AdsQuiz accounts are intended for persons aged 18 or over. A customer collecting information from minors through a quiz is responsible for the legal basis, appropriate notice and parental or guardian consent where required.

16 Changes and complaints

The current version is published with its effective date. Material changes are communicated in an appropriate way where required by law. Questions may be sent to info@adsquiz.io. The principal supervisory authority for Aiquiz OÜ is the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, Estonia, https://www.aki.ee. A person may also contact the competent authority where they live or work.