Privacy Policy

WonderAds is operated by SKAJ Ventures GmbH (“we”, “us”, or “our”), the data controller responsible for your personal data. Our full contact details are listed in the Legal Notice.

For privacy-specific requests, you can reach us at privacy@wonderads.org.

We process your data under the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) – To create your account, deliver the subscription service, and process payments.
• Legitimate interests (Art. 6(1)(f) GDPR) – To maintain service security, prevent abuse, and improve the product.
• Legal obligation (Art. 6(1)(c) GDPR) – To retain invoicing and billing records as required by law.
• Consent (Art. 6(1)(a) GDPR) – Only where we explicitly ask for and receive your consent, such as for optional marketing communications.

• Providing and maintaining the WonderAds service
• Processing subscription payments via Stripe
• Sending transactional emails (account verification, password reset, invoices)
• Responding to support inquiries
• Detecting and preventing fraudulent or abusive activity

We do not sell your data to third parties. We do not use your data for advertising.

We share your data only with the following sub-processors, strictly to deliver the service:

• Stripe, Inc. (payment processing) – United States, covered by Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
• Vercel, Inc. (hosting & infrastructure) – United States, covered by Standard Contractual Clauses.
• Database hosting provider (PostgreSQL) – Data is stored in the EU where possible, covered by appropriate transfer mechanisms including Standard Contractual Clauses.

We may disclose your data if required by law or a valid court order. We will notify you unless legally prohibited from doing so.

WonderAds is hosted on infrastructure that may process data outside the European Economic Area (EEA). All transfers to third countries are safeguarded by one of the following mechanisms:

• EU Standard Contractual Clauses (SCCs)
• EU-U.S. or UK-U.S. Data Privacy Framework adequacy decisions
• Binding corporate rules

WonderAds uses only strictly necessary cookies required to operate the service — specifically a session cookie for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required for purely functional cookies.

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., billing records, which we retain for up to 10 years for tax compliance).

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Access – Request a copy of the personal data we hold about you.
• Rectification – Request correction of inaccurate data.
• Erasure – Request deletion of your data (“right to be forgotten”), subject to legal obligations.
• Restriction – Request that we limit how we process your data.
• Portability – Receive your data in a machine-readable format.
• Objection – Object to processing based on legitimate interests.
• Withdraw consent – Withdraw any consent given at any time, without affecting prior lawful processing.

To exercise any of these rights, email privacy@wonderads.org. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident, you additionally have the right to:

• Know what personal information is collected and why
• Delete personal information we hold about you
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To submit a verifiable consumer request, contact privacy@wonderads.org.

WonderAds is intended for business use and is not directed at children under the age of 16. We do not knowingly collect data from children.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via an in-app notice at least 14 days before the changes take effect. The “last updated” date at the top of this page will always reflect the current version.